cpsa 4.4.6 → 4.4.7
raw patch · 179 files changed
+74179/−34113 lines, 179 filesdep +deepseq
Dependencies added: deepseq
Files
- ChangeLog +16/−0
- NEWS +26/−1
- cpsa.cabal +117/−97
- cpsatst +2/−1
- doc/cpsa4manual.pdf binary
- doc/init/Makefile +1/−0
- doc/src/cpsa4manual/declarations.tex +81/−0
- doc/src/cpsa4manual/macros.tex +1/−1
- doc/src/macros.tex +1/−1
- src/CPSA/Algebra.hs +28/−1
- src/CPSA/Cohort.hs +30/−26
- src/CPSA/Diff/Main.hs +27/−4
- src/CPSA/Displayer.hs +8/−2
- src/CPSA/GenRules.hs +2/−1
- src/CPSA/Graph/Loader.hs +6/−2
- src/CPSA/Lib/SExpr.hs +71/−1
- src/CPSA/Lib/Utilities.hs +9/−0
- src/CPSA/LoadFormulas.hs +4/−4
- src/CPSA/Loader.hs +24/−18
- src/CPSA/Protocol.hs +9/−3
- src/CPSA/Reduction.hs +35/−27
- src/CPSA/SAS/SAS.hs +6/−2
- src/CPSA/Strand.hs +375/−145
- tst/DH_hack.tst +25/−1
- tst/Make4.hs +0/−272
- tst/ab.tst +4/−1
- tst/abc.tst +5/−1
- tst/aik.tst +18/−1
- tst/atomic-open-closed.tst +201/−137
- tst/attest.tst +58/−13
- tst/auth-enc.tst +3/−1
- tst/auth-hash.tst +3/−1
- tst/blanchet-strandmax.tst +67/−1
- tst/blanchet.tst +67/−1
- tst/blanchet_doorsep.tst +21/−5
- tst/bug_example.tst +15/−1
- tst/cert_lang.tst +11/−3
- tst/chan-envelope.tst +133/−28
- tst/chan-perrig-song.tst +3/−1
- tst/chan-unilateral.tst +7/−1
- tst/chan-yahalom-role-decl.tst +69/−1
- tst/chan-yahalom.tst +124/−1
- tst/commitment.tst +12/−1
- tst/comp_test.tst +63/−9
- tst/completeness-test.tst +11/−1
- tst/crushing.tst +15/−1
- tst/dass_simple.tst +13/−1
- tst/defact-atomic-open-closed.tst +1666/−0
- tst/defact-atomic-open-closed_shapes.tst +968/−0
- tst/defact-dhstatic-state.tst +2913/−0
- tst/defact-dhstatic-state_shapes.tst +390/−0
- tst/defact-locn_envelope.tst +5135/−0
- tst/defact-locn_envelope_shapes.tst +1919/−0
- tst/defact-open-closed-multiloc.tst +857/−0
- tst/defact-open-closed-multiloc_shapes.tst +494/−0
- tst/defact-open-closed-tag.tst +1158/−0
- tst/defact-open-closed-tag_shapes.tst +669/−0
- tst/defact-open-closed.tst +926/−0
- tst/defact-open-closed_shapes.tst +491/−0
- tst/defact-subatomic-open-closed-test-genrule.tst +1722/−0
- tst/defact-subatomic-open-closed-test-genrule_shapes.tst +1055/−0
- tst/defact-subatomic-open-closed.tst +1794/−0
- tst/defact-subatomic-open-closed_shapes.tst +694/−0
- tst/defact-sync_locn_envelope.tst +3195/−0
- tst/defact-sync_locn_envelope_shapes.tst +731/−0
- tst/denning-sacco.tst +6/−1
- tst/deorig_contract.tst +3/−1
- tst/deorig_mesg.tst +2/−1
- tst/deorig_simple.tst +2/−1
- tst/dh-ca_hack.tst +235/−1
- tst/dh_encrypt_hack.tst +32/−1
- tst/dh_group_sig.tst +113/−1
- tst/dh_group_sig_auth_failure.tst +33/−1
- tst/dh_mim_hack.tst +26/−1
- tst/dhnsl_hack.tst +31/−1
- tst/dhstatic-state.tst +231/−7
- tst/disclosure.tst +4/−1
- tst/doorsep.tst +11/−3
- tst/doorsep2invk.tst +71/−22
- tst/dy.tst too large to diff
- tst/encsig.tst +9/−1
- tst/envelope.tst +177/−34
- tst/epmo-hash.tst +44/−1
- tst/epmo-key-hash.tst +44/−1
- tst/epmo.tst +57/−1
- tst/epmo_acctnum-key-hash.tst +81/−1
- tst/epmo_acctnum.tst +949/−1
- tst/expand.tst +1/−1
- tst/facts.tst +36/−3
- tst/factvar.tst +4/−1
- tst/ffgg.tst +5/−1
- tst/fluffy_draft03_gske.tst +44/−19
- tst/fragile_pruning.tst +172/−1
- tst/goals.tst +427/−239
- tst/goalsvar.scm +229/−0
- tst/goalsvar.tst +1358/−0
- tst/hashtest-key-hash.tst +4/−1
- tst/hashtest.tst +4/−1
- tst/incompleteness_example.tst +2/−1
- tst/isoreject-corrected.tst +4/−1
- tst/isoreject.tst +4/−1
- tst/kelly1.tst +13/−1
- tst/kerberos.tst +25/−1
- tst/locn_envelope.tst +298/−55
- tst/mass.tst +9/−1
- tst/mass2.tst +9/−1
- tst/missing_contraction.tst +7/−1
- tst/neq_test.tst +3/−1
- tst/neuman-stubblebine-reauth.tst +22302/−20982
- tst/neuman-stubblebine.tst +14/−1
- tst/no_contraction.tst +3/−1
- tst/non_transforming.tst +9/−1
- tst/nonaug-prune.tst +38/−1
- tst/ns-l.tst +17/−1
- tst/ns-rebinding.scm +8/−0
- tst/ns-rebinding.tst +215/−19
- tst/ns-unrebinding.scm +81/−0
- tst/ns-unrebinding.tst +694/−0
- tst/ns.tst +42/−3
- tst/nsl3.tst +109/−1
- tst/nslsk.tst +9/−1
- tst/open-closed-multiloc.tst +101/−57
- tst/open-closed-tag.tst +126/−66
- tst/open-closed.tst +116/−68
- tst/or.tst +6/−1
- tst/ordered.tst +7/−5
- tst/orderedvar.scm +39/−0
- tst/orderedvar.tst +99/−0
- tst/pca.tst +27/−1
- tst/pen-non-orig-test.tst +4/−1
- tst/pfs-via-pubkey.tst +8/−1
- tst/pkinit.tst +5/−1
- tst/preprocess.tst +7/−1
- tst/print.tst +1/−1
- tst/prottrans.tst +29/−6
- tst/pruning1.tst +5/−1
- tst/puzzle_example.tst +17/−1
- tst/reflect.tst +20/−1
- tst/renamings.tst +9/−1
- tst/role_uniq.tst +19/−1
- tst/rule-node.tst +11/−6
- tst/rule-order.tst +2/−1
- tst/sigenc.tst +13/−1
- tst/sorted_epmo_acctnum.tst +853/−1
- tst/sts.tst +37/−1
- tst/sts_non_role.tst +1492/−0
- tst/sts_weakened_reflect.tst +29/−1
- tst/subatomic-open-closed-test-genrule.tst +89/−24
- tst/subatomic-open-closed.tst +89/−24
- tst/sync_locn_envelope.tst +213/−13
- tst/targetterms1.tst +3/−1
- tst/targetterms2.tst +11/−1
- tst/targetterms6.tst +9/−1
- tst/targetterms8.tst +4/−1
- tst/thisthat.tst +33/−1
- tst/tickle-unique.tst +8/−5
- tst/timestamping.tst +37/−1
- tst/tmp-yahalom.tst +362/−0
- tst/trust-anchor.tst +4/−1
- tst/ugen-at.tst +14/−1
- tst/ugo.tst +9/−1
- tst/uncarried_keys.tst +4/−1
- tst/unilateral.tst +33/−1
- tst/uniq-at.tst +14/−1
- tst/uniq-gen-test.tst +5/−1
- tst/uo.tst +2/−1
- tst/wang-hash.tst +63/−1
- tst/wang-key-hash.tst +72/−1
- tst/weird.tst +5/−1
- tst/wide-mouth-frog-scyther.tst +10/−1
- tst/wide-mouth-frog.tst +10/−1
- tst/wonthull.tst +15/−2
- tst/wonthull2.tst +12796/−11549
- tst/wonthull3.tst +59/−1
- tst/woolam.tst +12/−1
- tst/yahalom-6.3.6.tst +31/−1
- tst/yahalom-forward.tst +50/−1
- tst/yahalom.tst +60/−1
- tst/yes-or-no.tst +7/−1
ChangeLog view
@@ -1,3 +1,19 @@+2025-09-24 Joshua D. Guttman <guttman@mitre.org>++ * Tagged as real4.4.7. Small updates including improved error+ messages for users with complicated Diffie-Hellman protocols,+ subtle corrections to determining when homomorphism exists, and+ clean ups for the early stages of an analysis. See NEWS. ++2025-05-05 Joshua D. Guttman <guttman@mitre.org>++ * cpsa.cabal (Version): Tagged as version 4.4.6. Removed an+ obscure bug in which the generators were used wrong, causing a+ unification failure. We improved the generalization code to avoid+ redundancies. We improved the overall functionality by allowing+ state operations in which stores are not preceded by a load on+ that location.+ 2025-05-02 John D. Ramsdell <ramsdell@mitre.org> * src/cpsa/RoleCoq/Main.hs (emit): Updated Roletran to use rocq
NEWS view
@@ -1,9 +1,34 @@ CPSA NEWS -- history of user-visible changes. +* Changes in version 4.4.7++** Improved error messages for users specifying+ protocols using DH random values in more complicated ways.++** Corrected subtle aspects of the code to determine+ whether a strand map induces a homomorphism between+ skeletons.++** Cleaned up the early phases of a protocol analysis query.+ Now each skeleton in an analysis (other than the initial+ (pre)skeleton) has that initial skeleton as its point of+ view pov. The strand map from that point of view is+ available in the prob field.++ This was false previously if the user's query was a+ preskeleton but not a skeleton, in which case the pov was+ the resulting skeleton. If skeletonization could succeed+ in different ways, then the parts of the tree that+ descended from each had different povs.++** Strand maps and environments are now printed for all skeletons,+ not just those at the fringe. This information is brief,+ and helps ensure predictable results.+ * Changes in version 4.4.6 ** Removed an obscure bug in which the generators- were used wrong, causing a unification failure. + were used wrong, causing a unification failure. ** We improved the generalization code to avoid redundancies.
cpsa.cabal view
@@ -1,5 +1,5 @@ Name: cpsa-Version: 4.4.6+Version: 4.4.7 Maintainer: guttman@mitre.org Cabal-Version: >= 1.10 License: BSD3@@ -153,103 +153,123 @@ src/ocaml/main.mli src/ocaml/pp.ml src/ocaml/token.ml src/ocaml/token.mli src/ocaml/scanner.mll src/ocaml/sexpr.ml src/ocaml/sexpr.mli src/ocaml/sexpr_type.ml tst/README tst/Makefile- tst/DH_hack.scm tst/DH_hack.tst tst/Make4.hs tst/ab.scm tst/ab.tst- tst/abc.scm tst/abc.tst tst/aik.scm tst/aik.tst- tst/atomic-open-closed.scm tst/atomic-open-closed.tst tst/attest.scm- tst/attest.tst tst/auth-enc.scm tst/auth-enc.tst tst/auth-hash.scm- tst/auth-hash.tst tst/blanchet-strandmax.scm- tst/blanchet-strandmax.tst tst/blanchet.scm tst/blanchet.tst- tst/blanchet_doorsep.prot tst/blanchet_doorsep.tst- tst/bug_example.scm tst/bug_example.tst tst/cert_lang.scm- tst/cert_lang.tst tst/chan-envelope.scm tst/chan-envelope.tst- tst/chan-perrig-song.scm tst/chan-perrig-song.tst- tst/chan-unilateral.scm tst/chan-unilateral.tst- tst/chan-yahalom-role-decl.scm tst/chan-yahalom-role-decl.tst- tst/chan-yahalom.scm tst/chan-yahalom.tst tst/commitment.scm- tst/commitment.tst tst/comp_test.scm tst/comp_test.tst- tst/completeness-test.scm tst/completeness-test.tst tst/crushing.scm- tst/crushing.tst tst/dass-mod.lisp tst/dass.lisp tst/dass_simple.scm- tst/dass_simple.tst tst/denning-sacco.scm tst/denning-sacco.tst- tst/deorig_contract.scm tst/deorig_contract.tst tst/deorig_mesg.scm- tst/deorig_mesg.tst tst/deorig_simple.scm tst/deorig_simple.tst- tst/dh-ca_hack.scm tst/dh-ca_hack.tst tst/dh_encrypt_hack.scm- tst/dh_encrypt_hack.tst tst/dh_group_sig.scm tst/dh_group_sig.tst- tst/dh_group_sig_auth_failure.scm tst/dh_group_sig_auth_failure.tst- tst/dh_mim.lisp tst/dh_mim_hack.scm tst/dh_mim_hack.tst- tst/dhke2.lisp tst/dhnsl_hack.scm- tst/dhnsl_hack.tst tst/dhstatic-state.scm tst/dhstatic-state.tst- tst/disclosure.scm tst/disclosure.tst tst/doorsep.scm- tst/doorsep.tst tst/doorsep2invk.scm tst/doorsep2invk.tst- tst/ds-short.lisp tst/dy.lsp tst/dy.tst tst/encsig.scm- tst/encsig.tst tst/envelope.scm tst/envelope.tst tst/epmo-hash.scm- tst/epmo-hash.tst tst/epmo-key-hash.scm tst/epmo-key-hash.tst- tst/epmo.scm tst/epmo.tst tst/epmo_acctnum-key-hash.scm- tst/epmo_acctnum-key-hash.tst tst/epmo_acctnum.lsp- tst/epmo_acctnum.tst tst/example.tst tst/expand.scm tst/expand.tst- tst/facts.scm tst/facts.tst tst/factvar.scm tst/factvar.tst- tst/ffgg.scm tst/ffgg.tst tst/fluffy_draft03_gske.scm- tst/fluffy_draft03_gske.tst tst/fragile_pruning.scm- tst/fragile_pruning.tst tst/goals.scm tst/goals.tst- tst/hashtest-key-hash.scm tst/hashtest-key-hash.tst tst/hashtest.scm- tst/hashtest.tst tst/incompleteness_example.scm- tst/incompleteness_example.tst tst/isoreject-corrected.scm- tst/isoreject-corrected.tst tst/isoreject.scm tst/isoreject.tst- tst/jdg-wonthull.tst tst/kelly1.scm tst/kelly1.tst tst/kelly64.lisp- tst/kerb5.lisp tst/kerberos-variant-guar.tst tst/kerberos.scm- tst/kerberos.tst tst/locn_envelope.scm tst/locn_envelope.tst- tst/mass.lsp tst/mass.tst tst/mass2.lsp tst/mass2.tst- tst/missing_contraction.scm tst/missing_contraction.tst- tst/neq_test.scm tst/neq_test.tst tst/neuman-stubblebine-alt.lisp- tst/neuman-stubblebine-reauth-tagged.tst- tst/neuman-stubblebine-reauth.lisp tst/neuman-stubblebine-reauth.lsp- tst/neuman-stubblebine-reauth.tst tst/neuman-stubblebine.scm- tst/neuman-stubblebine.tst tst/no_contraction.scm- tst/no_contraction.tst tst/non_transforming.scm- tst/non_transforming.tst tst/nonaug-prune.scm tst/nonaug-prune.tst- tst/ns-l.scm tst/ns-l.tst tst/ns-rebinding.scm tst/ns-rebinding.tst- tst/ns.scm tst/ns.tst tst/nsl3.scm tst/nsl3.tst tst/nsl4.lisp- tst/nsl4cm1.lisp tst/nsl4init.lisp tst/nsl4resp1.lisp- tst/nsl4resp2.lisp tst/nsl4resp3.lisp tst/nsl5.lisp tst/nsl5i.lisp- tst/nsl5resp3.lisp tst/nslsk.scm tst/nslsk.tst- tst/open-closed-multiloc.scm tst/open-closed-multiloc.tst- tst/open-closed-tag.scm tst/open-closed-tag.tst tst/open-closed.scm- tst/open-closed.tst tst/or.scm tst/or.tst tst/ordered.scm- tst/ordered.tst tst/pca.scm tst/pca.tst tst/pen-non-orig-test.scm- tst/pen-non-orig-test.tst tst/pfs-via-pubkey.scm- tst/pfs-via-pubkey.tst tst/pkinit.scm tst/pkinit.tst- tst/preprocess.scm tst/preprocess.tst tst/print.scm tst/print.tst- tst/prottrans.scm tst/prottrans.tst tst/pruning1.scm- tst/pruning1.tst tst/puzzle_example.scm tst/puzzle_example.tst- tst/reflect.scm tst/reflect.tst tst/renamings.scm tst/renamings.tst- tst/role_uniq.scm tst/role_uniq.tst tst/rule-node.scm- tst/rule-node.tst tst/rule-order.scm tst/rule-order.tst tst/sa.tst- tst/sigenc.scm tst/sigenc.tst tst/sorted_epmo_acctnum.scm- tst/sorted_epmo_acctnum.tst tst/sts.scm tst/sts.tst- tst/sts_non_role.scm tst/sts_weakened_reflect.scm- tst/sts_weakened_reflect.tst tst/subatomic-open-closed-dist.tst+ tst/ab.scm tst/abc.scm tst/aik.scm tst/atomic-open-closed.scm+ tst/attest.scm tst/auth-enc.scm tst/auth-hash.scm+ tst/blanchet-strandmax.scm tst/blanchet.scm tst/bug_example.scm+ tst/cert_lang.scm tst/chan-envelope.scm tst/chan-perrig-song.scm+ tst/chan-unilateral.scm tst/chan-yahalom-role-decl.scm+ tst/chan-yahalom.scm tst/commitment.scm tst/comp_test.scm+ tst/completeness-test.scm tst/crushing.scm tst/dass_simple.scm+ tst/denning-sacco.scm tst/deorig_contract.scm tst/deorig_mesg.scm+ tst/deorig_simple.scm tst/dh_encrypt_hack.scm+ tst/dh_group_sig_auth_failure.scm tst/dh_group_sig.scm+ tst/DH_hack.scm tst/dh_mim_hack.scm tst/dh-ca_hack.scm+ tst/dhnsl_hack.scm tst/dhstatic-state.scm tst/disclosure.scm+ tst/doorsep.scm tst/doorsep2invk.scm tst/encsig.scm tst/envelope.scm+ tst/epmo_acctnum-key-hash.scm tst/epmo-hash.scm+ tst/epmo-key-hash.scm tst/epmo.scm tst/expand.scm tst/facts.scm+ tst/factvar.scm tst/ffgg.scm tst/fluffy_draft03_gske.scm+ tst/fragile_pruning.scm tst/goals.scm tst/goalsvar.scm+ tst/hashtest-key-hash.scm tst/hashtest.scm+ tst/incompleteness_example.scm tst/isoreject-corrected.scm+ tst/isoreject.scm tst/kelly1.scm tst/kerberos.scm+ tst/locn_envelope.scm tst/missing_contraction.scm tst/neq_test.scm+ tst/neuman-stubblebine.scm tst/no_contraction.scm+ tst/non_transforming.scm tst/nonaug-prune.scm tst/ns-l.scm+ tst/ns-rebinding.scm tst/ns-unrebinding.scm tst/ns.scm tst/nsl3.scm tst/nslsk.scm+ tst/open-closed-multiloc.scm tst/open-closed-tag.scm+ tst/open-closed.scm tst/or.scm tst/ordered.scm tst/orderedvar.scm+ tst/pca.scm tst/pen-non-orig-test.scm tst/pfs-via-pubkey.scm+ tst/pkinit.scm tst/preprocess.scm tst/print.scm tst/prottrans.scm+ tst/pruning1.scm tst/puzzle_example.scm tst/reflect.scm+ tst/renamings.scm tst/role_uniq.scm tst/rule-node.scm+ tst/rule-order.scm tst/sigenc.scm tst/sorted_epmo_acctnum.scm+ tst/sts_non_role.scm tst/sts_weakened_reflect.scm tst/sts.scm tst/subatomic-open-closed-test-genrule.scm+ tst/subatomic-open-closed.scm tst/sync_locn_envelope.scm+ tst/targetterms1.scm tst/targetterms2.scm tst/targetterms6.scm+ tst/targetterms8.scm tst/thisthat.scm tst/tickle-unique.scm+ tst/timestamping.scm tst/trust-anchor.scm tst/ugen-at.scm+ tst/ugo.scm tst/uncarried_keys.scm tst/unilateral.scm+ tst/uniq-at.scm tst/uniq-gen-test.scm tst/uo.scm tst/wang-hash.scm+ tst/wang-key-hash.scm tst/weird.scm tst/wonthull.scm+ tst/wonthull2.scm tst/wonthull3.scm tst/woolam.scm+ tst/yahalom-6.3.6.scm tst/yahalom-forward.scm tst/yahalom.scm+ tst/yes-or-no.scm+ tst/dass-mod.lisp tst/dass.lisp tst/dh_mim.lisp tst/dhke2.lisp+ tst/ds-short.lisp tst/kelly64.lisp tst/kerb5.lisp+ tst/neuman-stubblebine-alt.lisp tst/neuman-stubblebine-reauth.lisp+ tst/nsl4.lisp tst/nsl4cm1.lisp tst/nsl4init.lisp tst/nsl4resp1.lisp+ tst/nsl4resp2.lisp tst/nsl4resp3.lisp tst/nsl5.lisp tst/nsl5i.lisp+ tst/nsl5resp3.lisp tst/tnsl5.lisp tst/wang.lisp + tst/dy.lsp tst/epmo_acctnum.lsp tst/mass.lsp tst/mass2.lsp+ tst/neuman-stubblebine-reauth.lsp tst/wide-mouth-frog-scyther.lsp+ tst/wide-mouth-frog.lsp + tst/blanchet_doorsep.prot+ tst/ab.tst tst/abc.tst tst/aik.tst tst/atomic-open-closed.tst+ tst/attest.tst tst/auth-enc.tst tst/auth-hash.tst+ tst/blanchet_doorsep.tst tst/blanchet-strandmax.tst tst/blanchet.tst+ tst/bug_example.tst tst/cert_lang.tst tst/chan-envelope.tst+ tst/chan-perrig-song.tst tst/chan-unilateral.tst+ tst/chan-yahalom-role-decl.tst tst/chan-yahalom.tst+ tst/commitment.tst tst/comp_test.tst tst/completeness-test.tst+ tst/crushing.tst tst/dass_simple.tst+ tst/defact-atomic-open-closed_shapes.tst+ tst/defact-atomic-open-closed.tst+ tst/defact-dhstatic-state_shapes.tst tst/defact-dhstatic-state.tst+ tst/defact-locn_envelope_shapes.tst tst/defact-locn_envelope.tst+ tst/defact-open-closed_shapes.tst+ tst/defact-open-closed-multiloc_shapes.tst+ tst/defact-open-closed-multiloc.tst+ tst/defact-open-closed-tag_shapes.tst tst/defact-open-closed-tag.tst+ tst/defact-open-closed.tst+ tst/defact-subatomic-open-closed_shapes.tst+ tst/defact-subatomic-open-closed-test-genrule_shapes.tst+ tst/defact-subatomic-open-closed-test-genrule.tst+ tst/defact-subatomic-open-closed.tst+ tst/defact-sync_locn_envelope_shapes.tst+ tst/defact-sync_locn_envelope.tst tst/denning-sacco.tst+ tst/deorig_contract.tst tst/deorig_mesg.tst tst/deorig_simple.tst+ tst/dh_encrypt_hack.tst tst/dh_group_sig_auth_failure.tst+ tst/dh_group_sig.tst tst/DH_hack.tst tst/dh_mim_hack.tst+ tst/dh-ca_hack.tst tst/dhnsl_hack.tst tst/dhstatic-state.tst+ tst/disclosure.tst tst/doorsep.tst tst/doorsep2invk.tst tst/dy.tst+ tst/encsig.tst tst/envelope.tst tst/epmo_acctnum-key-hash.tst+ tst/epmo_acctnum.tst tst/epmo-hash.tst tst/epmo-key-hash.tst+ tst/epmo.tst tst/example.tst tst/expand.tst tst/facts.tst+ tst/factvar.tst tst/ffgg.tst tst/fluffy_draft03_gske.tst+ tst/fragile_pruning.tst tst/goals.tst tst/goalsvar.tst+ tst/hashtest-key-hash.tst tst/hashtest.tst+ tst/incompleteness_example.tst tst/isoreject-corrected.tst+ tst/isoreject.tst tst/jdg-wonthull.tst tst/kelly1.tst+ tst/kerberos-variant-guar.tst tst/kerberos.tst tst/locn_envelope.tst+ tst/mass.tst tst/mass2.tst tst/missing_contraction.tst+ tst/neq_test.tst tst/neuman-stubblebine-reauth-tagged.tst+ tst/neuman-stubblebine-reauth.tst tst/neuman-stubblebine.tst+ tst/no_contraction.tst tst/non_transforming.tst tst/nonaug-prune.tst+ tst/ns-l.tst tst/ns-rebinding.tst tst/ns-unrebinding.tst tst/ns.tst tst/nsl3.tst+ tst/nslsk.tst tst/open-closed-multiloc.tst tst/open-closed-tag.tst+ tst/open-closed.tst tst/or.tst tst/ordered.tst tst/orderedvar.tst+ tst/pca.tst tst/pen-non-orig-test.tst tst/pfs-via-pubkey.tst+ tst/pkinit.tst tst/preprocess.tst tst/print.tst tst/prottrans.tst+ tst/pruning1.tst tst/puzzle_example.tst tst/reflect.tst+ tst/renamings.tst tst/role_uniq.tst tst/rule-node.tst+ tst/rule-order.tst tst/sa.tst tst/sigenc.tst+ tst/sorted_epmo_acctnum.tst tst/sts_non_role.tst+ tst/sts_weakened_reflect.tst tst/sts.tst+ tst/subatomic-open-closed-dist.tst tst/subatomic-open-closed-test-genrule.tst- tst/subatomic-open-closed.scm tst/subatomic-open-closed.tst- tst/sync_locn_envelope.scm tst/sync_locn_envelope.tst- tst/targetterms1.scm tst/targetterms1.tst tst/targetterms2.scm- tst/targetterms2.tst tst/targetterms6.scm tst/targetterms6.tst- tst/targetterms8.scm tst/targetterms8.tst tst/thisthat.scm- tst/thisthat.tst tst/tickle-unique.scm tst/tickle-unique.tst- tst/timestamping.scm tst/timestamping.tst tst/tnsl5.lisp- tst/trust-anchor.scm tst/trust-anchor.tst tst/ugen-at.scm- tst/ugen-at.tst tst/ugo.scm tst/ugo.tst tst/uncarried_keys.scm- tst/uncarried_keys.tst tst/unilateral.scm tst/unilateral.tst- tst/uniq-at.scm tst/uniq-at.tst tst/uniq-gen-test.scm- tst/uniq-gen-test.tst tst/uo.scm tst/uo.tst tst/wang-hash.scm- tst/wang-hash.tst tst/wang-key-hash.scm tst/wang-key-hash.tst- tst/wang.lisp tst/weird.scm tst/weird.tst- tst/wide-mouth-frog-scyther.lsp tst/wide-mouth-frog-scyther.tst- tst/wide-mouth-frog.lsp tst/wide-mouth-frog.tst tst/wonthull.scm- tst/wonthull.tst tst/wonthull2.scm tst/wonthull2.tst- tst/wonthull3.scm tst/wonthull3.tst tst/woolam.scm tst/woolam.tst- tst/yahalom-6.3.6.scm tst/yahalom-6.3.6.tst tst/yahalom-forward.scm- tst/yahalom-forward.tst tst/yahalom.scm tst/yahalom.tst- tst/yes-or-no.scm tst/yes-or-no.tst+ tst/subatomic-open-closed.tst tst/sync_locn_envelope.tst+ tst/targetterms1.tst tst/targetterms2.tst tst/targetterms6.tst+ tst/targetterms8.tst tst/thisthat.tst tst/tickle-unique.tst+ tst/timestamping.tst tst/tmp-yahalom.tst tst/trust-anchor.tst+ tst/ugen-at.tst tst/ugo.tst tst/uncarried_keys.tst+ tst/unilateral.tst tst/uniq-at.tst tst/uniq-gen-test.tst tst/uo.tst+ tst/wang-hash.tst tst/wang-key-hash.tst tst/weird.tst+ tst/wide-mouth-frog-scyther.tst tst/wide-mouth-frog.tst+ tst/wonthull.tst tst/wonthull2.tst tst/wonthull3.tst tst/woolam.tst+ tst/yahalom-6.3.6.tst tst/yahalom-forward.tst tst/yahalom.tst+ tst/yes-or-no.tst coq/Sem_tactics.v coq/Comp.v coq/Alt_sem.v coq/Match.v coq/Alg.v coq/Exec.v coq/Intro.v coq/Nonce.v coq/Preamble.v coq/Unilateral_proof.v coq/Makefile coq/Run.v coq/procdoc.tex@@ -281,7 +301,7 @@ Executable cpsa4 Main-Is: CPSA/Main.hs Default-Language: Haskell2010- Build-Depends: base >= 4.13 && < 5, containers, parallel+ Build-Depends: base >= 4.13 && < 5, containers, parallel, deepseq GHC-Options: -Wall -fno-warn-name-shadowing -fwarn-unused-imports -threaded -rtsopts Hs-Source-Dirs: src
cpsatst view
@@ -12,12 +12,13 @@ # ./cpsagraphall CPSAFLAGS="+RTS -M512m -N -RTS"+CPSADIFF= TST=${1:-tst} # Analyze the results of a CPSA run. analyze () { echo cpsa4diff "$1.tst" "$1.txt"- cabal run cpsa4diff -v0 -- "$1.tst" "$1.txt"+ cabal run cpsa4diff -v0 -- ${CPSADIFF} "$1.tst" "$1.txt" echo cpsa4graph -o "$1.xhtml" "$1.txt" cabal run cpsa4graph -v0 -- -o "$1.xhtml" "$1.txt" echo cpsa4shapes -o "${1}_shapes.txt" "$1.txt"
doc/cpsa4manual.pdf view
binary file changed (1049166 → 1053746 bytes)
doc/init/Makefile view
@@ -1,4 +1,5 @@ CPSAFLAGS = +RTS -M512m -N -RTS+GRAPHFLAGS = -p SRCS := $(wildcard *.scm) $(wildcard *.prot) $(wildcard *.lsp)
doc/src/cpsa4manual/declarations.tex view
@@ -174,6 +174,87 @@ %z \end{itemize} +\section{Declaring skeletons}+\label{sec:defskeleton}++\ttindex{defskeleton} To ask {\cpsa} a query, one uses a+\texttt{defskeleton} form. The detailed syntax definition is in+Table~\ref{tab:syntax}. We give here a summary of the core elements+and how to use them. A \texttt{defskeleton} form such as those in+Figs.~\ref{fig:ns init pov}--\ref{fig:ns resp pov} has the form+%+\begin{center}+ \tt+ \begin{tabular}{l}+ (defskeleton prot-name \\+ \quad (vars ...) \\+ \quad strand-decls ... \\+ \quad assumptions ... \\+ \quad comments)+ \end{tabular}+\end{center}+%+\texttt{prot-name} is the name of the protocol. The \texttt{(vars+ ...)} give the names and sorts of the values appearing in the+resulting skeleton, for instance values that may be parameters of one+or more role instances in the skeleton, and may appear in the+assumptions. The assumptions include unique origination and+non-origination claims, as well as channel properties and state+annotations (Chapter~\ref{chap:channels:state}) and facts+(Section~\ref{sec:facts}). Comments are for the convenience of the+specifier. The \texttt{strand-decls} consist of one or more forms+%+\begin{itemize}+ \item \texttt{(defstrand role height bindings)} for an instance of+ \texttt{role} of the given height,\ttindex{defstrand}+ \item \texttt{(defstrandmax role bindings)} to indicate an instance of+ \texttt{role} of its full maximum height, or\ttindex{defstrandmax}+ \item \texttt{(deflistener t)} to indicate that the term \texttt{t}+ is heard transmitted publicly.\ttindex{deflistener} +\end{itemize}+%+Generally, a \texttt{defskeleton} $q$ containing a+\texttt{(deflistener t)} declaration is used to see whether the term+\texttt{t} remains confidential in the situation described by the+remainder $q'$ of the \texttt{defskeleton}. If {\cpsa} determines that+there are no shapes for this query, then there is no extension of $q'$+in which the participants emit messages allowing the adversary to+extract \texttt{t}. Typically, this is what the specifier intends to+find: These are non-disclosure queries. ++A \texttt{defskeleton} form most frequently contains a single+\texttt{defstrand} or \texttt{defstrandmax}, in which case {\cpsa}+will determine what other behaviors this participant can rely on+having occurred when a run of this role takes this number of steps.+Thus, it determines what is learnt \emph{from the point of view} of+this participant. These are authentication queries from that+participant's point of view.++When a single-strand authentication query gives some information about+other local sessions, but we would like also to know whether+additional conclusions follow if we assume unique origination or+non-origination for values in those local sessions, then we can would+use multiple \texttt{defstrand}s.++The bindings (aka ``maplets'') in a strand declaration are pairs+\texttt{(p v)} where \texttt{p} is a parameter of the role being+declared and \texttt{v} is a value defined from the variables declared+for this skeleton. Most often \texttt{v} just is one of these+variables. These bindings can be confusing, since the role parameter+and the variable in the skeleton may have the same name, so we have a+binding \texttt{(b b)} or \texttt{(n1 n1)}, as in Fig.~\ref{fig:ns+ init pov}. However, the two \texttt{b}s are different: The first+is the parameter declared in the \texttt{init} role in+Fig.~\ref{fig:ns defprotocol}, while the second is the skeleton+variable declared in the variable form \texttt{(vars (b name) (n1+ text))}. A binding must appear in the strand declaration only if we+need to assert something about it. In Fig.~\ref{fig:ns init pov},+those two bindings appear because the skeleton variable \texttt{n1} is+assumed uniquely originating, and \texttt{b} appears because+\texttt{(privk b)} is assumed non-originating. Any other parameters+may be omitted, in which case {\cpsa} supplies an unconstrained value+for it. + \iffalse \section{Distinctness assumptions}
doc/src/cpsa4manual/macros.tex view
@@ -3,7 +3,7 @@ {\setcounter{running}{\value{enumi}}\end{enumerate}} \newcommand{\cpsa}{\textsc{cpsa}}-\newcommand{\version}{4.4.6}+\newcommand{\version}{4.4.7} \newcommand{\cpsacopying}{\begingroup \renewcommand{\thefootnote}{}\footnotetext{{\copyright} 2016--2022 The MITRE Corporation. Permission to copy without fee all or part of
doc/src/macros.tex view
@@ -1,5 +1,5 @@ \newcommand{\cpsa}{\textsc{cpsa}}-\newcommand{\version}{4.4.6}+\newcommand{\version}{4.4.7} \newcommand{\cpsacopying}{\begingroup \renewcommand{\thefootnote}{}\footnotetext{{\copyright} 2010 The MITRE Corporation. Permission to copy without fee all or part of
src/CPSA/Algebra.hs view
@@ -144,11 +144,14 @@ match, unmatchedVarsWithin, envsAgreeOutside,+ varsMinusEnvDomain,+ envDisjointExtension, envOfParamVarPairs, substitution, strandBoundEnv, renamerAndNewVars, envIdentityOnVars,+ envStrandsWithin, reify, matchRename, substUpdate,@@ -718,7 +721,7 @@ any (subterm t) u subterm (I x) (G t') = M.member x t'-subterm (G t) (G t') | isBasisVar t = -- For constituent. COULD ALSO BE : isGroupVar+subterm (G t) (G t') | isGroupVar t = -- For constituent. COULD ALSO BE : isBasisVar M.member (getGroupVar t) t' subterm _ _ = False @@ -1728,6 +1731,11 @@ -- problems = filter (not . (flip elem vars)) unmatchedIds unmatchedIds = idUnmapped r t +varsMinusEnvDomain :: Env -> [Term] -> [Term]+varsMinusEnvDomain (Env (_, r)) =+ filter (\v -> isVar v &&+ not(idMapped r v))+ envsAgreeOutside :: Env -> Env -> [Term] -> Bool envsAgreeOutside (Env (_, r1)) (Env (_, r2)) vars = idMapsAgreeOutside r1 r2 ids@@ -1745,6 +1753,25 @@ envIdentityOnVars :: [Term] -> Env envIdentityOnVars vars = envOfParamVarPairs $ L.zip vars vars++envStrandsWithin :: Env -> [Int] -> Bool+envStrandsWithin (Env (_, r)) strands =+ M.foldr f True r+ where+ f (Z i) soFar = soFar && elem i strands+ f _ soFar = soFar++-- Is e2 the disjoint union of e1 with an environment with disjoint+-- domain? I.e., is the domain of e1 a subset of the domain of e2,+-- and e2 agrees with e1 on the domain of e1? ++envDisjointExtension :: Env -> Env -> Bool+envDisjointExtension (Env (_, r1)) (Env (_, r2)) =+ subset d1 d2 && + idMapsAgreeOutside r1 r2 d1+ where+ d1 = idMapDomain r1+ d2 = idMapDomain r2 -- Apply a substitution to the range of an environment substUpdate :: Env -> Subst -> Env
src/CPSA/Cohort.hs view
@@ -5,13 +5,6 @@ -- This program is free software: you can redistribute it and/or -- modify it under the terms of the BSD License as published by the -- University of California.-{-# OPTIONS_GHC -Wno-unrecognised-pragmas #-}-{-# HLINT ignore "Use if" #-}-{-# HLINT ignore "Redundant bracket" #-}-{-# HLINT ignore "Fuse concatMap/map" #-}-{-# HLINT ignore "Move brackets to avoid $" #-}-{-# HLINT ignore "Use uncurry" #-}-{-# HLINT ignore "Use map once" #-} module CPSA.Cohort (Mode(..), ReduceRes(..), reduce, unrealized) where @@ -63,13 +56,13 @@ else k -tShow2 :: Show a => Preskel -> Preskel -> a -> Preskel -tShow2 k k' _ = - if goodParent k && goodChild k' then- --z (show ("child", k')) k'- z (show "perm: " ++ show (compressUpdate 4 2 [0,1,3,4])) k'- else - k'+-- tShow2 :: Show a => Preskel -> Preskel -> a -> Preskel +-- tShow2 k k' _ = +-- if goodParent k && goodChild k' then+-- --z (show ("child", k')) k'+-- z (show "perm: " ++ show (compressUpdate 4 2 [0,1,3,4])) k'+-- else +-- k' tShow3 :: Show a => Preskel -> Preskel -> a -> a tShow3 k k' m = @@ -134,7 +127,7 @@ -- This check is just a sanity check and is normally left off. usePovCheck :: Bool-usePovCheck = False -- True+usePovCheck = True -- False -- Minimum priority to solve minPriority :: Int@@ -290,6 +283,12 @@ not useSolvedFilter || solved ct pos eks escape k n subst absent && (not usePovCheck || povCheck k)+ -- ||+ -- (z ("povCheck failed " +++ -- (show (case pov k of+ -- Nothing -> Nothing+ -- Just k0 -> Just (prob k0))))+ -- False)) data Mode = Mode { noGeneralization :: Bool,@@ -534,6 +533,7 @@ mgs :: [(Preskel, [Sid])] -> [Preskel] mgs cohort =+ --reverse $ map recordMap $ loop (dropNonInjective cohort) [] reverse $ map recordMap $ loop cohort [] where loop [] acc = acc@@ -547,21 +547,25 @@ ans recordMap (k, phi) = updateStrandMap phi k +-- dropNonInjective :: [(Preskel, [Sid])] -> [(Preskel, [Sid])]+-- dropNonInjective cohort = +-- filter (isInjective . snd) cohort+-- where +-- isInjective phi = L.nub phi == phi+ -- Given two permutations p and p', with ranges r and r', this -- function returns the list of permutations p'' such that -- -- p'' o p' = p. ----- This function assumes p' is injective and the returns permutations--- that also must be.+-- This function no longer assumes p' is injective but it returns permutations+-- that are. composeFactors :: [Int] -> [Int] -> [Int] -> [Int] -> [[Int]] composeFactors r r' p p' =- perms (zip p' p) (filter (flip notElem p) r) r'---- The correctness of this function depends on the fact that the--- length of range is at most one so that the result is always--- injective.+ filter isInjective $ perms (zip p' p) r r'+ where isInjective phi = L.nub phi == phi+ --perms (zip p' p) (filter (flip notElem p) r) r' -- JDR-era code perms :: [(Int, Int)] -> [Int] -> [Int] -> [[Int]] perms _ _ [] = [[]]@@ -831,10 +835,10 @@ iter [] = [] iter (k' : rest) = let mapping = getStrandMap (operation k') in- case specialization k k' mapping of- [] -> --tShow1 k k' mapping `deepseq` tShow2 k k' mapping `deepseq` tShow3 k k' mapping `deepseq` - iter rest- ks -> ks -- Don't add iter rest. Just take the first successful one.+ -- case z "}" (specialization k (z "{" k') mapping)+ case specialization k k' mapping of+ [] -> iter rest -- Was: -- tShow1 k k' mapping `deepseq` tShow2 k k' mapping `deepseq` tShow3 k k' mapping `deepseq` + ks -> ks -- Don't add iter rest. Just take the first successful one. recordMap (k, sm) = --if sm == getStrandMap (operation kk) --then kk --else -- z (show $ getStrandMap (operation
src/CPSA/Diff/Main.hs view
@@ -41,13 +41,29 @@ go :: Params -> PosHandle -> PosHandle -> IO () go params old new = do- o <- readSkel old- n <- readSkel new+ o1 <- readSkel old+ n1 <- readSkel new+ + let o = maybeFilter params o1+ let n = maybeFilter params n1 + case (o, n) of (Nothing, Nothing) -> return () (Just o, Just n) | o == n -> go params old new _ -> showDiff params o n +maybeFilter :: Params -> Maybe (SExpr Pos) -> Maybe (SExpr Pos)+maybeFilter _ Nothing = Nothing+maybeFilter params (Just s) =+ loop s $ ignoreKws params+ where+ loop s [] = Just s+ loop s (i : ignKws) =+ case filterListsByHead i s of+ Nothing -> Nothing+ Just s' -> loop s' ignKws++ showDiff :: Params -> Maybe (SExpr Pos) -> Maybe (SExpr Pos) -> IO () showDiff params o n = do@@ -94,7 +110,8 @@ data Params = Params { file :: Maybe FilePath, -- Nothing specifies standard output- margin :: Int } -- Output line length+ margin :: Int, -- Output line length+ ignoreKws :: [String] } -- Keywords to ignore in skeletons deriving Show indent :: Int@@ -106,6 +123,7 @@ | Info -- Version information | Margin String -- Output line length | Output String -- Output file name+ | Ignore String -- Keyword for skeleton sub-list to ignore deriving Show options :: [OptDescr Flag]@@ -113,6 +131,7 @@ [ Option ['o'] ["output"] (ReqArg Output "FILE") "output FILE", Option ['m'] ["margin"] (ReqArg Margin "INT") ("set output margin (default " ++ show defaultMargin ++ ")"),+ Option ['i'] ["ignore"] (ReqArg Ignore "STRING") "ignore keyword", Option ['h'] ["help"] (NoArg Help) "show help message", Option ['v'] ["version"] (NoArg Info) "show version number" ] @@ -138,7 +157,8 @@ interp :: [Flag] -> IO Params interp flags = loop flags (Params { file = Nothing, -- By default, no output file- margin = defaultMargin })+ margin = defaultMargin,+ ignoreKws = [] }) where loop [] params = return params loop (Output name : flags) params@@ -152,6 +172,9 @@ do msg <- use options ["Bad value for margin\n"] abort msg+ loop (Ignore kw : flags) params =+ loop flags $ params { ignoreKws =+ kw : ignoreKws params} loop (Info : _) _ = success cpsaVersion loop (Help : _) _ =
src/CPSA/Displayer.hs view
@@ -260,7 +260,7 @@ -- Display the remainder of a preskeleton displayRest :: Preskel -> Context -> [SExpr ()] -> [SExpr ()] displayRest k ctx rest =- displayOptional "precedes" (displayOrdering (orderings k))+ (displayOptional "precedes" (displayOrdering (orderings k)) (displayOptional "non-orig" (displayTerms ctx (sansPts (knon k))) (displayOptional "pen-non-orig" (displayTerms ctx (sansPts (kpnon k))) (displayOptional "uniq-orig" (displayTerms ctx (sansPts (kunique k)))@@ -277,10 +277,16 @@ (displayOptional "rule" (L.sort (map (S ()) (krules k))) (displayOperation k ctx (displayStrandMap k- (displayOptional "traces" traces rest)))))))))))))))))+ (displayOptional "traces" traces rest)))))))))))))))))) where priorities = map displayPriority (kpriority k) traces = map (L () . displayTrace ctx . trace) (insts k)++{--+displayPOV :: Maybe Preskel -> [SExpr ()]+displayPOV Nothing = [S () "None"]+displayPOV (Just _) = [S () "Some"]+--} displayFacts :: Context -> [Fact] -> [SExpr ()] displayFacts ctx =
src/CPSA/GenRules.hs view
@@ -596,7 +596,8 @@ {uvars = [z0,z1,z2,i0,i1,i2], antec = [ -- useful for debugging: -- (AFact "no-state-split" []),- (Trans (z0,i0)), (Trans (z1,i1)), (Trans (z2,i2)),+ (Trans (z0,i0)), --(Trans (z1,i1)), + (Trans (z2,i2)), (LeadsTo (z0,i0) (z1,i1)), (SameLocn (z0,i0) (z2,i2)), (Prec (z0,i0) (z2,i2)) ], consq = [([], -- no bvs
src/CPSA/Graph/Loader.hs view
@@ -477,12 +477,16 @@ return (adjoin np ns) loadPair :: MonadFail m => [Int] -> SExpr Pos -> Bool -> m Pair-loadPair heights (L pos [x0, x1]) strict =+loadPair heights (L _ [x0, x1]) strict = -- was pos do n0 <- loadNode heights x0 n1 <- loadNode heights x1 case (strict && sameStrands n0 n1) of -- Same strand- True -> fail (shows pos "Malformed pair -- nodes in same strand")+ True -> return (n0, n1)+ -- The True case used to be: + -- fail (shows pos "Malformed pair -- nodes in same strand")+ -- but this check seems unnecessary. The pair is then either+ -- inconsistent because it causes a cycle or else irrelevant. False -> return (n0, n1) where sameStrands (s0, _) (s1, _) = s0 == s1
src/CPSA/Lib/SExpr.hs view
@@ -34,8 +34,9 @@ -- University of California. module CPSA.Lib.SExpr (SExpr(..), showQuoted, stringSExpr, annotation,+ filterListsByHead, -- * S-expression Reader- Pos, PosHandle, posHandle, load) where+ Pos, PosHandle, posHandle, load, getPos) where import Data.Char (isSpace, isDigit, isAlphaNum, isPrint) import Data.IORef (IORef, newIORef, readIORef, writeIORef)@@ -87,6 +88,12 @@ showl [] = id showl (x:xs) = showChar ' ' . shows x . showl xs +getPos :: SExpr a -> a+getPos (S a _) = a+getPos (Q a _) = a+getPos (N a _) = a+getPos (L a _) = a+ -- | Add quotes to a string so it reads as an S-expression string. showQuoted :: String -> ShowS showQuoted s = showChar '"' . showEscaped s . showChar '"'@@ -380,3 +387,66 @@ do hClose $ pHandle p fail msg++-- Report whether an sexp is a target string.++observeSymbol :: String -> SExpr a -> Bool+observeSymbol tgt (S _ s) = tgt == s+observeSymbol _ _ = False++observeHead :: String -> SExpr a -> Bool+observeHead tgt (L _ (x : _)) = observeSymbol tgt x+observeHead _ _ = False++confrontNothing :: [Maybe a] -> Maybe [a]+confrontNothing [] = Just []+confrontNothing (Nothing : _) = Nothing+confrontNothing (Just a : rest) =+ case confrontNothing rest of+ Nothing -> Nothing+ Just rest' -> Just (a : rest')++{--+filterEmpties :: SExpr a -> Maybe (SExpr a)+filterEmpties (L _ []) = Nothing+filterEmpties (L p xs) =+ case confrontNothing (map filterEmpties xs) of+ Nothing -> Nothing+ Just ys -> Just (L p ys)++filterEmpties s = Just s+--}++-- Go through an sexp and, if it is a list sexp, discard any immediate+-- subexprs that do not satisfy predicate pred. Return Nothing if all+-- subexprs would be discarded. Non-list sexps are unchanged.++filterListExprs :: (SExpr a -> Bool) -> SExpr a -> Maybe (SExpr a)+filterListExprs _ (L _ []) = Nothing+filterListExprs pred (L p (x:xs)) + | pred x = Just (L p (x : filter pred xs))+ | otherwise = + case xs of+ [] -> Nothing+ (y:ys) -> filterListExprs pred (L (getPos y) (y:ys))+filterListExprs _ s = Just s ++-- Descend n layers through an sexp, filtering the sublists at that+-- level.++filterSubExprs :: Int -> (SExpr a -> Bool) -> SExpr a -> Maybe (SExpr a)+filterSubExprs 0 pred s = filterListExprs pred s+filterSubExprs i pred (L p xs) =+ case confrontNothing $ map (filterSubExprs (i-1) pred) xs of+ Nothing -> Nothing+ Just ys -> Just (L p ys)++filterSubExprs _ _ s = Just s ++filterListsByHead :: String -> SExpr a -> Maybe (SExpr a)+filterListsByHead avoidStr sexpr =+ filterSubExprs 0 (not . (observeHead avoidStr)) sexpr++ + +
src/CPSA/Lib/Utilities.hs view
@@ -28,6 +28,15 @@ if a `elem` bs then union as bs else a : union as bs +setMinus :: Eq a => [a] -> [a] -> [a]+setMinus [] _ = []+setMinus (a : arest) bs+ | a `elem` bs = setMinus arest bs+ | otherwise = a : setMinus arest bs++ + + -- Delete the nth item in a list deleteNth :: Int -> [a] -> [a] deleteNth n (x : xs)
src/CPSA/LoadFormulas.hs view
@@ -266,7 +266,7 @@ loadConjuncts :: MonadFail m => Sig -> Pos -> Prot -> [Term] -> [SExpr Pos] -> Conj -> m Conj-loadConjuncts _ _ _ _ [] rest = return (reverse rest)+loadConjuncts _ _ _ _ [] rest = return $ L.sortBy (\(_, x) (_, y) -> aFormOrder x y) rest--(reverse rest) -- If the head is a strand formula treat it specially loadConjuncts sig _ p kvars ((L pos (S _ "strand" : ss)) : xs) rest = do@@ -298,13 +298,13 @@ -- Load a listener formula loadListener :: MonadFail m => Sig -> Pos -> Prot -> [Term] -> [SExpr Pos] -> m Conj-loadListener sig pos p kvars [S pos1 x, S pos2 y] =+loadListener sig pos p kvars [S pos1 x, z] = do let r = listenerRole p v <- loadAlgChanTerm sig (rvars r) (S pos "x") s <- loadStrdTerm sig kvars (S pos1 x)- t <- loadAlgChanTerm sig kvars (S pos2 y)- return [(pos1, Length r s (indxOfInt 2)), (pos2, Param r v 2 s t)]+ t <- loadAlgTerm sig kvars z+ return [(pos1, Length r s (indxOfInt 2)), (getPos z, Param r v 2 s t)] loadListener _ pos _ _ _ = fail (shows pos "Bad listener formula") loadVMaps :: MonadFail m => Sig -> Pos -> Prot -> [Term] ->
src/CPSA/Loader.hs view
@@ -143,7 +143,7 @@ (gen, vars) <- loadVars sig gen vars (gen, vars, pt_u, pr_t, c) <- -- critical section indices computed below- loadTrace sig gen vars (evt : c)+ loadTrace sig name gen vars (evt : c) n <- loadPosBaseTerms sig vars (assoc "non-orig" rest) a <- loadPosBaseTerms sig vars (assoc "pen-non-orig" rest) u <- loadBaseTerms sig vars (assoc "uniq-orig" rest)@@ -855,9 +855,9 @@ else Nothing -loadTrace :: MonadFail m => Sig -> Gen -> [Term] ->+loadTrace :: MonadFail m => Sig -> String -> Gen -> [Term] -> [SExpr Pos] -> m (Gen, [Term], [Term], PreRules, Trace)-loadTrace sig gen vars xs =+loadTrace sig name gen vars xs = loadTraceLoop gen [] [] emptyPreRules [] xs where loadTraceLoop :: MonadFail m => Gen -> [Term] -> [Term] -> PreRules@@ -871,11 +871,12 @@ [] -> return (gen, (vars ++ (reverse newVars)), (reverse uniqs), pr, events') (v,p) : _ ->- fail (shows xs $ " Var received non-carried, the sent carried: " +++ fail (shows xs $ " Var received non-carried in role " ++ name +++ ", then sent carried: " ++ (show v) ++ " at event " ++ (show p))- Just (_,i) ->- fail (shows xs $ " Expts must first be received, rndxs first sent: " ++- " at event " ++ (show i))+ Just (bad,i) ->+ fail (shows bad $ " Expts must first be received, rndxs first sent: " +++ " at event " ++ (show i) ++ " in role " ++ name) loadTraceLoop gen newVars uniqs pr events ((L _ [S _ "recv", t]) : rest) = do t <- loadTerm sig vars -- True@@ -915,16 +916,16 @@ loadTraceLoop gen newVars uniqs pr events ((L _ [S pos "rely", form]) : rest) = case events of- [] -> fail (shows pos $ "Rely precedes first event: " ++ (show form))+ [] -> fail (shows pos $ "Rely precedes first event in role " ++ name ++ ": " ++ (show form)) (In _) : _ -> loadTraceLoop gen newVars uniqs (preRulesAddRely pr ((L.length events), form)) events rest- _ -> fail (shows pos $ "Rely must follow recv or load: " ++ (show form))+ _ -> fail (shows pos $ "Rely must follow recv or load in role " ++ name ++ ": " ++ (show form)) loadTraceLoop gen newVars uniqs pr events ((L _ [S pos "guar", form]) : rest) = case rest of- [] -> fail (shows pos $ "Guarantee follows last event: " ++ (show form))+ [] -> fail (shows pos $ "Guarantee follows last event in role " ++ name ++ ": " ++ (show form)) (L _ (S _ "stor" : _) : _) -> loadTraceLoop gen newVars uniqs (preRulesAddGuar pr (1+(L.length events), form))@@ -933,11 +934,11 @@ loadTraceLoop gen newVars uniqs (preRulesAddGuar pr (1+(L.length events), form)) events rest- _ -> fail (shows pos $ "Guarantee must precede send or stor: " ++ (show form))+ _ -> fail (shows pos $ "Guarantee must precede send or stor in role " ++ name ++ ": " ++ (show form)) loadTraceLoop gen newVars uniqs pr events ((L _ [S pos "cheq", src, tgt]) : rest) = case rest of- [] -> fail (shows pos $ "cheq must precede some event: " ++ (show src) ++ ", " ++ (show tgt))+ [] -> fail (shows pos $ "cheq must precede some event in role " ++ name ++ ": " ++ (show src) ++ ", " ++ (show tgt)) _ -> do src <- loadTerm sig vars False src@@ -948,10 +949,10 @@ events rest loadTraceLoop _ _ _ _ _ ((L pos [S _ dir, _, _]) : _) =- fail (shows pos $ "Unrecognized direction " ++ dir)+ fail (shows pos $ "Unrecognized direction in role " ++ name ++ " " ++ dir) loadTraceLoop _ _ _ _ _ (x : _) =- fail (shows (annotation x) "Malformed event")+ fail (shows (annotation x) "Malformed event in role " ++ name) loadChan :: MonadFail m => Sig -> [Term] -> SExpr Pos -> m Term loadChan sig vars x =@@ -1180,9 +1181,10 @@ let (nr', ar', ur', ug', ab', cn', au') = foldl addInstOrigs (nr, ar, ur, ug, ab, cn, au) insts prios <- mapM (loadPriorities heights) pl- let k = mkPreskel gen p gs insts o nr' ar' ur'- ug' ab' pr genSts cn' au' fs prios comment+ let k0 = mkPreskel gen p gs insts o nr' ar' ur'+ ug' ab' pr genSts cn' au' fs prios comment ab'' = L.concatMap (\(x, y) -> [x, y]) ab'+ let k = k0 {pov = Just k0} case termsWellFormed $ nr' ++ ar' ++ ur' ++ ug' ++ ab'' ++ kterms k of False -> fail (shows pos "Terms in skeleton not well formed") True -> return ()@@ -1205,12 +1207,16 @@ return (adjoin np ns) loadPair :: MonadFail m => [Int] -> SExpr Pos -> m Pair-loadPair heights (L pos [x0, x1]) =+loadPair heights (L _ [x0, x1]) = -- was pos do n0 <- loadNode heights x0 n1 <- loadNode heights x1 case fst n0 == fst n1 of -- Same strand- True -> fail (shows pos "Malformed pair -- nodes in same strand")+ True -> return (n0, n1)+ -- The True case used to be: + -- fail (shows pos "Malformed pair -- nodes in same strand")+ -- but this check seems unnecessary. The pair is then either+ -- inconsistent because it causes a cycle or else irrelevant. False -> return (n0, n1) loadPair _ x = fail (shows (annotation x) "Malformed pair")
src/CPSA/Protocol.hs view
@@ -360,7 +360,6 @@ rpnon = pnon, runique = L.nub unique, runiqgen = uniqgen',- rabsent = absent', rconf = L.nub conf, rauth = L.nub auth, rcomment = comment,@@ -372,7 +371,8 @@ rpconf = map addChanPos $ L.nub conf, rpauth = map addChanPos $ L.nub auth, rpriority = addDefaultPrio priority,- rsearch = rev+ rsearch = rev,+ rabsent = absent' } where uniqgen' = L.nub uniqgen@@ -420,13 +420,19 @@ Nothing -> defaultPriority Just p -> p +{--+ error+ ("Protocol.mkRole: Atom " ++ (show v) +++ " does not generate")+ --}+ traceAbsent :: Trace -> [Term] -> [(Term, Term)] traceAbsent trace ugens = concatMap indz_ininsts $ filter isNum ugens where indz_ininsts v = case generationPos v trace of- Nothing -> error "Protocol.mkRole: Atom does not generate"+ Nothing -> indz_ininsts_var v 0 Just p -> indz_ininsts_var v p -- ind-zero instances for a specific variable v that generates at height p indz_ininsts_var v p =
src/CPSA/Reduction.hs view
@@ -31,7 +31,7 @@ import System.IO.Error (ioeGetErrorString) z :: Show a => a -> b -> b-z x y = unsafePerformIO (print x >> return y)+z x y = unsafePerformIO (print x >> hFlush stdout >> return y) zz :: Show a => a -> a zz x = z x x@@ -349,7 +349,9 @@ step p h ks m oseen n seen todo toobig (Reduct lk size kids dups : reducts) step p h ks m oseen n seen todo toobig (Reduct lk size kids dups : reducts)- | optGoalsSat p && satCheck lk = -- Stop if goals satisfied mode?+ | optGoalsSat p &&+ goalsPresent lk &&+ noCounterExamples lk = -- Stop if goals satisfied mode? do let ns = unrealized (content lk) let shape = if null ns then Shape else Fringe@@ -541,10 +543,10 @@ addKeyValues realizedToken (map displayNode $ L.sort unrealized) $ addKindKey kind $ addAnnoKey anno $ condAddKeyValues "satisfies" (kind == Shape && (not $ null $ kgoals k))- (satisfies k) $+ (reportSatisfies k) $ -- Structure preserving maps -- Added for cpsasas program- condAddKeyValues "maps" fringe (maps k) $+ condAddKeyValues "maps" True (maps k) $ -- Nodes of origination -- Added for cpsasas program condAddKeyValues "origs" (starter k || fringe) (origs k) $@@ -623,18 +625,21 @@ -- Variable assignments and security goals -satisfies :: Preskel -> [SExpr ()]-satisfies k =- map f (sat k) where- f (_, []) = S () "yes"- f (g, ge : _) =- L () (S () "no" :- (displayForm- (ctx $ (uvars g) ++ (evars g) ++ (kvars k))- (unSatReport k g ge)) :- (displayEnv (ctx $ uvars g) (ctx $ kvars k) (snd ge)))- ctx ts = addToContext emptyContext ts- evars g = concatMap fst $ consq g+reportSatisfies :: Preskel -> [SExpr ()]+reportSatisfies k =+ case goalCounterExamples k of+ [] -> [S () "yes"]+ goalGEs -> map f goalGEs+ where+ f (_, []) = error "reportSatisfies: How did goalCounterExamples give nil?"+ f (g, ge : _) = + L () (S () "no" :+ (displayForm+ (ctx $ (uvars g) ++ (evars g) ++ (kvars k))+ (unSatReport k g ge)) :+ (displayEnv (ctx $ uvars g) (ctx $ kvars k) (snd ge)))+ ctx ts = addToContext emptyContext ts+ evars g = concatMap fst $ consq g -- Prints structure preserving maps (homomorphisms) maps :: Preskel -> [SExpr ()]@@ -642,14 +647,17 @@ map (amap $ strandMap k) (envMaps k) where amap strands env = L () [L () strands, L () env]- strandMap k = map (N ()) (map f (pprob k))- f s = prob k !! s+ strandMap k = map (N ()) (prob k)+ -- (map f (pprob k))+ -- f s = prob k !! s envMaps k = case pov k of Nothing -> [] Just k' ->- map (displayEnvSansPts vars (ctx k') (ctx k)) (homomorphism k' k (prob k))- ctx k = addToContext emptyContext (kvars k)+ map (\(_,env) ->+ displayEnvSansPts vars (ctx k') (ctx k) env)+ $ homomorphism k' k (prob k)+ ctx k = addToContext emptyContext ((kvars k) ++ (kfvars k)) vars = kvars k -- Prints the nodes of origination for each uniquely originating atom@@ -668,10 +676,10 @@ where ctx = addToContext emptyContext (kvars k) -satCheck :: LPreskel -> Bool-satCheck lk =- not (null tests) && all f tests- where- tests = sat $ content lk- f (_, []) = True- f _ = False+goalsPresent :: LPreskel -> Bool+goalsPresent lk =+ (not . null) $ kgoals $ content lk++noCounterExamples :: LPreskel -> Bool+noCounterExamples lk =+ (null. goalCounterExamples) $ content lk
src/CPSA/SAS/SAS.hs view
@@ -371,12 +371,16 @@ return (adjoin np nps) loadPair :: MonadFail m => [Int] -> SExpr Pos -> m Pair-loadPair heights (L pos [x0, x1]) =+loadPair heights (L _ [x0, x1]) = do n0 <- loadNode heights x0 n1 <- loadNode heights x1 case sameStrands n0 n1 of -- Same strand- True -> fail (shows pos "Malformed pair -- nodes in same strand")+ True -> return (n0, n1)+ -- The True case used to be: + -- fail (shows pos "Malformed pair -- nodes in same strand")+ -- but this check seems unnecessary. The pair is then either+ -- inconsistent because it causes a cycle or else irrelevant. False -> return (n0, n1) where sameStrands (s0, _) (s1, _) = s0 == s1
src/CPSA/Strand.hs view
@@ -5,18 +5,6 @@ -- This program is free software: you can redistribute it and/or -- modify it under the terms of the BSD License as published by the -- University of California.-{-# OPTIONS_GHC -Wno-unrecognised-pragmas #-}-{-# HLINT ignore "Use if" #-}-{-# HLINT ignore "Redundant bracket" #-}-{-# HLINT ignore "Move brackets to avoid $" #-}-{-# HLINT ignore "Redundant map" #-}-{-# HLINT ignore "Use section" #-}-{-# HLINT ignore "Redundant return" #-}-{-# HLINT ignore "Use fmap" #-}-{-# HLINT ignore "Use =<<" #-}-{-# HLINT ignore "Eta reduce" #-}-{-# HLINT ignore "Replace case with fromMaybe" #-}-{-# HLINT ignore "Use all" #-} module CPSA.Strand (Instance, mkInstance, bldInstance, mkListener, role, env, trace, height, listenerTerm, mkPreskel,@@ -34,7 +22,7 @@ inheritRconf, inheritRauth, addListener, addBaseListener, addAbsence, updateStrandMap, operation, krules, pprob, prob, homomorphism, toSkeleton, generalize,- collapse, sat, unSatReport, FTerm (..), Fact (..), simplify, rewrite,+ collapse, goalCounterExamples, unSatReport, FTerm (..), Fact (..), simplify, rewrite, localSignal, rewriteUnaryOneOnce, nodePairsOfSkel, applyLeadsTo) where import Control.Monad@@ -50,17 +38,20 @@ import CPSA.Protocol import CPSA.Operation - {-- +++import System.IO import System.IO.Unsafe import Control.Exception (try) import System.IO.Error (ioeGetErrorString) -- import Control.DeepSeq z :: Show a => a -> b -> b-z x y = unsafePerformIO (print x >> return y)+z x y = unsafePerformIO (print x >> hFlush stdout >> return y) + zz :: Show a => a -> a zz x = z x x @@ -194,6 +185,19 @@ useVariableSeparation :: Bool useVariableSeparation = True -- False +-- Should we do the full node deletion?+-- To do nothing *other* than node deletions, set this to True+generalizeOnlyByDeletion :: Bool+generalizeOnlyByDeletion = False -- True +++-- When doing deletion, should we delete *only* listener strands?+-- To restrict to that, set this to True; otherwise all kinds of nodes+-- will be candidates + +generalizeDeleteOnlyListeners :: Bool+generalizeDeleteOnlyListeners = False -- True+ -- Instances and Strand Identifiers -- An Instance is an instance of a role, in the sense that each@@ -378,6 +382,11 @@ graphEdges strands = [ (dst, src) | s <- strands, src <- nodes s, dst <- preds src ] +nodeGraphEdges :: [GraphStrand e i] -> [Pair]+nodeGraphEdges strands =+ [ (graphNode dst, graphNode src)+ | s <- strands, src <- nodes s, dst <- preds src ]+ data Graph e i = Graph { gstrands :: [GraphStrand e i], gedges :: [GraphEdge e i] }@@ -445,10 +454,13 @@ | otherwise = inner (p : orderings) True pairs rest sameStrands (n0, n1) = strand n0 == strand n1 + -- Compute the transitive closure including same strand -- pairs. -- This routine returns pairs that are not well ordered. -- Deal with it!++{-- graphCloseAll :: [GraphEdge e i] -> [GraphEdge e i] graphCloseAll orderings = graphAllCloseLoop orderings False orderings@@ -465,11 +477,50 @@ | elem p orderings = inner orderings repeat pairs rest | otherwise = inner (p : orderings) True pairs rest +--}++nodeGraphCloseAll :: [Pair] -> [Pair]+nodeGraphCloseAll orderings =+ nodeGraphAllCloseLoop orderings False orderings++-- if all orderingOK allNodes+-- then +-- nodeGraphAllCloseLoop orderings False orderings+-- else+-- z ("missing predecessors for: " +++-- (show $ L.nub $ filter (not . orderingOK) allNodes))+-- $ nodeGraphAllCloseLoop orderings False orderings++ where + myPreds (s,i) =+ let pairs = map fst+ (filter (\((_,_), (s1,i1)) -> s == s1 && i == i1)+ orderings) in+ if i == 0 then pairs+ else adjoin (s,i-1) pairs+ + -- allNodes = union (map fst orderings) (map snd orderings)+ -- immPreds = [ (n, (myPreds n)) | n <- allNodes ]+ -- orderingOK (s,i) = i == 0 || (s,i-1) `elem` myPreds(s,i)++ nodeGraphAllCloseLoop orderings False [] = orderings+ nodeGraphAllCloseLoop orderings True [] =+ nodeGraphAllCloseLoop orderings False orderings -- restart loop+ nodeGraphAllCloseLoop orderings repeat ((n0, n1) : pairs) =+ inner orderings repeat pairs n1 (myPreds n0)+ + inner orderings repeat pairs _ [] =+ nodeGraphAllCloseLoop orderings repeat pairs+ inner orderings repeat pairs n1 (n : rest) + | elem (n,n1) orderings = inner orderings repeat pairs n1 rest+ | otherwise = inner ((n,n1) : orderings) True pairs n1 rest + -- Shared part of preskeletons data Shared = Shared { prot :: Prot,- goals :: [Goal] }+ goals :: [Goal],+ comments :: [SExpr ()] } instance Show Shared where showsPrec _ s = shows (prot s)@@ -480,6 +531,9 @@ kgoals :: Preskel -> [Goal] kgoals k = goals $ shared k +kcomment :: Preskel -> [SExpr ()]+kcomment k = comments $ shared k+ -- Preskeletons data Preskel = Preskel@@ -503,7 +557,6 @@ kfacts :: ![Fact], -- A list of facts kfvars :: [Term], -- Fact vars not in instances kpriority :: [(Node, Int)], -- Override node priority- kcomment :: [SExpr ()], -- Comments from the input korig :: ![(Term, [Node])], -- This is an association list with a -- pair for each element of kunique. -- The value associated with a term@@ -545,13 +598,12 @@ [Term] -> [Fact] -> [(Node, Int)] -> [SExpr ()] -> Preskel mkPreskel gen protocol gs insts orderings non pnon unique uniqgen absent precur genStVs- conf auth facts prio comment =- k { kcomment = comment }+ conf auth facts prio comment = k where k = newPreskel gen shared insts orderings non pnon unique uniqgen absent precur genStVs conf auth facts prio New [] prob prob Nothing- shared = Shared { prot = protocol, goals = gs }+ shared = Shared { prot = protocol, goals = gs, comments = comment } prob = strandids k -- Fixed point on k is okay. showPreskelSelectively :: [String] -> Preskel -> String@@ -589,8 +641,10 @@ firstSkeleton k = do k <- wellFormedPreskel k- k' <- toSkeleton False k -- only k' should have pov = Nothing- return $ k' { pprob = prob k', prob = strandids k', pov = Just k' }+ k' <- toSkeleton False k -- only k and k' should have pov = Nothing+ return $ k' { pprob = prob k',+ prob = -- strandids k' + prob k', pov = Just k } -- Create a preskeleton. The node ordering relation is put into the -- preds field of each instance in this function. The maybe uniquely@@ -611,8 +665,9 @@ g = graph trace height insts orderings' strands = gstrands g edges = gedges g- gpOrds = map graphPair $ graphClose $ graphEdges $ strands- gpOrdsAll = map graphPair $ graphCloseAll $ graphEdges $ strands+ -- gpOrds = map graphPair $ graphClose $ graphEdges $ strands+ gpOrdsAll = nodeGraphCloseAll $ nodeGraphEdges strands+ gpOrds = filter (not . sameStrands) gpOrdsAll orig = map (originationNodes strands) unique' ugen = map (generationNodes strands) uniqgen' tc = filter pairWellOrdered (graphClose $ graphEdges strands)@@ -637,7 +692,6 @@ kfacts = facts', kfvars = factVars insts facts', kpriority = prio,- kcomment = [], korig = orig, kugen = ugen, tc = map graphPair tc,@@ -648,9 +702,31 @@ pprob = pprob, prob = prob, pov = pov } in- if useCheckVars then- checkVars k- else k+ if useCheckVars then+ checkVars k+ else k+ where+ sameStrands ((s0,_),(s1,_)) = s0 == s1 +++ +{-- let alt = map graphPair $ graphCloseAll $ graphEdges $ strands in+ case setMinus gpOrdsAll alt of+ [] -> (case setMinus alt gpOrdsAll of+ [] -> k+ ns -> z ("mismatch alt: " -- ++ (show (L.sort ns))+ ) k)+ ns -> (case setMinus alt gpOrdsAll of+ [] -> (z ("mismatch gpOrdsAll: " -- ++ (show (L.sort+ -- ns))+ )+ (z ("alt was: " -- ++ (show (L.sort alt))+ ) k))+ ns -> z ("mismatch both ways: " ++ (show (L.sort ns))) k)+--}+++ {- if chkFacts k then k else k@@ -680,28 +756,27 @@ renewPreskel :: Preskel -> Preskel renewPreskel k =- let k' = newPreskel- (gen k)- (shared k)- (insts k)- (orderings k)- (knon k)- (kpnon k)- (kunique k)- (kuniqgen k)- (kabsent k)- (kprecur k)- (kgenSt k)- (kconf k)- (kauth k)- (kfacts k)- (kpriority k)- (operation k)- (krules k)- (pprob k)- (prob k)- (pov k) in- k' { kcomment = kcomment k}+ newPreskel+ (gen k)+ (shared k)+ (insts k)+ (orderings k)+ (knon k)+ (kpnon k)+ (kunique k)+ (kuniqgen k)+ (kabsent k)+ (kprecur k)+ (kgenSt k)+ (kconf k)+ (kauth k)+ (kfacts k)+ (kpriority k)+ (operation k)+ (krules k)+ (pprob k)+ (prob k)+ (pov k) checkVars :: Preskel -> Preskel checkVars k =@@ -784,6 +859,19 @@ where origs v = snd (originationNodes (strands k) v) +-- An auxiliary: For uniq-gen, we want to make sure that *either* the+-- atom occurs in the trace *or else* the atom is an asymmetric key+-- and the inverse key occurs. This matches the logic of+-- originationPos and OccursPos in Protocol.hs.++constituentModInv :: Term -> Term -> Bool+constituentModInv atom t =+ constituent atom t ||+ case invertKey atom of+ Nothing -> False+ Just ik -> constituent ik t+ + -- A preskeleton is well formed if the ordering relation is acyclic, -- each atom declared to be uniquely-originating is carried in some -- preskeleton term, and every variable that occurs in each base term@@ -814,7 +902,7 @@ f b t = b && t `elem` vs nonCheck t = all (not . carriedBy t) terms uniqueCheck t = any (carriedBy t) terms- uniqgenCheck t = any (constituent t) terms+ uniqgenCheck t = any (constituentModInv t) terms absentCheck (x, y) = varSubset [x, y] vs && x /= y genStCheck t = foldVars f True t chanCheck c = elem c vs@@ -861,7 +949,7 @@ $ any (carriedBy t) terms uniqgenCheck t = failwith (showString "uniq-gen " $ showst t " does not occur")- $ any (constituent t) terms+ $ any (constituentModInv t) terms absentCheck (x, y) = do failwith (showString "absent " $ showst x " does not occur")@@ -1460,7 +1548,10 @@ return (k0, k'', permuteNode perm n, map (perm !!) phi, hsubst) permuteOrderings :: [Sid] -> [Pair] -> [Pair]-permuteOrderings perm orderings = map (permutePair perm) orderings+permuteOrderings perm orderings =+ --L.filter (\((z0,_),(z1,_)) -> z0 /= z1)+ -- $ + map (permutePair perm) orderings updatePerm :: Int -> Int -> [Sid] -> [Sid] updatePerm old new perm =@@ -2017,7 +2108,7 @@ checkOrig (u, ns) = case lookup (substitute subst u) (korig k') of Nothing -> False- Just ns' -> all (flip elem ns') (map (permuteNode phi) ns)+ Just ns' -> all (flip elem ns') (map (permuteNode phi) ns) checkGen (u, ns) = case lookup (substitute subst u) (kugen k') of Nothing -> False@@ -2260,18 +2351,26 @@ -- Homomorphisms --- Find a substitution that demonstrates the existence of a+-- Find an environment that demonstrates the existence of a -- homomorphism from k to k' using the given strand mapping function. -homomorphism :: Preskel -> Preskel -> [Sid] -> [Env]+homomorphism :: Preskel -> Preskel -> [Sid] -> [(Gen,Env)] homomorphism k k' mapping = do- (_, env) <- findReplacement k k' mapping- case validateEnv k k' mapping env of- True -> [env]- False -> []+ (gen, env) <- findReplacement k k' mapping+ validateEnv k k' mapping (gen,env) -{-- filter (validateEnv k k mapping)+{-- ++homomorphismReport :: Preskel -> Preskel -> [Sid] -> [(Gen,Env)]+homomorphismReport k k' mapping =+ case (do+ (gen, env) <- findReplacementReport k k' mapping+ validateEnvReport k k' mapping (gen,env)) of+ [] -> z "no homs to report" []+ ges -> z ("yes homs: " ++ (show (L.length ges))) ges ++ filter (validateEnv k k mapping) $ map snd $ findReplacement k k' mapping --}@@ -2297,38 +2396,109 @@ then let v = (let gg = gmerge (gen k) (gen k') in foldM (matchStrand k k' mapping) (gg, emptyEnv) (strandids k)) in v--- if (5 == L.length (insts k') &&--- 4 == L.length (insts k))--- then--- z (show (L.length v)) v--- else v else []- -- error ("Yarg! JDR " ++ (show (L.length mapping)) ++ " vs " ++- -- (show (L.length (insts k)))) +{-- ++findReplacementReport :: Preskel -> Preskel -> [Sid] -> [(Gen, Env)]+findReplacementReport k k' mapping =+ let ges = findReplacement k k' mapping in+ case ges of+ [] -> z "no replacement" []+ ges -> ges+ +--}+ + +-- Find extensions of the given environment that also cause strand s+-- in k to match the trace of mapping !! s in k' matchStrand :: Preskel -> Preskel -> [Sid] -> (Gen, Env) -> Sid -> [(Gen, Env)] matchStrand k k' mapping env s =- matchTraces (trace (strandInst k s)) (trace (strandInst k' s')) env+ matchTraces (trace (strandInst k s)) (trace (strandInst k' s')) env where s' = mapping !! s+{-- -validateEnv :: Preskel -> Preskel -> [Sid] -> Env -> Bool-validateEnv k k' mapping env =- all (flip elem (knon k')) (map (instantiate env) (knon k)) &&- all (flip elem (kpnon k')) (map (instantiate env) (kpnon k)) &&- all (flip elem (kunique k')) (map (instantiate env) (kunique k)) &&- all (flip elem (kuniqgen k')) (map (instantiate env) (kuniqgen k)) &&- all (flip elem (kabsent k')) (map (instantiatePair env) (kabsent k)) &&- -- all (flip elem (kprecur k')) (map (permuteNode mapping) (kprecur k)) &&- all (flip elem (kfacts k'))- (map (instUpdateFact env (mapping !!)) (kfacts k)) &&- all (flip elem (kgenSt k')) (map (instantiate env) (kgenSt k)) &&- validateEnvOrig k k' mapping env &&- all (flip elem (tc k')) (permuteOrderings mapping (orderings k))+-- Find extensions of the given environment env that also cause strand+-- s in k to match the trace of mapping !! s in k', rejecting any+-- candidates env' that affect the binding of vars already in the+-- domain of env. These would yield too tight an effect on earlier+-- strands, ie env' applied to s' in k would be a proper instance of+-- mapping !! s' in k'. ++matchStrandConservatively :: Preskel -> Preskel -> [Sid] -> (Gen, Env) -> Sid -> [(Gen, Env)]+matchStrand k k' mapping env s =+ L.filter (envDisjointExtension env)+ $ matchTraces (trace (strandInst k s)) (trace (strandInst k' s')) env where+ s' = mapping !! s +++validateEnvReport :: Preskel -> Preskel -> [Sid] -> (Gen,Env) -> [(Gen,Env)]+validateEnvReport k k' mapping (gen,env) =+ case (validateEnv k k' mapping (gen,env)) of+ [] -> z "invalid env" []+ ges -> z (show $ L.length ges) ges++--}++validateEnv :: Preskel -> Preskel -> [Sid] -> (Gen,Env) -> [(Gen,Env)]+validateEnv k k' mapping (gen,env) =+ case (all (flip elem (knon k')) (map (instantiate env) (knon k)) &&+ all (flip elem (kpnon k')) (map (instantiate env) (kpnon k)) &&+ all (flip elem (kunique k')) (map (instantiate env) (kunique k)) &&+ all (flip elem (kuniqgen k')) (map (instantiate env) (kuniqgen k)) &&+ all (flip elem (kabsent k')) (map (instantiatePair env) (kabsent k)) &&+ -- all (flip elem (kprecur k')) (map (permuteNode mapping) (kprecur k)) &&+ all (flip elem (kgenSt k')) (map (instantiate env) (kgenSt k)) &&+ validateEnvOrig k k' mapping env &&+ (case normalizeOrderings True (permuteOrderings mapping (orderings k)) of + [o] -> all (flip elem (tc k')) o+ _ -> False) &&+ all (flip elem (kfacts k'))+ (map (instUpdateFact env (mapping !!)) covered)) of+ False -> []+ True -> validateExtendEnv mapping (gen,env) uncovered (kfacts k')+ where instantiatePair env (t1, t2) = (instantiate env t1, instantiate env t2)+ ftermMatched (FSid _) = True+ ftermMatched (FTerm t) = matched env t+ factMatched (Fact _ fterms) = all ftermMatched fterms+ (covered,uncovered) = L.partition factMatched (kfacts k) +matchFact :: Fact -> Fact -> (Gen,Env) -> [(Gen,Env)]+matchFact (Fact rel1 args1) (Fact rel2 args2) (gen,env) =+ case rel1 == rel2 of+ False -> []+ True -> matchArgs args1 args2 (gen,env)+ where+ matchArgs [] [] (gen,env) = [(gen,env)]+ matchArgs [] _ _ = []+ matchArgs _ [] _ = []+ matchArgs (a1 : rest1) (a2 : rest2) (gen,env) =+ case (a1,a2) of+ (FSid i, FSid j) -> if i == j then [(gen,env)] else []+ (FSid _, _) -> []+ (_, FSid _) -> []+ (FTerm t1, FTerm t2) ->+ do+ (g,e) <- match t1 t2 (gen,env)+ matchArgs rest1 rest2 (g,e) ++validateExtendEnv :: [Sid] -> (Gen,Env) -> [Fact] -> [Fact] -> [(Gen,Env)]+validateExtendEnv _ (gen,env) [] _ = [(gen,env)] +validateExtendEnv mapping (gen,env) (fact : uncoveredRest) targetFacts =+ do+ target <- targetFacts+ (g,e) <- matchFact updFact target (gen,env)+ validateExtendEnv mapping (g,e) uncoveredRest targetFacts + where+ updFact = updateFact (mapping !!) fact -- z "!!!!" $... + + + + {-- Degugging apparatus: allShowingFailingIndex _ [] = True allShowingFailingIndex i (True : rest) = allShowingFailingIndex (i+1) rest@@ -2371,13 +2541,15 @@ generalize :: Preskel -> [Candidate] generalize k =- (deleteNodes k' ++- forgetAssumption k' ++- weakenOrderings k' ++- (if useVariableSeparation- then (take separateVariablesLimit- (separateVariables k'))- else []))+ deleteNodes k' +++ if generalizeOnlyByDeletion then []+ else + (forgetAssumption k' +++ weakenOrderings k' +++ (if useVariableSeparation+ then (take separateVariablesLimit+ (separateVariables k'))+ else [])) where k' = withCoreFacts k @@ -2435,32 +2607,57 @@ deleteNodes :: Preskel -> [Candidate] deleteNodes k =- do- strand <- strands k- node <- nodes strand - cand <- deleteNode k node- -- (withCoreFacts k)- --tShow1 (withCoreFacts k) (fst cand) (snd cand) `deepseq` tShow2 k (fst cand) (snd cand) `deepseq` tShow3 k (fst cand) (snd cand) `deepseq` - return cand --return $ candWithCoreFacts cand+ if generalizeDeleteOnlyListeners+ -- if true, only listeners are+ -- candidates for node deletion.+ -- Recommended *only* to crank down+ -- the burden of generalization + then+ do+ str <- listeners k+ node <- nodes str+ cand <- deleteNode k node+ return cand+ + else+ do+ str <- strands k+ node <- nodes str + cand <- deleteNode k node + return cand -- $ z ")" cand+ +{--+-- $ z ("( " ++ (show $ (sid (strand node), pos node))) -{- candWithCoreFacts :: Candidate -> Candidate-candWithCoreFacts (k,sids) =- (withCoreFacts k, sids) -}+-- (withCoreFacts k)+--tShow1 (withCoreFacts k) (fst cand) (snd cand) `deepseq` tShow2 k (fst cand) (snd cand) `deepseq` tShow3 k (fst cand) (snd cand) `deepseq` +--} +isListener :: Strand -> Bool+isListener str =+ case trace $ inst str of+ [ (In (Plain t1)), (Out (Plain t2)) ] -> t1 == t2+ _ -> False++listeners :: Preskel -> [Strand] +listeners k = L.filter isListener $ strands k+ deleteNode :: Preskel -> Vertex -> [(Preskel, [Sid])] deleteNode k n | p == 0 && elem s (prob k) = [] | p == 0 = let mapping = deleteNth s (strandids k) in + let _ = () in --let k1 = kShow "parent" 5 k- let k' = deleteNodeRest k (gen k) (s, p)- (deleteNth s (insts k))- (deleteOrderings s (tc k))- (updatePerm s s (prob k))- (map- (updateFact (updateStrand s s))- (deleteStrandFacts s $ kfacts k))- mapping in + let k' = -- z "." $+ deleteNodeRest k (gen k) (s, p)+ (deleteNth s (insts k))+ (deleteOrderings s (tc k))+ (updatePerm s s (prob k))+ (map+ (updateFact (updateStrand s s))+ (deleteStrandFacts s $ kfacts k))+ mapping in --let k'' = kShow "child" 4 k' --let mapping' = zShow' "mapping" mapping --tShow1 k k' mapping `deepseq` tShow2 k k' mapping `deepseq` tShow3 k k' mapping `deepseq` @@ -2483,7 +2680,7 @@ | otherwise = do let mapping = strandids k- let i = inst (strand n)+ let i = inst (strand n) -- z "^" $ inst (strand n) (gen', i') <- bldInstance (role i) (take p (trace i)) (gen k) let k' = deleteNodeRest k gen' (s, p) (replaceNth i' s (insts k))@@ -2491,7 +2688,8 @@ (prob k) (deleteNodeFacts s p (kfacts k)) mapping- return (k', mapping)+ return (k', mapping) -- $ z "v" (k', mapping)+ where p = pos n s = sid (strand n)@@ -2607,14 +2805,14 @@ True -> case (homomorphism k0 k (prob k)) of [] -> k- (env : _) -> -- If there are multiple envs, this- -- could mean that some don't extend- -- under *simplify* to a result k1- -- such that k0 -> k1 -> k. The- -- latter may have made a different- -- choice of env in its facts.- -- (Delete this if it turns out- -- wrong.)+ ((_,env) : _) -> -- If there are multiple envs, this+ -- could mean that some don't extend+ -- under *simplify* to a result k1+ -- such that k0 -> k1 -> k. The+ -- latter may have made a different+ -- choice of env in its facts.+ -- (Delete this if it turns out+ -- wrong.) k { kfacts = map (instUpdateFact env (permOfSidList (prob k))) (kfacts k0) }@@ -3026,18 +3224,29 @@ -- Returns the environments that satisfy the antecedent -- but do not extend to satisfy any of the conclusions. ---goalSat :: Preskel -> Goal -> (Goal, [(Gen, Env)])-goalSat k g =+counterExamples :: Preskel -> Goal -> (Goal, [(Gen, Env)])+counterExamples k g = (g, [ (gen, e) | (gen, e) <- conjoin (antec g) k (gen k, emptyEnv),- conclusion (gen, e) ])- where- conclusion ge = all (disjunct ge) $ consq g- disjunct ge (ebvs,a) = null $ conjoinEbvs a ebvs k ge+ envStrandsWithin e (prob k), + not $ conclusionSucceeds (gen, e) ])+ where+ conclusionSucceeds ge =+ any (disjunctSucceeds ge) $ consq g+ disjunctSucceeds ge (ebvs,a) =+ (not . null) $ conjoinEbvs a ebvs k ge+ -sat :: Preskel -> [(Goal, [(Gen, Env)])]-sat k =- map (goalSat k) (kgoals k)+ +goalCounterExamples :: Preskel -> [(Goal, [(Gen, Env)])]+goalCounterExamples k =+ L.foldr+ (\goal soFar ->+ case counterExamples k goal of+ (_, []) -> soFar+ (_, ges) -> (goal,ges) : soFar)+ [] + (kgoals k) -- Conjunction @@ -3047,15 +3256,15 @@ conjoin [] _ ge = [ge] conjoin (a: as) k ge = do- ge <- checkSem (satisfy a []) k ge+ ge <- satisfy a [] k ge -- checkSem conjoin as k ge conjoinEbvs :: [AForm] -> [Term] -> Sem conjoinEbvs [] _ _ ge = [ge] conjoinEbvs (a: as) ebvs k ge = do- ge <- checkSem (satisfy a ebvs) k ge- conjoinEbvs as ebvs k ge+ ge' <- satisfy a ebvs k ge -- checkSem + conjoinEbvs as ebvs k ge' -- Suppose a gen-env pair ge that satisfies the antecedent of a goal, -- but does not extend to satisfy any of the disjuncts on the@@ -3386,17 +3595,16 @@ error ("In a rule equality check, " ++ "cannot find a binding for some variable in " ++ (show t') ++ "with ebvs " ++ (show ebvs))-- | ti == ti' = [(g, e)]- | not (null ebvs) =- filter (\(_,e') -> -- where all modified vars are ebvs- envsAgreeOutside e e' ebvs)- (L.map (\(g,s) ->- (g, substUpdate e s)) -- update the env with the- -- subst- $ unify t t' (g, emptySubst))-- | otherwise = []+ | otherwise =+ case (matched e t, matched e t') of+ (True, True) ->+ case ti == ti' of+ True -> [(g, e)]+ False -> []+ (False, True) -> match t ti' (g, e)+ (True, False) -> match t' ti (g, e)+ (False, False) ->+ error ("Strand.geq: Both terms have unbound variables") where ti = instantiate e t ti' = instantiate e t'@@ -4514,7 +4722,7 @@ ns = nstrands k Nothing -> error ("In rule " ++ name ++- ", parameter predicate did not get a strand")+ ", parameter predicate " ++ (show v) ++ " did not get a strand") rParam :: String -> Preskel -> (Gen, Env) -> Term -> Term -> [(Preskel, (Gen, Env))]@@ -4822,17 +5030,39 @@ error ("req: indices too large, (" ++ (show s) ++ ", " ++ (show t) ++ " in env " ++ (show e)) _ -> error ("In rule " ++ name ++ ", = did not get a strand")- | otherwise =+ | u == v = [(k, (g, e))]+ | otherwise = rUnify k (g, e) u v+ where+ u = if matched e x+ then instantiate e x+ else x++ v = if matched e y+ then instantiate e y + else y +++{-- ++otherwise = case (matched e x, matched e y) of (True, True) | u == v -> [(k, (g, e))] | otherwise -> rUnify k (g, e) u v- _ ->- error ("In rule " ++ name ++ ", = did not get a term")+ (False ,_) -> error ("In rule " ++ name +++ ", = did not get a term fully instantiated for " +++ (show x))+ (_, False) -> error ("In rule " ++ name +++ ", = did not get a term fully instantiated for " +++ (show y))+ -- _ ->+ -- error ("In rule " ++ name ++ ", = did not get a term") where- u = instantiate e x+ u = instantiate e x v = instantiate e y++--} rcommpair :: String -> NodeTerm -> NodeTerm -> Rewrite rcommpair name n n' k (g, e) =
tst/DH_hack.tst view
@@ -1,6 +1,6 @@ (herald "DH Hack" (bound 15)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/DH_hack.scm") (comment "Strand count bounded at 15") @@ -40,6 +40,7 @@ (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))) (label 0) (unrealized (0 0))+ (maps ((0) ((x x) (y y) (gcs gcs) (cek cek) (d d)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -60,6 +61,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0) ((x x) (y y) (gcs gcs) (cek cek) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton DH_hack@@ -125,6 +127,7 @@ (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))) (label 3) (unrealized (0 0))+ (maps ((0) ((cek cek) (x x) (gcs gcs) (y y) (d d)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -145,6 +148,7 @@ (label 4) (parent 3) (unrealized (1 0))+ (maps ((0) ((cek cek) (x x) (gcs gcs) (y y) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton DH_hack@@ -210,6 +214,7 @@ (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))) (label 6) (unrealized (0 0))+ (maps ((0) ((cek cek) (y y) (gcs gcs) (x x) (d d)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -230,6 +235,7 @@ (label 7) (parent 6) (unrealized (1 0))+ (maps ((0) ((cek cek) (y y) (gcs gcs) (x x) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton DH_hack@@ -296,6 +302,7 @@ ((recv cek) (send cek))) (label 9) (unrealized (0 0))+ (maps ((0 1) ((cek cek) (x x) (y y) (gcs gcs) (d d)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -318,6 +325,7 @@ (label 10) (parent 9) (unrealized (2 0))+ (maps ((0 1) ((cek cek) (x x) (y y) (gcs gcs) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton DH_hack@@ -343,6 +351,7 @@ (label 11) (parent 10) (unrealized (1 0))+ (maps ((0 1) ((cek cek) (x x) (y y) (gcs gcs) (d d)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton DH_hack@@ -368,6 +377,7 @@ (label 12) (parent 11) (unrealized (1 0))+ (maps ((0 1) ((cek cek) (x x) (y y) (gcs gcs) (d d)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton DH_hack@@ -398,6 +408,7 @@ (label 13) (parent 11) (unrealized (1 0) (4 0))+ (maps ((0 1) ((cek cek) (x x) (y y) (gcs gcs) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton DH_hack@@ -425,6 +436,7 @@ (parent 11) (unrealized (4 0)) (dead)+ (maps ((0 1) ((cek cek) (x x) (y y) (gcs gcs) (d d)))) (comment "empty cohort")) (defskeleton DH_hack@@ -452,6 +464,7 @@ (parent 12) (unrealized (4 0)) (dead)+ (maps ((0 1) ((cek cek) (x x) (y y) (gcs gcs) (d d)))) (comment "empty cohort")) (defskeleton DH_hack@@ -479,6 +492,7 @@ (parent 12) (unrealized (4 0)) (dead)+ (maps ((0 1) ((cek cek) (x x) (y y) (gcs gcs) (d d)))) (comment "empty cohort")) (defskeleton DH_hack@@ -508,6 +522,7 @@ (label 17) (parent 13) (unrealized (1 0))+ (maps ((0 1) ((cek cek) (x x) (y y) (gcs gcs) (d d)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton DH_hack@@ -540,6 +555,7 @@ (parent 17) (unrealized (5 0)) (dead)+ (maps ((0 1) ((cek cek) (x x) (y y) (gcs gcs) (d d)))) (comment "empty cohort")) (defskeleton DH_hack@@ -572,6 +588,7 @@ (parent 17) (unrealized (5 0)) (dead)+ (maps ((0 1) ((cek cek) (x x) (y y) (gcs gcs) (d d)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -613,6 +630,7 @@ ((recv cek) (send cek))) (label 20) (unrealized (0 0))+ (maps ((0 1) ((cek cek) (x x) (gcs gcs) (y y) (d d)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -635,6 +653,7 @@ (label 21) (parent 20) (unrealized (2 0))+ (maps ((0 1) ((cek cek) (x x) (gcs gcs) (y y) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton DH_hack@@ -660,6 +679,7 @@ (label 22) (parent 21) (unrealized (1 0))+ (maps ((0 1) ((cek cek) (x x) (gcs gcs) (y y) (d d)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton DH_hack@@ -717,6 +737,7 @@ (label 24) (parent 22) (unrealized (4 0))+ (maps ((0 1) ((cek cek) (x x) (gcs gcs) (y y) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton DH_hack@@ -744,6 +765,7 @@ (parent 22) (unrealized (4 0)) (dead)+ (maps ((0 1) ((cek cek) (x x) (gcs gcs) (y y) (d d)))) (comment "empty cohort")) (defskeleton DH_hack@@ -816,6 +838,7 @@ ((recv cek) (send cek))) (label 27) (unrealized (0 0))+ (maps ((0 1) ((cek cek) (y y) (gcs gcs) (x x) (d d)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -838,6 +861,7 @@ (label 28) (parent 27) (unrealized (2 0))+ (maps ((0 1) ((cek cek) (y y) (gcs gcs) (x x) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton DH_hack
− tst/Make4.hs
@@ -1,272 +0,0 @@--- A simple, CPSA specific make system--module Make (cpsa, shapes, sas, cleanse, get, set,- build, clean, roots) where--{- Place a copy of this source file in the directory used to store-CPSA problem statements, edit it to suit your needs, and load it into-a Haskell interpreter.--Normally, just the build and the clean command are used. It's the-build command that you usually modify.--To analyze a problem in prob.scm, type:--*Make> cpsa "prob"--If successful, the analysis is in the file prob.xhtml, which can be-viewed with a standards-compliant browser.--For a shapes only version of the analysis, type:--*Make> shapes "prob"--If successful, the shapes are in the file prob_shapes.xhtml.--*Make> sas "prob"--If successful, the shape analysis sentences are in the file-prob_sas.text.--To remove the files generated from source files, type:--*Make> cleanse "prob"--To see the command-line options used by CPSA, type:--*Make> get--To change the command-line options used by CPSA to "-b 15", type:--*Make> set "-b 15"--To analyze all source files in the directory, type:--*Make> build--To remove the files generated from source files in the directory, type:--*Make> clean---}--import Control.Monad (mapM_)-import Data.List (sort)-import Data.IORef (IORef, newIORef, readIORef, writeIORef)-import System.Exit (ExitCode (..))-import System.Process (system)-import System.IO (putStrLn)-import System.IO.Unsafe (unsafePerformIO)-import System.FilePath (FilePath, splitExtension)-import System.Directory (removeFile, doesFileExist, getModificationTime,- getCurrentDirectory, getDirectoryContents)---- Flags for CPSA--initialCpsaFlags :: String-initialCpsaFlags = "+RTS -M512m -RTS"--graphFlags :: String-graphFlags = ""--- To enable zooming, use:--- graphFlags = " -z"---- A mutable location for CPSA flags-cpsaFlags :: IORef String-cpsaFlags = unsafePerformIO $ newIORef initialCpsaFlags---- Get the CPSA flags-get :: IO String-get =- readIORef cpsaFlags---- Set the CPSA flags-set :: String -> IO ()-set flags =- writeIORef cpsaFlags flags---- Transformation rules--data Rule = Rule- { prog :: String, -- program to run- inputExt :: String, -- input file name extension- outputExt :: String } -- output file name extension---- Graph Rule--graph :: FilePath -> IO ()-graph root =- make graphRule root -- make graph using given rule--graphRule :: Rule-graphRule =- Rule { prog = "cpsa4graph" ++ graphFlags,- inputExt = cpsaExt,- outputExt = graphExt }---- CPSA Rule--cpsa :: FilePath -> IO ()-cpsa root =- do- cpsaBasic root- shapes root- graph root---- CPSA using Basic rule--cpsaBasic :: FilePath -> IO ()-cpsaBasic root =- do- flags <- get -- get CPSA flags- make (cpsaBasicRule flags) root -- make CPSA output using given rule--cpsaBasicRule :: String -> Rule-cpsaBasicRule flags =- Rule { prog = "cpsa4 " ++ flags,- inputExt = sourceBasicExt,- outputExt = cpsaExt }---- Shapes Rule--shapes :: FilePath -> IO ()-shapes root =- do- cpsaBasic root -- Run CPSA if need be- make shapesRule root- graph $ root ++ shapesRoot--shapesRule :: Rule-shapesRule =- Rule { prog = "cpsa4shapes",- inputExt = cpsaExt,- outputExt = shapesRoot ++ cpsaExt }---- SAS Rule--sas :: FilePath -> IO ()-sas root =- do- cpsaBasic root -- Run CPSA if need be- make sasRule root--sasRule :: Rule-sasRule =- Rule { prog = "cpsa4sas",- inputExt = cpsaExt,- outputExt = sasExt }---- Clean generated files--cleanse :: FilePath -> IO ()-cleanse root =- do- rm $ root ++ cpsaExt- rm $ root ++ graphExt- rm $ root ++ shapesRoot ++ cpsaExt- rm $ root ++ shapesRoot ++ graphExt- rm $ root ++ sasExt---- File Extensions--sourceBasicExt :: String-sourceBasicExt = ".scm"--cpsaExt :: String-cpsaExt = ".txt"--shapesRoot :: String-shapesRoot = "_shapes"--sasExt :: String-sasExt = "_sas.text"--graphExt :: String-graphExt = ".xhtml"---- Rule Interpreters---- Make output for root using rule-make :: Rule -> FilePath -> IO ()-make rule root =- do- let input = root ++ inputExt rule- let output = root ++ outputExt rule- done <- made input output- case done of- True -> return () -- Nothing to do- False -> run (prog rule) input output---- See if an output file is up-to-date-made :: FilePath -> FilePath -> IO Bool-made input output =- do- src <- doesFileExist input- dst <- doesFileExist output- case src && dst of- False -> return False- True ->- do- src <- getModificationTime input- dst <- getModificationTime output- return $ src < dst---- Run a program with input and output from files---- Print the command before running it. Delete the output when the--- command fails.-run :: String -> FilePath -> FilePath -> IO ()-run prog input output =- do- let cmd = prog ++ " -o " ++ output ++ " " ++ input- putStrLn cmd- code <- system cmd- case code of- ExitSuccess -> return ()- ExitFailure _ ->- do- --rm output- fail "Command failed"---- Remove a file---- Prints the command when there is a file to be deleted.-rm :: FilePath -> IO ()-rm output =- do- exists <- doesFileExist output- case exists of- False -> return () -- File doesn't exist- True ->- do -- Print command before removal- putStrLn $ "rm " ++ output- removeFile output---- Return the roots of the CPSA source files in the current directory.--roots :: [String] -> IO [FilePath]-roots exts =- do- dir <- getCurrentDirectory- files <- getDirectoryContents dir- let roots = [ root |- file <- files,- let (root, ext) = splitExtension file,- elem ext exts ] -- Filter for source files- return $ sort roots---- Build the shapes for all the source files in the current directory.--build :: IO ()-build =- do- probs <- roots [sourceBasicExt]- mapM_ cpsa probs---- Clean files generated for all the source files in the current directory.--clean :: IO ()-clean =- do- probs <- roots [sourceBasicExt]- mapM_ cleanse probs
tst/ab.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/ab.scm") (defprotocol ab basic@@ -28,6 +28,7 @@ (traces ((send (enc x k)) (recv (enc x x k)))) (label 0) (unrealized (0 1))+ (maps ((0) ((x x) (k k)))) (origs (x (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -46,6 +47,7 @@ (parent 0) (unrealized (1 0)) (dead)+ (maps ((0) ((x x) (k k)))) (comment "empty cohort")) (defskeleton ab@@ -63,6 +65,7 @@ (parent 0) (unrealized (1 0)) (dead)+ (maps ((0) ((x x) (k k)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/abc.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/abc.scm") (defprotocol abc basic@@ -31,6 +31,7 @@ (traces ((send (enc x k)) (recv (enc x x k)))) (label 0) (unrealized (0 1))+ (maps ((0) ((x x) (k k)))) (origs (x (0 0))) (comment "3 in cohort - 3 not yet seen")) @@ -49,6 +50,7 @@ (parent 0) (unrealized (1 0)) (dead)+ (maps ((0) ((x x) (k k)))) (comment "empty cohort")) (defskeleton abc@@ -66,6 +68,7 @@ (parent 0) (unrealized (1 0)) (dead)+ (maps ((0) ((x x) (k k)))) (comment "empty cohort")) (defskeleton abc@@ -83,6 +86,7 @@ (parent 0) (unrealized (1 0)) (dead)+ (maps ((0) ((x x) (k k)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/aik.tst view
@@ -1,6 +1,6 @@ (herald "Anonymous identity protocol from TCG") -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/aik.scm") (defprotocol aikprot basic@@ -40,6 +40,7 @@ (send (cat (enc "aic" i k x (privk pc)) (enc k (invk k) srk))))) (label 0) (unrealized (0 2))+ (maps ((0) ((mf mf) (pc pc) (i i) (x x) (ek ek) (k k) (srk srk)))) (origs ((invk k) (0 3)) (k (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -63,6 +64,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0) ((mf mf) (pc pc) (i i) (x x) (ek ek) (k k) (srk srk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton aikprot@@ -87,6 +89,7 @@ (label 2) (parent 1) (unrealized (0 2))+ (maps ((0) ((mf mf) (pc pc) (i i) (x x) (ek ek) (k k) (srk srk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton aikprot@@ -149,6 +152,7 @@ (operation encryption-test (displaced 4 2 ca 1) (enc "ekc" mf-1 ek-1 (privk mf-1)) (3 0)) (strand-map 0 1 2 1))) (unrealized (3 0))+ (maps ((0) ((mf mf) (pc pc) (i i) (x x) (ek ek) (k k) (srk srk)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")@@ -187,6 +191,7 @@ (send (enc "aic" i k x (privk pc))))) (label 5) (unrealized (0 0))+ (maps ((0) ((i i) (x x) (pc pc) (k k)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -207,6 +212,7 @@ (label 6) (parent 5) (unrealized (1 0))+ (maps ((0) ((i i) (x x) (pc pc) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton aikprot@@ -228,6 +234,7 @@ (label 7) (parent 6) (unrealized (0 0))+ (maps ((0) ((i i) (x x) (pc pc) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton aikprot@@ -257,6 +264,7 @@ (label 8) (parent 7) (unrealized (3 2))+ (maps ((0) ((i i) (x x) (pc pc) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton aikprot@@ -287,6 +295,7 @@ (operation encryption-test (displaced 4 2 ca 1) (enc "ekc" mf-0 ek-0 (privk mf-0)) (3 0)) (strand-map 0 1 2 1))) (unrealized (3 0))+ (maps ((0) ((i i) (x x) (pc pc) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton aikprot@@ -349,6 +358,7 @@ (label 11) (parent 8) (unrealized (4 0))+ (maps ((0) ((i i) (x x) (pc pc) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton aikprot@@ -384,6 +394,7 @@ (seen-ops (10 (operation generalization deleted (1 0)) (strand-map 0 2 3 4))) (realized)+ (maps ((0) ((i i) (x x) (pc pc) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton aikprot@@ -419,6 +430,7 @@ (label 13) (parent 11) (unrealized (3 2))+ (maps ((0) ((i i) (x x) (pc pc) (k k)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton aikprot@@ -454,6 +466,7 @@ (label 14) (parent 13) (realized)+ (maps ((0) ((i i) (x x) (pc pc) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton aikprot@@ -490,6 +503,7 @@ (label 15) (parent 13) (realized)+ (maps ((0) ((i i) (x x) (pc pc) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton aikprot@@ -537,6 +551,7 @@ (enc "ekc" mf-2 ek-1 (privk mf-2)) (6 0)) (strand-map 0 1 2 3 4 5 4))) (unrealized (6 0))+ (maps ((0) ((i i) (x x) (pc pc) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton aikprot@@ -570,6 +585,7 @@ (seen-ops (10 (operation generalization deleted (1 0)) (strand-map 0 2 3 4))) (realized)+ (maps ((0) ((i i) (x x) (pc pc) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton aikprot@@ -604,6 +620,7 @@ (seen-ops (10 (operation generalization deleted (4 0)) (strand-map 0 1 2 3))) (realized)+ (maps ((0) ((i i) (x x) (pc pc) (k k)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
tst/atomic-open-closed.tst view
@@ -1,6 +1,6 @@ (herald atomic-open-closed (bound 44)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/atomic-open-closed.scm") (comment "Strand count bounded at 44") @@ -41,75 +41,75 @@ (defrule gen-state-close (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)- (p "dev-close" "o" z o) (p "dev-close" "k" z k)- (p "dev-close" "any" z (cat o o)))+ (and (p "dev-close" z (idx 1)) (p "dev-close" "any" z (cat o o))+ (p "dev-close" "k" z k) (p "dev-close" "o" z o)+ (p "dev-close" "d" z d)) (gen-st (cat "st" d o o))))) (defrule gen-state-pass (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)- (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o))))) (defrule gen-state-open (forall ((z strd) (d o k mesg)) (implies- (and (p "dev-open" "d" z d) (p "dev-open" "o" z o)- (p "dev-open" "k" z k))+ (and (p "dev-open" "k" z k) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st-k" d o k))))) (defrule gen-state-close (forall ((z strd) (d o k mesg)) (implies- (and (p "dev-close" "d" z d) (p "dev-close" "o" z o)- (p "dev-close" "k" z k))+ (and (p "dev-close" "k" z k) (p "dev-close" "o" z o)+ (p "dev-close" "d" z d)) (gen-st (cat "st-k" d o k))))) (defrule gen-state-pass (forall ((z strd) (d o k mesg)) (implies- (and (p "dev-pass" "d" z d) (p "dev-pass" "o" z o)- (p "dev-pass" "k" z k))+ (and (p "dev-pass" "k" z k) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st-k" d o k))))) (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z1 z2)))) (defrule intro-same-dev-up (forall ((z strd) (lk ls locn)) (implies- (and (p "dev-up" "lk" z lk) (p "dev-up" "ls" z ls))+ (and (p "dev-up" "ls" z ls) (p "dev-up" "lk" z lk)) (fact same-dev ls lk)))) (defrule intro-same-dev-open (forall ((z strd) (lk ls locn)) (implies- (and (p "dev-open" "lk" z lk) (p "dev-open" "ls" z ls))+ (and (p "dev-open" "ls" z ls) (p "dev-open" "lk" z lk)) (fact same-dev ls lk)))) (defrule intro-same-dev-close (forall ((z strd) (lk ls locn)) (implies- (and (p "dev-close" "lk" z lk) (p "dev-close" "ls" z ls))+ (and (p "dev-close" "ls" z ls) (p "dev-close" "lk" z lk)) (fact same-dev ls lk)))) (defrule intro-same-dev-pass (forall ((z strd) (lk ls locn)) (implies- (and (p "dev-pass" "lk" z lk) (p "dev-pass" "ls" z ls))+ (and (p "dev-pass" "ls" z ls) (p "dev-pass" "lk" z lk)) (fact same-dev ls lk)))) (defrule same-dev-ls-lk (forall ((ls lk lk-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (and (fact same-dev ls lk-0) (fact same-dev ls lk)) (= lk lk-0)))) (defrule same-dev-lk-ls (forall ((lk ls ls-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (and (fact same-dev ls-0 lk) (fact same-dev ls lk)) (= ls ls-0)))) (defrule single-thread-up-up (forall ((x y strd) (lk locn)) (implies- (and (p "dev-up" x (idx 5)) (p "dev-up" y (idx 5))- (p "dev-up" "lk" x lk) (p "dev-up" "lk" y lk))+ (and (p "dev-up" y (idx 5)) (p "dev-up" x (idx 5))+ (p "dev-up" "lk" y lk) (p "dev-up" "lk" x lk)) (or (= x y) (prec x (idx 4) y (idx 1))@@ -117,20 +117,20 @@ (defrule single-thread-up-open (forall ((x y strd) (ls locn)) (implies- (and (p "dev-up" x (idx 5)) (p "dev-open" y (idx 4))- (p "dev-up" "ls" x ls) (p "dev-open" "ls" y ls))+ (and (p "dev-open" y (idx 4)) (p "dev-up" x (idx 5))+ (p "dev-open" "ls" y ls) (p "dev-up" "ls" x ls)) (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1)))))) (defrule single-thread-up-close (forall ((x y strd) (ls locn)) (implies- (and (p "dev-up" x (idx 5)) (p "dev-close" y (idx 4))- (p "dev-up" "ls" x ls) (p "dev-close" "ls" y ls))+ (and (p "dev-close" y (idx 4)) (p "dev-up" x (idx 5))+ (p "dev-close" "ls" y ls) (p "dev-up" "ls" x ls)) (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1)))))) (defrule single-thread-open-open (forall ((x y strd) (ls locn)) (implies- (and (p "dev-open" x (idx 4)) (p "dev-open" y (idx 4))- (p "dev-open" "ls" x ls) (p "dev-open" "ls" y ls))+ (and (p "dev-open" y (idx 4)) (p "dev-open" x (idx 4))+ (p "dev-open" "ls" y ls) (p "dev-open" "ls" x ls)) (or (= x y) (prec x (idx 3) y (idx 1))@@ -138,14 +138,14 @@ (defrule single-thread-ls-open-close (forall ((x y strd) (ls locn)) (implies- (and (p "dev-open" x (idx 4)) (p "dev-close" y (idx 4))- (p "dev-open" "ls" x ls) (p "dev-close" "ls" y ls))+ (and (p "dev-close" y (idx 4)) (p "dev-open" x (idx 4))+ (p "dev-close" "ls" y ls) (p "dev-open" "ls" x ls)) (or (prec x (idx 3) y (idx 1)) (prec y (idx 3) x (idx 1)))))) (defrule single-thread-close-close (forall ((x y strd) (ls locn)) (implies- (and (p "dev-close" x (idx 4)) (p "dev-close" y (idx 4))- (p "dev-close" "ls" x ls) (p "dev-close" "ls" y ls))+ (and (p "dev-close" y (idx 4)) (p "dev-close" x (idx 4))+ (p "dev-close" "ls" y ls) (p "dev-close" "ls" x ls)) (or (= x y) (prec x (idx 3) y (idx 1))@@ -153,8 +153,8 @@ (defrule atomic-up-pass (forall ((x y strd) (lk locn)) (implies- (and (p "dev-up" x (idx 5)) (p "dev-pass" y (idx 3))- (p "dev-up" "lk" x lk) (p "dev-pass" "lk" y lk)+ (and (p "dev-pass" y (idx 3)) (p "dev-up" x (idx 5))+ (p "dev-pass" "lk" y lk) (p "dev-up" "lk" x lk) (prec x (idx 2) y (idx 1))) (prec x (idx 4) y (idx 1))))) (defrule dev-up-completes@@ -235,9 +235,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -298,6 +297,7 @@ (label 0) (unrealized (0 1) (1 0)) (preskeleton)+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (origs (k (0 0))) (comment "Not a skeleton")) @@ -313,6 +313,7 @@ (label 1) (parent 0) (unrealized (0 1) (1 0))+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (origs (k (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -342,6 +343,7 @@ (parent 1) (unrealized (0 1) (1 0)) (dead)+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -383,75 +385,75 @@ (defrule gen-state-close (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)- (p "dev-close" "o" z o) (p "dev-close" "k" z k)- (p "dev-close" "any" z (cat o o)))+ (and (p "dev-close" z (idx 1)) (p "dev-close" "any" z (cat o o))+ (p "dev-close" "k" z k) (p "dev-close" "o" z o)+ (p "dev-close" "d" z d)) (gen-st (cat "st" d o o))))) (defrule gen-state-pass (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)- (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o))))) (defrule gen-state-open (forall ((z strd) (d o k mesg)) (implies- (and (p "dev-open" "d" z d) (p "dev-open" "o" z o)- (p "dev-open" "k" z k))+ (and (p "dev-open" "k" z k) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st-k" d o k))))) (defrule gen-state-close (forall ((z strd) (d o k mesg)) (implies- (and (p "dev-close" "d" z d) (p "dev-close" "o" z o)- (p "dev-close" "k" z k))+ (and (p "dev-close" "k" z k) (p "dev-close" "o" z o)+ (p "dev-close" "d" z d)) (gen-st (cat "st-k" d o k))))) (defrule gen-state-pass (forall ((z strd) (d o k mesg)) (implies- (and (p "dev-pass" "d" z d) (p "dev-pass" "o" z o)- (p "dev-pass" "k" z k))+ (and (p "dev-pass" "k" z k) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st-k" d o k))))) (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z1 z2)))) (defrule intro-same-dev-up (forall ((z strd) (lk ls locn)) (implies- (and (p "dev-up" "lk" z lk) (p "dev-up" "ls" z ls))+ (and (p "dev-up" "ls" z ls) (p "dev-up" "lk" z lk)) (fact same-dev ls lk)))) (defrule intro-same-dev-open (forall ((z strd) (lk ls locn)) (implies- (and (p "dev-open" "lk" z lk) (p "dev-open" "ls" z ls))+ (and (p "dev-open" "ls" z ls) (p "dev-open" "lk" z lk)) (fact same-dev ls lk)))) (defrule intro-same-dev-close (forall ((z strd) (lk ls locn)) (implies- (and (p "dev-close" "lk" z lk) (p "dev-close" "ls" z ls))+ (and (p "dev-close" "ls" z ls) (p "dev-close" "lk" z lk)) (fact same-dev ls lk)))) (defrule intro-same-dev-pass (forall ((z strd) (lk ls locn)) (implies- (and (p "dev-pass" "lk" z lk) (p "dev-pass" "ls" z ls))+ (and (p "dev-pass" "ls" z ls) (p "dev-pass" "lk" z lk)) (fact same-dev ls lk)))) (defrule same-dev-ls-lk (forall ((ls lk lk-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (and (fact same-dev ls lk-0) (fact same-dev ls lk)) (= lk lk-0)))) (defrule same-dev-lk-ls (forall ((lk ls ls-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (and (fact same-dev ls-0 lk) (fact same-dev ls lk)) (= ls ls-0)))) (defrule single-thread-up-up (forall ((x y strd) (lk locn)) (implies- (and (p "dev-up" x (idx 5)) (p "dev-up" y (idx 5))- (p "dev-up" "lk" x lk) (p "dev-up" "lk" y lk))+ (and (p "dev-up" y (idx 5)) (p "dev-up" x (idx 5))+ (p "dev-up" "lk" y lk) (p "dev-up" "lk" x lk)) (or (= x y) (prec x (idx 4) y (idx 1))@@ -459,20 +461,20 @@ (defrule single-thread-up-open (forall ((x y strd) (ls locn)) (implies- (and (p "dev-up" x (idx 5)) (p "dev-open" y (idx 4))- (p "dev-up" "ls" x ls) (p "dev-open" "ls" y ls))+ (and (p "dev-open" y (idx 4)) (p "dev-up" x (idx 5))+ (p "dev-open" "ls" y ls) (p "dev-up" "ls" x ls)) (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1)))))) (defrule single-thread-up-close (forall ((x y strd) (ls locn)) (implies- (and (p "dev-up" x (idx 5)) (p "dev-close" y (idx 4))- (p "dev-up" "ls" x ls) (p "dev-close" "ls" y ls))+ (and (p "dev-close" y (idx 4)) (p "dev-up" x (idx 5))+ (p "dev-close" "ls" y ls) (p "dev-up" "ls" x ls)) (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1)))))) (defrule single-thread-open-open (forall ((x y strd) (ls locn)) (implies- (and (p "dev-open" x (idx 4)) (p "dev-open" y (idx 4))- (p "dev-open" "ls" x ls) (p "dev-open" "ls" y ls))+ (and (p "dev-open" y (idx 4)) (p "dev-open" x (idx 4))+ (p "dev-open" "ls" y ls) (p "dev-open" "ls" x ls)) (or (= x y) (prec x (idx 3) y (idx 1))@@ -480,14 +482,14 @@ (defrule single-thread-ls-open-close (forall ((x y strd) (ls locn)) (implies- (and (p "dev-open" x (idx 4)) (p "dev-close" y (idx 4))- (p "dev-open" "ls" x ls) (p "dev-close" "ls" y ls))+ (and (p "dev-close" y (idx 4)) (p "dev-open" x (idx 4))+ (p "dev-close" "ls" y ls) (p "dev-open" "ls" x ls)) (or (prec x (idx 3) y (idx 1)) (prec y (idx 3) x (idx 1)))))) (defrule single-thread-close-close (forall ((x y strd) (ls locn)) (implies- (and (p "dev-close" x (idx 4)) (p "dev-close" y (idx 4))- (p "dev-close" "ls" x ls) (p "dev-close" "ls" y ls))+ (and (p "dev-close" y (idx 4)) (p "dev-close" x (idx 4))+ (p "dev-close" "ls" y ls) (p "dev-close" "ls" x ls)) (or (= x y) (prec x (idx 3) y (idx 1))@@ -495,8 +497,8 @@ (defrule atomic-up-pass (forall ((x y strd) (lk locn)) (implies- (and (p "dev-up" x (idx 5)) (p "dev-pass" y (idx 3))- (p "dev-up" "lk" x lk) (p "dev-pass" "lk" y lk)+ (and (p "dev-pass" y (idx 3)) (p "dev-up" x (idx 5))+ (p "dev-pass" "lk" y lk) (p "dev-up" "lk" x lk) (prec x (idx 2) y (idx 1))) (prec x (idx 4) y (idx 1))))) (defrule dev-up-completes@@ -577,9 +579,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -638,6 +639,7 @@ (load ls (cat pt-0 "st" d o o)) (send (enc "you may pass" n k)))) (label 3) (realized)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (origs (n (0 3))) (comment "Not closed under rules")) @@ -654,12 +656,13 @@ (label 4) (parent 3) (unrealized (0 1) (0 2))+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (origs (n (0 3))) (comment "1 in cohort - 1 not yet seen")) (defskeleton atomic-open-closed (vars (old old1 mesg) (k skey) (n text) (d o name)- (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (lk ls locn))+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk locn)) (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls)) (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o) (start-ch start-ch) (lk lk) (ls ls))@@ -683,11 +686,12 @@ (label 5) (parent 4) (unrealized (0 2) (1 0))+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton atomic-open-closed (vars (old old1 mesg) (k skey) (n text) (d o name)- (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (lk ls locn))+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk locn)) (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls)) (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o) (start-ch start-ch) (lk lk) (ls ls))@@ -712,6 +716,7 @@ (label 6) (parent 5) (unrealized (0 2))+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton atomic-open-closed@@ -749,11 +754,12 @@ (label 7) (parent 6) (unrealized (3 1))+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton atomic-open-closed (vars (any old old1 mesg) (k skey) (n n-0 text) (d o name)- (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (lk ls locn))+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn)) (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls)) (defstrand owner-power-dev 1 (k k) (d d) (o o) (start-ch start-ch)) (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)@@ -828,75 +834,75 @@ (defrule gen-state-close (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)- (p "dev-close" "o" z o) (p "dev-close" "k" z k)- (p "dev-close" "any" z (cat o o)))+ (and (p "dev-close" z (idx 1)) (p "dev-close" "any" z (cat o o))+ (p "dev-close" "k" z k) (p "dev-close" "o" z o)+ (p "dev-close" "d" z d)) (gen-st (cat "st" d o o))))) (defrule gen-state-pass (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)- (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o))))) (defrule gen-state-open (forall ((z strd) (d o k mesg)) (implies- (and (p "dev-open" "d" z d) (p "dev-open" "o" z o)- (p "dev-open" "k" z k))+ (and (p "dev-open" "k" z k) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st-k" d o k))))) (defrule gen-state-close (forall ((z strd) (d o k mesg)) (implies- (and (p "dev-close" "d" z d) (p "dev-close" "o" z o)- (p "dev-close" "k" z k))+ (and (p "dev-close" "k" z k) (p "dev-close" "o" z o)+ (p "dev-close" "d" z d)) (gen-st (cat "st-k" d o k))))) (defrule gen-state-pass (forall ((z strd) (d o k mesg)) (implies- (and (p "dev-pass" "d" z d) (p "dev-pass" "o" z o)- (p "dev-pass" "k" z k))+ (and (p "dev-pass" "k" z k) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st-k" d o k))))) (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z1 z2)))) (defrule intro-same-dev-up (forall ((z strd) (lk ls locn)) (implies- (and (p "dev-up" "lk" z lk) (p "dev-up" "ls" z ls))+ (and (p "dev-up" "ls" z ls) (p "dev-up" "lk" z lk)) (fact same-dev ls lk)))) (defrule intro-same-dev-open (forall ((z strd) (lk ls locn)) (implies- (and (p "dev-open" "lk" z lk) (p "dev-open" "ls" z ls))+ (and (p "dev-open" "ls" z ls) (p "dev-open" "lk" z lk)) (fact same-dev ls lk)))) (defrule intro-same-dev-close (forall ((z strd) (lk ls locn)) (implies- (and (p "dev-close" "lk" z lk) (p "dev-close" "ls" z ls))+ (and (p "dev-close" "ls" z ls) (p "dev-close" "lk" z lk)) (fact same-dev ls lk)))) (defrule intro-same-dev-pass (forall ((z strd) (lk ls locn)) (implies- (and (p "dev-pass" "lk" z lk) (p "dev-pass" "ls" z ls))+ (and (p "dev-pass" "ls" z ls) (p "dev-pass" "lk" z lk)) (fact same-dev ls lk)))) (defrule same-dev-ls-lk (forall ((ls lk lk-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (and (fact same-dev ls lk-0) (fact same-dev ls lk)) (= lk lk-0)))) (defrule same-dev-lk-ls (forall ((lk ls ls-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (and (fact same-dev ls-0 lk) (fact same-dev ls lk)) (= ls ls-0)))) (defrule single-thread-up-up (forall ((x y strd) (lk locn)) (implies- (and (p "dev-up" x (idx 5)) (p "dev-up" y (idx 5))- (p "dev-up" "lk" x lk) (p "dev-up" "lk" y lk))+ (and (p "dev-up" y (idx 5)) (p "dev-up" x (idx 5))+ (p "dev-up" "lk" y lk) (p "dev-up" "lk" x lk)) (or (= x y) (prec x (idx 4) y (idx 1))@@ -904,20 +910,20 @@ (defrule single-thread-up-open (forall ((x y strd) (ls locn)) (implies- (and (p "dev-up" x (idx 5)) (p "dev-open" y (idx 4))- (p "dev-up" "ls" x ls) (p "dev-open" "ls" y ls))+ (and (p "dev-open" y (idx 4)) (p "dev-up" x (idx 5))+ (p "dev-open" "ls" y ls) (p "dev-up" "ls" x ls)) (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1)))))) (defrule single-thread-up-close (forall ((x y strd) (ls locn)) (implies- (and (p "dev-up" x (idx 5)) (p "dev-close" y (idx 4))- (p "dev-up" "ls" x ls) (p "dev-close" "ls" y ls))+ (and (p "dev-close" y (idx 4)) (p "dev-up" x (idx 5))+ (p "dev-close" "ls" y ls) (p "dev-up" "ls" x ls)) (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1)))))) (defrule single-thread-open-open (forall ((x y strd) (ls locn)) (implies- (and (p "dev-open" x (idx 4)) (p "dev-open" y (idx 4))- (p "dev-open" "ls" x ls) (p "dev-open" "ls" y ls))+ (and (p "dev-open" y (idx 4)) (p "dev-open" x (idx 4))+ (p "dev-open" "ls" y ls) (p "dev-open" "ls" x ls)) (or (= x y) (prec x (idx 3) y (idx 1))@@ -925,14 +931,14 @@ (defrule single-thread-ls-open-close (forall ((x y strd) (ls locn)) (implies- (and (p "dev-open" x (idx 4)) (p "dev-close" y (idx 4))- (p "dev-open" "ls" x ls) (p "dev-close" "ls" y ls))+ (and (p "dev-close" y (idx 4)) (p "dev-open" x (idx 4))+ (p "dev-close" "ls" y ls) (p "dev-open" "ls" x ls)) (or (prec x (idx 3) y (idx 1)) (prec y (idx 3) x (idx 1)))))) (defrule single-thread-close-close (forall ((x y strd) (ls locn)) (implies- (and (p "dev-close" x (idx 4)) (p "dev-close" y (idx 4))- (p "dev-close" "ls" x ls) (p "dev-close" "ls" y ls))+ (and (p "dev-close" y (idx 4)) (p "dev-close" x (idx 4))+ (p "dev-close" "ls" y ls) (p "dev-close" "ls" x ls)) (or (= x y) (prec x (idx 3) y (idx 1))@@ -940,8 +946,8 @@ (defrule atomic-up-pass (forall ((x y strd) (lk locn)) (implies- (and (p "dev-up" x (idx 5)) (p "dev-pass" y (idx 3))- (p "dev-up" "lk" x lk) (p "dev-pass" "lk" y lk)+ (and (p "dev-pass" y (idx 3)) (p "dev-up" x (idx 5))+ (p "dev-pass" "lk" y lk) (p "dev-up" "lk" x lk) (prec x (idx 2) y (idx 1))) (prec x (idx 4) y (idx 1))))) (defrule dev-up-completes@@ -1022,9 +1028,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -1088,6 +1093,10 @@ (label 9) (unrealized (0 1) (1 0) (1 1)) (preskeleton)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "Not a skeleton")) @@ -1106,6 +1115,10 @@ (label 10) (parent 9) (unrealized (0 1) (1 0) (1 1))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "Not closed under rules")) @@ -1127,6 +1140,10 @@ (label 11) (parent 10) (unrealized (0 1) (1 0) (1 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -1151,6 +1168,10 @@ (label 12) (parent 11) (unrealized (0 1) (1 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton atomic-open-closed@@ -1174,12 +1195,16 @@ (label 13) (parent 11) (unrealized (0 1) (1 1) (1 2) (2 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton atomic-open-closed (vars (old old1 mesg) (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch start-ch-0 chan)- (lk ls locn))+ (ls lk locn)) (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch)) (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls)) (defstrand user-pass 1 (k k))@@ -1207,6 +1232,10 @@ (label 14) (parent 12) (unrealized (0 1) (1 2) (3 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton atomic-open-closed@@ -1242,11 +1271,15 @@ (parent 13) (unrealized (0 1) (1 1) (1 2) (2 0)) (dead)+ (maps+ ((0 1)+ ((k k) (d d-0) (o o-0) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "empty cohort")) (defskeleton atomic-open-closed (vars (old old1 mesg) (k skey) (n text) (d o name)- (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (lk ls locn))+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk locn)) (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch)) (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls)) (defstrand user-pass 1 (k k))@@ -1272,6 +1305,10 @@ (label 16) (parent 14) (unrealized (0 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton atomic-open-closed@@ -1310,11 +1347,15 @@ (label 17) (parent 16) (unrealized (0 1) (4 1))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton atomic-open-closed (vars (any old old1 mesg) (k skey) (n n-0 text) (d o name)- (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (lk ls locn))+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn)) (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch)) (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls)) (defstrand user-pass 1 (k k))@@ -1347,11 +1388,15 @@ (label 18) (parent 17) (unrealized (0 1) (3 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton atomic-open-closed (vars (any old old1 mesg) (k skey) (n n-0 text) (d o name)- (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (lk ls locn))+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn)) (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch)) (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls)) (defstrand user-pass 1 (k k))@@ -1383,11 +1428,15 @@ (label 19) (parent 18) (unrealized (0 1))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton atomic-open-closed (vars (any old old1 mesg) (k skey) (n n-0 text) (d o name)- (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (lk ls locn))+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn)) (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch)) (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls)) (defstrand user-pass 1 (k k))@@ -1419,6 +1468,10 @@ (label 20) (parent 18) (unrealized (0 1) (5 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton atomic-open-closed@@ -1466,7 +1519,7 @@ (defskeleton atomic-open-closed (vars (any old old1 mesg) (k skey) (n n-0 text) (d o name)- (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (lk ls locn))+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn)) (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch)) (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls)) (defstrand user-pass 1 (k k))@@ -1499,87 +1552,98 @@ (label 22) (parent 19) (unrealized (6 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton atomic-open-closed (vars (any old old1 mesg) (k skey) (n n-0 text) (d o name)- (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (lk ls locn))+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn)) (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch)) (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls)) (defstrand user-pass 1 (k k)) (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk) (ls ls))- (deflistener k) (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o) (start-ch start-ch) (lk lk) (ls ls))- (precedes ((0 0) (5 0)) ((2 0) (1 0)) ((3 3) (1 1)) ((4 1) (3 0))- ((5 4) (4 0)))+ (deflistener k)+ (precedes ((0 0) (4 0)) ((2 0) (1 0)) ((3 3) (1 1)) ((4 4) (5 0))+ ((5 1) (3 0))) (uniq-orig k n) (gen-st (cat "st" d o o) (cat "st-k" d o k)) (conf start-ch) (auth start-ch) (facts (same-dev ls lk))- (leads-to ((3 3) (1 2)) ((5 2) (1 1)) ((5 2) (3 1)))+ (leads-to ((3 3) (1 2)) ((4 2) (1 1)) ((4 2) (3 1))) (rule dev-up-atomic2 dev-up-completes intro-same-dev-up power-deliver-once trRl_dev-up-at-1 trRl_dev-up-at-2) (operation nonce-test (added-strand dev-up 3) k (5 0) (ch-msg start-ch (cat "power-up" d o k)))- (strand-map 0 1 2 3 5 4)+ (strand-map 0 1 2 3 4 5) (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k))) ((recv (enc "may I pass" k)) (load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k))) ((send (enc "may I pass" k))) ((recv (enc "open" d o n-0 k)) (load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt-0 "st" d any)) (stor ls (cat pt "st" d o o)))- ((recv k) (send k)) ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old)) (stor lk (cat pt-2 "st-k" d o k)) (load ls (cat pt-3 old1))- (stor ls (cat pt-4 "st" d o))))+ (stor ls (cat pt-4 "st" d o))) ((recv k) (send k))) (label 23) (parent 20)- (unrealized (0 1) (4 0))+ (unrealized (0 1) (5 0)) (dead)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "empty cohort")) (defskeleton atomic-open-closed (vars (any old old1 mesg) (k skey) (n n-0 text) (d o name)- (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (lk ls locn))+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn)) (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch)) (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls)) (defstrand user-pass 1 (k k)) (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk) (ls ls))- (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))- (deflistener k) (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o) (start-ch start-ch) (lk lk) (ls ls))- (precedes ((0 0) (6 0)) ((2 0) (1 0)) ((3 3) (1 1)) ((4 0) (3 0))- ((5 1) (0 1)) ((6 4) (3 1)) ((6 4) (5 0)))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (deflistener k)+ (precedes ((0 0) (4 0)) ((2 0) (1 0)) ((3 3) (1 1)) ((4 4) (3 1))+ ((4 4) (6 0)) ((5 0) (3 0)) ((6 1) (0 1))) (uniq-orig k n) (gen-st (cat "st" d o o) (cat "st-k" d o k)) (conf start-ch) (auth start-ch) (facts (same-dev ls lk))- (leads-to ((3 3) (1 2)) ((6 2) (1 1)) ((6 2) (3 1)))+ (leads-to ((3 3) (1 2)) ((4 2) (1 1)) ((4 2) (3 1))) (rule dev-up-atomic2 dev-up-completes intro-same-dev-up power-deliver-once trRl_dev-up-at-1 trRl_dev-up-at-2) (operation nonce-test (added-strand dev-up 3) k (6 0) (ch-msg start-ch (cat "power-up" d o k)))- (strand-map 0 1 2 3 5 6 4)+ (strand-map 0 1 2 3 4 5 6) (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k))) ((recv (enc "may I pass" k)) (load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k))) ((send (enc "may I pass" k))) ((recv (enc "open" d o n-0 k)) (load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt-0 "st" d any)) (stor ls (cat pt "st" d o o)))- ((send (enc "open" d o n-0 k))) ((recv k) (send k)) ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old)) (stor lk (cat pt-2 "st-k" d o k)) (load ls (cat pt-3 old1))- (stor ls (cat pt-4 "st" d o))))+ (stor ls (cat pt-4 "st" d o))) ((send (enc "open" d o n-0 k)))+ ((recv k) (send k))) (label 24) (parent 22)- (unrealized (5 0))+ (unrealized (6 0)) (dead)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/attest.tst view
@@ -1,6 +1,6 @@ (herald attest-door) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/attest.scm") (defprotocol attest-door basic@@ -49,6 +49,7 @@ (send (enc (enc k (invk p)) d)) (recv (enc t k)) (send t))) (label 0) (unrealized (0 1))+ (maps ((0) ((p p) (a a) (d d) (k k) (n n) (t t)))) (origs (k (0 2)) (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -59,6 +60,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk p) (invk a) (invk d)) (uniq-orig k n)+ (comment "Analyze from the person's perspective") (rule yes) (operation nonce-test (added-strand appraise 2) n (0 1) (enc (enc d n (invk p)) a))@@ -70,6 +72,7 @@ (label 1) (parent 0) (unrealized (0 3))+ (maps ((0) ((p p) (a a) (d d) (k k) (n n) (t t)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton attest-door@@ -80,6 +83,7 @@ (precedes ((0 0) (1 0)) ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3))) (non-orig (invk p) (invk a) (invk d)) (uniq-orig k n t)+ (comment "Analyze from the person's perspective") (operation encryption-test (added-strand door 2) (enc t k) (0 3)) (strand-map 0 1) (traces@@ -90,6 +94,7 @@ (label 2) (parent 1) (unrealized (2 0))+ (maps ((0) ((p p) (a a) (d d) (k k) (n n) (t t)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton attest-door@@ -100,6 +105,7 @@ (precedes ((0 0) (1 0)) ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3))) (non-orig (invk p) (invk a) (invk d)) (uniq-orig k n)+ (comment "Analyze from the person's perspective") (operation encryption-test (added-listener k) (enc t k) (0 3)) (strand-map 0 1) (traces@@ -110,6 +116,7 @@ (label 3) (parent 1) (unrealized (2 0))+ (maps ((0) ((p p) (a a) (d d) (k k) (n n) (t t)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton attest-door@@ -120,6 +127,7 @@ (precedes ((0 0) (1 0)) ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3))) (non-orig (invk p) (invk a) (invk d)) (uniq-orig k n t)+ (comment "Analyze from the person's perspective") (operation nonce-test (contracted (d-0 d) (p-0 p)) k (2 0) (enc (enc k (invk p)) d)) (strand-map 0 1 2)@@ -145,6 +153,7 @@ ((3 1) (2 0))) (non-orig (invk p) (invk a) (invk d)) (uniq-orig k n t)+ (comment "Analyze from the person's perspective") (operation nonce-test (added-strand squealer 2) k (2 0) (enc (enc k (invk p)) d)) (strand-map 0 1 2)@@ -157,6 +166,7 @@ (label 5) (parent 2) (realized)+ (maps ((0) ((p p) (a a) (d d) (k k) (n n) (t t)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton attest-door@@ -169,6 +179,7 @@ ((3 1) (2 0))) (non-orig (invk p) (invk a) (invk d)) (uniq-orig k n)+ (comment "Analyze from the person's perspective") (operation nonce-test (added-strand squealer 2) k (2 0) (enc (enc k (invk p)) d)) (strand-map 0 1 2)@@ -180,6 +191,7 @@ (label 6) (parent 3) (realized)+ (maps ((0) ((p p) (a a) (d d) (k k) (n n) (t t)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton attest-door@@ -190,6 +202,7 @@ (precedes ((0 0) (1 0)) ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3))) (non-orig (invk p) (invk a) (invk d)) (uniq-orig k n t)+ (comment "Analyze from the person's perspective") (operation generalization deleted (2 0)) (strand-map 0 1 3) (traces@@ -202,6 +215,7 @@ (seen 8) (seen-ops (8 (operation generalization forgot t) (strand-map 0 1 2))) (realized)+ (maps ((0) ((p p) (a a) (d d) (k k) (n n) (t t)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton attest-door@@ -212,6 +226,7 @@ (precedes ((0 0) (1 0)) ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3))) (non-orig (invk p) (invk a) (invk d)) (uniq-orig k n)+ (comment "Analyze from the person's perspective") (operation generalization deleted (2 0)) (strand-map 0 1 3) (traces@@ -272,6 +287,7 @@ (traces ((recv (enc (enc k (invk p)) d)) (send (enc t k)) (recv t))) (label 9) (unrealized (0 0))+ (maps ((0) ((p p) (d d) (k k) (t t)))) (origs (t (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -282,6 +298,7 @@ (precedes ((1 2) (0 0))) (non-orig (invk p) (invk d)) (uniq-orig k t n)+ (comment "Analyze from the door's perspective") (operation encryption-test (added-strand person 3) (enc k (invk p)) (0 0)) (strand-map 0)@@ -327,8 +344,8 @@ (defrule trust (forall ((z w strd) (d akey)) (implies- (and (p "appraise" z (idx 2)) (p "appraise" "d" z d)- (p "squealer" w (idx 2)) (p "squealer" "d" w d))+ (and (p "squealer" w (idx 2)) (p "appraise" z (idx 2))+ (p "squealer" "d" w d) (p "appraise" "d" z d)) (false))) (comment "Passing attestation means not a squealer")) (defgenrule neqRl_indx@@ -350,6 +367,7 @@ (send (enc (enc k (invk p)) d)) (recv (enc t k)) (send t))) (label 11) (unrealized (0 1))+ (maps ((0) ((p p) (a a) (d d) (k k) (n n) (t t)))) (origs (k (0 2)) (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -360,6 +378,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk p) (invk a) (invk d)) (uniq-orig k n)+ (comment "Analyze from the person's perspective") (rule yes) (operation nonce-test (added-strand appraise 2) n (0 1) (enc (enc d n (invk p)) a))@@ -371,6 +390,7 @@ (label 12) (parent 11) (unrealized (0 3))+ (maps ((0) ((p p) (a a) (d d) (k k) (n n) (t t)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton attest-door-trust@@ -381,6 +401,7 @@ (precedes ((0 0) (1 0)) ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3))) (non-orig (invk p) (invk a) (invk d)) (uniq-orig k n t)+ (comment "Analyze from the person's perspective") (operation encryption-test (added-strand door 2) (enc t k) (0 3)) (strand-map 0 1) (traces@@ -391,6 +412,7 @@ (label 13) (parent 12) (unrealized (2 0))+ (maps ((0) ((p p) (a a) (d d) (k k) (n n) (t t)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton attest-door-trust@@ -401,6 +423,7 @@ (precedes ((0 0) (1 0)) ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3))) (non-orig (invk p) (invk a) (invk d)) (uniq-orig k n)+ (comment "Analyze from the person's perspective") (operation encryption-test (added-listener k) (enc t k) (0 3)) (strand-map 0 1) (traces@@ -412,6 +435,7 @@ (parent 12) (unrealized (2 0)) (dead)+ (maps ((0) ((p p) (a a) (d d) (k k) (n n) (t t)))) (comment "empty cohort")) (defskeleton attest-door-trust@@ -422,6 +446,7 @@ (precedes ((0 0) (1 0)) ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3))) (non-orig (invk p) (invk a) (invk d)) (uniq-orig k n t)+ (comment "Analyze from the person's perspective") (operation nonce-test (contracted (d-0 d) (p-0 p)) k (2 0) (enc (enc k (invk p)) d)) (strand-map 0 1 2)@@ -469,8 +494,8 @@ (defrule trust (forall ((z w strd) (d akey)) (implies- (and (p "appraise" z (idx 2)) (p "appraise" "d" z d)- (p "squealer" w (idx 2)) (p "squealer" "d" w d))+ (and (p "squealer" w (idx 2)) (p "appraise" z (idx 2))+ (p "squealer" "d" w d) (p "appraise" "d" z d)) (false))) (comment "Passing attestation means not a squealer")) (defgenrule neqRl_indx@@ -490,6 +515,7 @@ (traces ((recv (enc (enc k (invk p)) d)) (send (enc t k)) (recv t))) (label 16) (unrealized (0 0))+ (maps ((0) ((p p) (d d) (k k) (t t)))) (origs (t (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -500,6 +526,7 @@ (precedes ((1 2) (0 0))) (non-orig (invk p) (invk d)) (uniq-orig k t n)+ (comment "Analyze from the door's perspective") (operation encryption-test (added-strand person 3) (enc k (invk p)) (0 0)) (strand-map 0)@@ -545,15 +572,15 @@ (defrule trust (forall ((z w strd) (d akey)) (implies- (and (p "appraise" z (idx 2)) (p "appraise" "d" z d)- (p "squealer" w (idx 2)) (p "squealer" "d" w d))+ (and (p "squealer" w (idx 2)) (p "appraise" z (idx 2))+ (p "squealer" "d" w d) (p "appraise" "d" z d)) (false))) (comment "Passing attestation means not a squealer")) (defrule uncompromised-people-choose-uncompromised-appraisers (forall ((z strd) (a p akey)) (implies- (and (p "person" z (idx 3)) (p "person" "p" z p)- (p "person" "a" z a) (non (invk p)))+ (and (p "person" z (idx 3)) (p "person" "a" z a)+ (p "person" "p" z p) (non (invk p))) (non (invk a))))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -575,6 +602,7 @@ (send (enc (enc k (invk p)) d)) (recv (enc t k)) (send t))) (label 18) (unrealized (0 1))+ (maps ((0) ((p p) (a a) (d d) (k k) (n n) (t t)))) (origs (k (0 2)) (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -585,6 +613,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk p) (invk a) (invk d)) (uniq-orig k n)+ (comment "Analyze from the person's perspective") (rule yes) (operation nonce-test (added-strand appraise 2) n (0 1) (enc (enc d n (invk p)) a))@@ -596,6 +625,7 @@ (label 19) (parent 18) (unrealized (0 3))+ (maps ((0) ((p p) (a a) (d d) (k k) (n n) (t t)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton attest-door-trust-attest@@ -606,6 +636,7 @@ (precedes ((0 0) (1 0)) ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3))) (non-orig (invk p) (invk a) (invk d)) (uniq-orig k n t)+ (comment "Analyze from the person's perspective") (operation encryption-test (added-strand door 2) (enc t k) (0 3)) (strand-map 0 1) (traces@@ -616,6 +647,7 @@ (label 20) (parent 19) (unrealized (2 0))+ (maps ((0) ((p p) (a a) (d d) (k k) (n n) (t t)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton attest-door-trust-attest@@ -626,6 +658,7 @@ (precedes ((0 0) (1 0)) ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3))) (non-orig (invk p) (invk a) (invk d)) (uniq-orig k n)+ (comment "Analyze from the person's perspective") (operation encryption-test (added-listener k) (enc t k) (0 3)) (strand-map 0 1) (traces@@ -637,6 +670,7 @@ (parent 19) (unrealized (2 0)) (dead)+ (maps ((0) ((p p) (a a) (d d) (k k) (n n) (t t)))) (comment "empty cohort")) (defskeleton attest-door-trust-attest@@ -647,6 +681,7 @@ (precedes ((0 0) (1 0)) ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3))) (non-orig (invk p) (invk a) (invk d)) (uniq-orig k n t)+ (comment "Analyze from the person's perspective") (operation nonce-test (contracted (d-0 d) (p-0 p)) k (2 0) (enc (enc k (invk p)) d)) (strand-map 0 1 2)@@ -694,15 +729,15 @@ (defrule trust (forall ((z w strd) (d akey)) (implies- (and (p "appraise" z (idx 2)) (p "appraise" "d" z d)- (p "squealer" w (idx 2)) (p "squealer" "d" w d))+ (and (p "squealer" w (idx 2)) (p "appraise" z (idx 2))+ (p "squealer" "d" w d) (p "appraise" "d" z d)) (false))) (comment "Passing attestation means not a squealer")) (defrule uncompromised-people-choose-uncompromised-appraisers (forall ((z strd) (a p akey)) (implies- (and (p "person" z (idx 3)) (p "person" "p" z p)- (p "person" "a" z a) (non (invk p)))+ (and (p "person" z (idx 3)) (p "person" "a" z a)+ (p "person" "p" z p) (non (invk p))) (non (invk a))))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -722,6 +757,7 @@ (traces ((recv (enc (enc k (invk p)) d)) (send (enc t k)) (recv t))) (label 23) (unrealized (0 0))+ (maps ((0) ((p p) (d d) (k k) (t t)))) (origs (t (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -732,6 +768,7 @@ (precedes ((1 2) (0 0))) (non-orig (invk p) (invk d) (invk a)) (uniq-orig k t n)+ (comment "Analyze from the door's perspective") (rule uncompromised-people-choose-uncompromised-appraisers) (operation encryption-test (added-strand person 3) (enc k (invk p)) (0 0))@@ -742,6 +779,7 @@ (label 24) (parent 23) (unrealized (1 1))+ (maps ((0) ((p p) (d d) (k k) (t t)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton attest-door-trust-attest@@ -752,6 +790,7 @@ (precedes ((1 0) (2 0)) ((1 2) (0 0)) ((2 1) (1 1))) (non-orig (invk p) (invk d) (invk d-0) (invk a)) (uniq-orig k t n)+ (comment "Analyze from the door's perspective") (rule yes) (operation nonce-test (added-strand appraise 2) n (1 1) (enc (enc d-0 n (invk p)) a))@@ -763,6 +802,7 @@ (label 25) (parent 24) (unrealized (0 0) (0 2))+ (maps ((0) ((p p) (d d) (k k) (t t)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton attest-door-trust-attest@@ -773,6 +813,7 @@ (precedes ((1 0) (2 0)) ((1 2) (0 0)) ((2 1) (1 1))) (non-orig (invk p) (invk d) (invk a)) (uniq-orig k t n)+ (comment "Analyze from the door's perspective") (operation encryption-test (contracted (d-0 d)) (enc k (invk p)) (0 0) (enc (enc k (invk p)) d)) (strand-map 0 1 2)@@ -783,6 +824,7 @@ (label 26) (parent 25) (unrealized (0 2))+ (maps ((0) ((p p) (d d) (k k) (t t)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton attest-door-trust-attest@@ -794,6 +836,7 @@ ((2 4) (0 2))) (non-orig (invk d) (invk p) (invk a)) (uniq-orig k t n)+ (comment "Analyze from the door's perspective") (operation nonce-test (displaced 1 3 person 5) t (0 2) (enc t k)) (strand-map 0 2 1) (traces ((recv (enc (enc k (invk p)) d)) (send (enc t k)) (recv t))@@ -817,6 +860,7 @@ ((3 1) (0 2))) (non-orig (invk p) (invk d) (invk a)) (uniq-orig k t n)+ (comment "Analyze from the door's perspective") (operation nonce-test (added-listener k) t (0 2) (enc t k)) (strand-map 0 1 2) (traces ((recv (enc (enc k (invk p)) d)) (send (enc t k)) (recv t))@@ -828,6 +872,7 @@ (parent 26) (unrealized (3 0)) (dead)+ (maps ((0) ((p p) (d d) (k k) (t t)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/auth-enc.tst view
@@ -1,6 +1,6 @@ (herald auth-enc) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/auth-enc.scm") (defprotocol auth-enc basic@@ -28,6 +28,7 @@ (traces ((recv ch (enc n k)) (recv ch (cat n k)))) (label 0) (unrealized (0 0) (0 1))+ (maps ((0) ((ch ch) (n n) (k k)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -46,6 +47,7 @@ (label 1) (parent 0) (unrealized (0 1))+ (maps ((0) ((ch ch) (n n) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton auth-enc
tst/auth-hash.tst view
@@ -1,6 +1,6 @@ (herald auth-hash) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/auth-hash.scm") (defprotocol auth-hash basic@@ -28,6 +28,7 @@ (traces ((recv ch (hash n)) (recv ch n))) (label 0) (unrealized (0 0) (0 1))+ (maps ((0) ((ch ch) (n n)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -44,6 +45,7 @@ (label 1) (parent 0) (unrealized (0 1))+ (maps ((0) ((ch ch) (n n)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton auth-hash
tst/blanchet-strandmax.tst view
@@ -1,7 +1,7 @@ (herald "Blanchet's Simple Example Protocol (strand max)" (comment "There is a flaw in this protocol by design")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/blanchet-strandmax.scm") (defprotocol blanchet-max basic@@ -28,6 +28,7 @@ (traces ((send (enc (enc s (privk a)) (pubk b))) (recv (enc d s)))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs (s (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -38,6 +39,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-strand resp 2) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s (privk a)) (pubk b))) (recv (enc d s)))@@ -45,6 +47,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet-max@@ -54,6 +57,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-listener s) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s (privk a)) (pubk b))) (recv (enc d s)))@@ -62,6 +66,7 @@ (parent 0) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (defskeleton blanchet-max@@ -71,6 +76,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation nonce-test (contracted (a-0 a) (b-0 b)) s (1 0) (enc (enc s (privk a)) (pubk b))) (strand-map 0 1)@@ -111,6 +117,7 @@ ((recv d) (send d))) (label 4) (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (s (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -122,6 +129,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1)) ((2 1) (1 0))) (non-orig (privk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation encryption-test (added-strand resp 2) (enc d s) (0 1)) (strand-map 0 1) (traces ((send (enc (enc s (privk a)) (pubk b))) (recv (enc d s)))@@ -130,6 +138,7 @@ (label 5) (parent 4) (unrealized (1 0) (2 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet-max@@ -140,6 +149,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1))) (non-orig (privk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation encryption-test (added-listener s) (enc d s) (0 1)) (strand-map 0 1) (traces ((send (enc (enc s (privk a)) (pubk b))) (recv (enc d s)))@@ -148,6 +158,7 @@ (parent 4) (unrealized (2 0)) (dead)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (defskeleton blanchet-max@@ -158,6 +169,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1)) ((2 1) (1 0))) (non-orig (privk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation nonce-test (contracted (a-0 a) (b-0 b)) s (2 0) (enc (enc s (privk a)) (pubk b))) (strand-map 0 1 2)@@ -167,6 +179,7 @@ (label 7) (parent 5) (unrealized (1 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet-max@@ -179,6 +192,7 @@ ((3 1) (1 0))) (non-orig (privk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation nonce-test (added-listener s) d (1 0) (enc d s)) (strand-map 0 1 2) (traces ((send (enc (enc s (privk a)) (pubk b))) (recv (enc d s)))@@ -189,6 +203,7 @@ (parent 7) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -217,6 +232,7 @@ (traces ((recv (enc (enc s (privk a)) (pubk b))) (send (enc d s)))) (label 9) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -227,6 +243,7 @@ (precedes ((1 0) (0 0))) (non-orig (privk a) (privk b)) (uniq-orig s)+ (comment "Analyze from the responder's perspective") (operation encryption-test (added-strand init 1) (enc s (privk a)) (0 0)) (strand-map 0)@@ -268,6 +285,7 @@ (label 11) (unrealized (0 0) (1 0)) (preskeleton)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (d (0 1))) (comment "Not a skeleton")) @@ -278,11 +296,13 @@ (precedes ((0 1) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig d s)+ (comment "From the responders's perspective, is the secret leaked?") (traces ((recv (enc (enc s (privk a)) (pubk b))) (send (enc d s))) ((recv d) (send d))) (label 12) (parent 11) (unrealized (0 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (d (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -294,6 +314,7 @@ (precedes ((0 1) (1 0)) ((2 0) (0 0))) (non-orig (privk a) (privk b)) (uniq-orig d s)+ (comment "From the responders's perspective, is the secret leaked?") (operation encryption-test (added-strand init 1) (enc s (privk a)) (0 0)) (strand-map 0 1)@@ -332,6 +353,7 @@ (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))) (label 14) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs (s (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -342,6 +364,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-strand resp 2) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))@@ -349,6 +372,7 @@ (label 15) (parent 14) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet-max-akey@@ -358,6 +382,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-listener s) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))@@ -366,6 +391,7 @@ (parent 14) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (defskeleton blanchet-max-akey@@ -375,6 +401,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation nonce-test (contracted (a-0 a) (b-0 b)) s (1 0) (enc (enc s (invk a)) b)) (strand-map 0 1)@@ -415,6 +442,7 @@ ((recv d) (send d))) (label 18) (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (s (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -426,6 +454,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1)) ((2 1) (1 0))) (non-orig (invk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation encryption-test (added-strand resp 2) (enc d s) (0 1)) (strand-map 0 1) (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))@@ -434,6 +463,7 @@ (label 19) (parent 18) (unrealized (1 0) (2 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet-max-akey@@ -444,6 +474,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1))) (non-orig (invk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation encryption-test (added-listener s) (enc d s) (0 1)) (strand-map 0 1) (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))@@ -452,6 +483,7 @@ (parent 18) (unrealized (2 0)) (dead)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (defskeleton blanchet-max-akey@@ -462,6 +494,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1)) ((2 1) (1 0))) (non-orig (invk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation nonce-test (contracted (a-0 a) (b-0 b)) s (2 0) (enc (enc s (invk a)) b)) (strand-map 0 1 2)@@ -471,6 +504,7 @@ (label 21) (parent 19) (unrealized (1 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet-max-akey@@ -483,6 +517,7 @@ ((3 1) (1 0))) (non-orig (invk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation nonce-test (added-listener s) d (1 0) (enc d s)) (strand-map 0 1 2) (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))@@ -493,6 +528,7 @@ (parent 21) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -521,6 +557,7 @@ (traces ((recv (enc (enc s (invk a)) b)) (send (enc d s)))) (label 23) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -531,6 +568,7 @@ (precedes ((1 0) (0 0))) (non-orig (invk a) (invk b)) (uniq-orig s)+ (comment "Analyze from the responder's perspective") (operation encryption-test (added-strand init 1) (enc s (invk a)) (0 0)) (strand-map 0)@@ -572,6 +610,7 @@ (label 25) (unrealized (0 0) (1 0)) (preskeleton)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (d (0 1))) (comment "Not a skeleton")) @@ -582,11 +621,13 @@ (precedes ((0 1) (1 0))) (non-orig (invk a) (invk b)) (uniq-orig d s)+ (comment "From the responders's perspective, is the secret leaked?") (traces ((recv (enc (enc s (invk a)) b)) (send (enc d s))) ((recv d) (send d))) (label 26) (parent 25) (unrealized (0 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (d (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -598,6 +639,7 @@ (precedes ((0 1) (1 0)) ((2 0) (0 0))) (non-orig (invk a) (invk b)) (uniq-orig d s)+ (comment "From the responders's perspective, is the secret leaked?") (operation encryption-test (added-strand init 1) (enc s (invk a)) (0 0)) (strand-map 0 1)@@ -636,6 +678,7 @@ (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))) (label 28) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs (s (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -646,6 +689,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-strand resp 2) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))@@ -653,6 +697,7 @@ (label 29) (parent 28) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet-max-fixed@@ -662,6 +707,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-listener s) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))@@ -670,6 +716,7 @@ (parent 28) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (defskeleton blanchet-max-fixed@@ -679,6 +726,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation nonce-test (contracted (a-0 a) (b-0 b)) s (1 0) (enc (enc s b (privk a)) (pubk b))) (strand-map 0 1)@@ -719,6 +767,7 @@ ((recv d) (send d))) (label 32) (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (s (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -730,6 +779,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1)) ((2 1) (1 0))) (non-orig (privk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation encryption-test (added-strand resp 2) (enc d s) (0 1)) (strand-map 0 1) (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))@@ -738,6 +788,7 @@ (label 33) (parent 32) (unrealized (1 0) (2 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet-max-fixed@@ -748,6 +799,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1))) (non-orig (privk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation encryption-test (added-listener s) (enc d s) (0 1)) (strand-map 0 1) (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))@@ -756,6 +808,7 @@ (parent 32) (unrealized (2 0)) (dead)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (defskeleton blanchet-max-fixed@@ -766,6 +819,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1)) ((2 1) (1 0))) (non-orig (privk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation nonce-test (contracted (a-0 a) (b-0 b)) s (2 0) (enc (enc s b (privk a)) (pubk b))) (strand-map 0 1 2)@@ -775,6 +829,7 @@ (label 35) (parent 33) (unrealized (1 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet-max-fixed@@ -787,6 +842,7 @@ ((3 1) (1 0))) (non-orig (privk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation nonce-test (added-listener s) d (1 0) (enc d s)) (strand-map 0 1 2) (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))@@ -797,6 +853,7 @@ (parent 35) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -825,6 +882,7 @@ (traces ((recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s)))) (label 37) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -835,6 +893,7 @@ (precedes ((1 0) (0 0))) (non-orig (privk a) (privk b)) (uniq-orig s)+ (comment "Analyze from the responder's perspective") (operation encryption-test (added-strand init 1) (enc s b (privk a)) (0 0)) (strand-map 0)@@ -876,6 +935,7 @@ (label 39) (unrealized (0 0) (1 0)) (preskeleton)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (d (0 1))) (comment "Not a skeleton")) @@ -886,11 +946,13 @@ (precedes ((0 1) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig d s)+ (comment "From the responders's perspective, is the secret leaked?") (traces ((recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s))) ((recv d) (send d))) (label 40) (parent 39) (unrealized (0 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (d (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -902,6 +964,7 @@ (precedes ((0 1) (1 0)) ((2 0) (0 0))) (non-orig (privk a) (privk b)) (uniq-orig d s)+ (comment "From the responders's perspective, is the secret leaked?") (operation encryption-test (added-strand init 1) (enc s b (privk a)) (0 0)) (strand-map 0 1)@@ -910,6 +973,7 @@ (label 41) (parent 40) (unrealized (1 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet-max-fixed@@ -921,6 +985,7 @@ (precedes ((0 1) (1 0)) ((2 0) (0 0)) ((2 0) (3 0)) ((3 1) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig d s)+ (comment "From the responders's perspective, is the secret leaked?") (operation nonce-test (added-listener s) d (1 0) (enc d s)) (strand-map 0 1 2) (traces ((recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s)))@@ -930,6 +995,7 @@ (parent 41) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/blanchet.tst view
@@ -1,7 +1,7 @@ (herald "Blanchet's Simple Example Protocol" (comment "There is a flaw in this protocol by design")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/blanchet.scm") (defprotocol blanchet basic@@ -28,6 +28,7 @@ (traces ((send (enc (enc s (privk a)) (pubk b))) (recv (enc d s)))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs (s (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -38,6 +39,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-strand resp 2) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s (privk a)) (pubk b))) (recv (enc d s)))@@ -45,6 +47,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet@@ -54,6 +57,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-listener s) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s (privk a)) (pubk b))) (recv (enc d s)))@@ -62,6 +66,7 @@ (parent 0) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (defskeleton blanchet@@ -71,6 +76,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation nonce-test (contracted (a-0 a) (b-0 b)) s (1 0) (enc (enc s (privk a)) (pubk b))) (strand-map 0 1)@@ -111,6 +117,7 @@ ((recv d) (send d))) (label 4) (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (s (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -122,6 +129,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1)) ((2 1) (1 0))) (non-orig (privk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation encryption-test (added-strand resp 2) (enc d s) (0 1)) (strand-map 0 1) (traces ((send (enc (enc s (privk a)) (pubk b))) (recv (enc d s)))@@ -130,6 +138,7 @@ (label 5) (parent 4) (unrealized (1 0) (2 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet@@ -140,6 +149,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1))) (non-orig (privk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation encryption-test (added-listener s) (enc d s) (0 1)) (strand-map 0 1) (traces ((send (enc (enc s (privk a)) (pubk b))) (recv (enc d s)))@@ -148,6 +158,7 @@ (parent 4) (unrealized (2 0)) (dead)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (defskeleton blanchet@@ -158,6 +169,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1)) ((2 1) (1 0))) (non-orig (privk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation nonce-test (contracted (a-0 a) (b-0 b)) s (2 0) (enc (enc s (privk a)) (pubk b))) (strand-map 0 1 2)@@ -167,6 +179,7 @@ (label 7) (parent 5) (unrealized (1 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet@@ -179,6 +192,7 @@ ((3 1) (1 0))) (non-orig (privk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation nonce-test (added-listener s) d (1 0) (enc d s)) (strand-map 0 1 2) (traces ((send (enc (enc s (privk a)) (pubk b))) (recv (enc d s)))@@ -189,6 +203,7 @@ (parent 7) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -217,6 +232,7 @@ (traces ((recv (enc (enc s (privk a)) (pubk b))) (send (enc d s)))) (label 9) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -227,6 +243,7 @@ (precedes ((1 0) (0 0))) (non-orig (privk a) (privk b)) (uniq-orig s)+ (comment "Analyze from the responder's perspective") (operation encryption-test (added-strand init 1) (enc s (privk a)) (0 0)) (strand-map 0)@@ -268,6 +285,7 @@ (label 11) (unrealized (0 0) (1 0)) (preskeleton)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (d (0 1))) (comment "Not a skeleton")) @@ -278,11 +296,13 @@ (precedes ((0 1) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig d s)+ (comment "From the responders's perspective, is the secret leaked?") (traces ((recv (enc (enc s (privk a)) (pubk b))) (send (enc d s))) ((recv d) (send d))) (label 12) (parent 11) (unrealized (0 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (d (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -294,6 +314,7 @@ (precedes ((0 1) (1 0)) ((2 0) (0 0))) (non-orig (privk a) (privk b)) (uniq-orig d s)+ (comment "From the responders's perspective, is the secret leaked?") (operation encryption-test (added-strand init 1) (enc s (privk a)) (0 0)) (strand-map 0 1)@@ -332,6 +353,7 @@ (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))) (label 14) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs (s (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -342,6 +364,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-strand resp 2) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))@@ -349,6 +372,7 @@ (label 15) (parent 14) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet-akey@@ -358,6 +382,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-listener s) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))@@ -366,6 +391,7 @@ (parent 14) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (defskeleton blanchet-akey@@ -375,6 +401,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation nonce-test (contracted (a-0 a) (b-0 b)) s (1 0) (enc (enc s (invk a)) b)) (strand-map 0 1)@@ -415,6 +442,7 @@ ((recv d) (send d))) (label 18) (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (s (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -426,6 +454,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1)) ((2 1) (1 0))) (non-orig (invk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation encryption-test (added-strand resp 2) (enc d s) (0 1)) (strand-map 0 1) (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))@@ -434,6 +463,7 @@ (label 19) (parent 18) (unrealized (1 0) (2 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet-akey@@ -444,6 +474,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1))) (non-orig (invk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation encryption-test (added-listener s) (enc d s) (0 1)) (strand-map 0 1) (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))@@ -452,6 +483,7 @@ (parent 18) (unrealized (2 0)) (dead)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (defskeleton blanchet-akey@@ -462,6 +494,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1)) ((2 1) (1 0))) (non-orig (invk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation nonce-test (contracted (a-0 a) (b-0 b)) s (2 0) (enc (enc s (invk a)) b)) (strand-map 0 1 2)@@ -471,6 +504,7 @@ (label 21) (parent 19) (unrealized (1 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet-akey@@ -483,6 +517,7 @@ ((3 1) (1 0))) (non-orig (invk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation nonce-test (added-listener s) d (1 0) (enc d s)) (strand-map 0 1 2) (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))@@ -493,6 +528,7 @@ (parent 21) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -521,6 +557,7 @@ (traces ((recv (enc (enc s (invk a)) b)) (send (enc d s)))) (label 23) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -531,6 +568,7 @@ (precedes ((1 0) (0 0))) (non-orig (invk a) (invk b)) (uniq-orig s)+ (comment "Analyze from the responder's perspective") (operation encryption-test (added-strand init 1) (enc s (invk a)) (0 0)) (strand-map 0)@@ -572,6 +610,7 @@ (label 25) (unrealized (0 0) (1 0)) (preskeleton)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (d (0 1))) (comment "Not a skeleton")) @@ -582,11 +621,13 @@ (precedes ((0 1) (1 0))) (non-orig (invk a) (invk b)) (uniq-orig d s)+ (comment "From the responders's perspective, is the secret leaked?") (traces ((recv (enc (enc s (invk a)) b)) (send (enc d s))) ((recv d) (send d))) (label 26) (parent 25) (unrealized (0 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (d (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -598,6 +639,7 @@ (precedes ((0 1) (1 0)) ((2 0) (0 0))) (non-orig (invk a) (invk b)) (uniq-orig d s)+ (comment "From the responders's perspective, is the secret leaked?") (operation encryption-test (added-strand init 1) (enc s (invk a)) (0 0)) (strand-map 0 1)@@ -636,6 +678,7 @@ (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))) (label 28) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs (s (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -646,6 +689,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-strand resp 2) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))@@ -653,6 +697,7 @@ (label 29) (parent 28) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet-fixed@@ -662,6 +707,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-listener s) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))@@ -670,6 +716,7 @@ (parent 28) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (defskeleton blanchet-fixed@@ -679,6 +726,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation nonce-test (contracted (a-0 a) (b-0 b)) s (1 0) (enc (enc s b (privk a)) (pubk b))) (strand-map 0 1)@@ -719,6 +767,7 @@ ((recv d) (send d))) (label 32) (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (s (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -730,6 +779,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1)) ((2 1) (1 0))) (non-orig (privk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation encryption-test (added-strand resp 2) (enc d s) (0 1)) (strand-map 0 1) (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))@@ -738,6 +788,7 @@ (label 33) (parent 32) (unrealized (1 0) (2 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet-fixed@@ -748,6 +799,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1))) (non-orig (privk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation encryption-test (added-listener s) (enc d s) (0 1)) (strand-map 0 1) (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))@@ -756,6 +808,7 @@ (parent 32) (unrealized (2 0)) (dead)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (defskeleton blanchet-fixed@@ -766,6 +819,7 @@ (precedes ((0 0) (2 0)) ((2 1) (0 1)) ((2 1) (1 0))) (non-orig (privk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation nonce-test (contracted (a-0 a) (b-0 b)) s (2 0) (enc (enc s b (privk a)) (pubk b))) (strand-map 0 1 2)@@ -775,6 +829,7 @@ (label 35) (parent 33) (unrealized (1 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet-fixed@@ -787,6 +842,7 @@ ((3 1) (1 0))) (non-orig (privk b)) (uniq-orig d s)+ (comment "From the initiator's perspective, is the secret leaked?") (operation nonce-test (added-listener s) d (1 0) (enc d s)) (strand-map 0 1 2) (traces ((send (enc (enc s b (privk a)) (pubk b))) (recv (enc d s)))@@ -797,6 +853,7 @@ (parent 35) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -825,6 +882,7 @@ (traces ((recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s)))) (label 37) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -835,6 +893,7 @@ (precedes ((1 0) (0 0))) (non-orig (privk a) (privk b)) (uniq-orig s)+ (comment "Analyze from the responder's perspective") (operation encryption-test (added-strand init 1) (enc s b (privk a)) (0 0)) (strand-map 0)@@ -876,6 +935,7 @@ (label 39) (unrealized (0 0) (1 0)) (preskeleton)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (d (0 1))) (comment "Not a skeleton")) @@ -886,11 +946,13 @@ (precedes ((0 1) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig d s)+ (comment "From the responders's perspective, is the secret leaked?") (traces ((recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s))) ((recv d) (send d))) (label 40) (parent 39) (unrealized (0 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (origs (d (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -902,6 +964,7 @@ (precedes ((0 1) (1 0)) ((2 0) (0 0))) (non-orig (privk a) (privk b)) (uniq-orig d s)+ (comment "From the responders's perspective, is the secret leaked?") (operation encryption-test (added-strand init 1) (enc s b (privk a)) (0 0)) (strand-map 0 1)@@ -910,6 +973,7 @@ (label 41) (parent 40) (unrealized (1 0))+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet-fixed@@ -921,6 +985,7 @@ (precedes ((0 1) (1 0)) ((2 0) (0 0)) ((2 0) (3 0)) ((3 1) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig d s)+ (comment "From the responders's perspective, is the secret leaked?") (operation nonce-test (added-listener s) d (1 0) (enc d s)) (strand-map 0 1 2) (traces ((recv (enc (enc s b (privk a)) (pubk b))) (send (enc d s)))@@ -930,6 +995,7 @@ (parent 41) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/blanchet_doorsep.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read") (defprotocol blanchet basic@@ -27,6 +27,7 @@ (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs (s (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -37,6 +38,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-strand resp 2) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))@@ -44,6 +46,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet@@ -53,6 +56,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-listener s) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))@@ -61,6 +65,7 @@ (parent 0) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (defskeleton blanchet@@ -70,6 +75,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation nonce-test (contracted (a-0 a) (b-0 b)) s (1 0) (enc (enc s (invk a)) b)) (strand-map 0 1)@@ -95,8 +101,8 @@ (defrule trust (forall ((z strd) (p d akey) (k skey)) (implies- (and (p "person" z (idx 1)) (p "person" "p" z p)- (p "person" "d" z d) (p "person" "k" z k) (fact trust p))+ (and (p "person" z (idx 1)) (p "person" "k" z k)+ (p "person" "d" z d) (p "person" "p" z p) (fact trust p)) (and (non (invk d)) (uniq k))))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -115,6 +121,7 @@ (traces ((recv (enc (enc k (invk p)) d)) (send (enc t k)) (recv t))) (label 4) (unrealized (0 0))+ (maps ((0) ((p p) (t t) (d d) (k k)))) (origs (t (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -126,6 +133,7 @@ (non-orig (invk p) (invk d-0)) (uniq-orig k t) (facts (trust p))+ (comment "Analyze from the door's perspective") (rule trust) (operation encryption-test (added-strand person 1) (enc k (invk p)) (0 0))@@ -135,6 +143,7 @@ (label 5) (parent 4) (unrealized (0 0) (0 2))+ (maps ((0) ((p p) (t t) (d d) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton doorsep@@ -145,6 +154,7 @@ (non-orig (invk p) (invk d)) (uniq-orig k t) (facts (trust p))+ (comment "Analyze from the door's perspective") (operation encryption-test (contracted (d-0 d)) (enc k (invk p)) (0 0) (enc (enc k (invk p)) d)) (strand-map 0 1)@@ -153,6 +163,7 @@ (label 6) (parent 5) (unrealized (0 2))+ (maps ((0) ((p p) (t t) (d d) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton doorsep@@ -163,6 +174,7 @@ (non-orig (invk p) (invk d)) (uniq-orig k t) (facts (trust p))+ (comment "Analyze from the door's perspective") (operation nonce-test (displaced 1 2 person 3) t (0 2) (enc t k)) (strand-map 0 1) (traces ((recv (enc (enc k (invk p)) d)) (send (enc t k)) (recv t))@@ -183,6 +195,7 @@ (non-orig (invk p) (invk d)) (uniq-orig k t) (facts (trust p))+ (comment "Analyze from the door's perspective") (operation nonce-test (added-listener k) t (0 2) (enc t k)) (strand-map 0 1) (traces ((recv (enc (enc k (invk p)) d)) (send (enc t k)) (recv t))@@ -191,6 +204,7 @@ (parent 6) (unrealized (2 0)) (dead)+ (maps ((0) ((p p) (t t) (d d) (k k)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -206,8 +220,8 @@ (defrule trust (forall ((z strd) (p d akey) (k skey)) (implies- (and (p "person" z (idx 1)) (p "person" "p" z p)- (p "person" "d" z d) (p "person" "k" z k) (fact trust p))+ (and (p "person" z (idx 1)) (p "person" "k" z k)+ (p "person" "d" z d) (p "person" "p" z p) (fact trust p)) (and (non (invk d)) (uniq k))))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -225,6 +239,7 @@ (traces ((recv (enc (enc k (invk p)) d)) (send (enc t k)) (recv t))) (label 9) (unrealized (0 0))+ (maps ((0) ((p p) (t t) (d d) (k k)))) (origs (t (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -235,6 +250,7 @@ (precedes ((1 0) (0 0))) (non-orig (invk p)) (uniq-orig k t)+ (comment "Analyze from the door's perspective when we don't trust p") (operation encryption-test (added-strand person 1) (enc k (invk p)) (0 0)) (strand-map 0)
tst/bug_example.tst view
@@ -1,6 +1,6 @@ (herald bug_example (bound 20)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/bug_example.scm") (comment "Strand count bounded at 20") @@ -31,6 +31,7 @@ (traces ((recv (enc y (hash (invk x) y))))) (label 0) (unrealized (0 0))+ (maps ((0) ((x x) (y y)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -49,6 +50,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0) ((x x) (y (invk k2))))) (comment "3 in cohort - 3 not yet seen")) (defskeleton bug_example@@ -66,6 +68,7 @@ (parent 0) (unrealized (1 0)) (dead)+ (maps ((0) ((x x) (y y)))) (comment "empty cohort")) (defskeleton bug_example@@ -107,6 +110,7 @@ (label 4) (parent 1) (unrealized (2 0))+ (maps ((0) ((x (invk k1)) (y k2)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton bug_example@@ -127,6 +131,7 @@ (parent 1) (unrealized (2 0)) (dead)+ (maps ((0) ((x x) (y (invk k2))))) (comment "empty cohort")) (defskeleton bug_example@@ -156,6 +161,7 @@ (enc k2 (hash (invk k1) (invk k2))) (3 0)) (strand-map 0 1 2 1))) (unrealized (3 0))+ (maps ((0) ((x k1) (y (invk k2))))) (comment "1 in cohort - 0 not yet seen")) (defskeleton bug_example@@ -179,6 +185,7 @@ (parent 4) (unrealized (3 0)) (dead)+ (maps ((0) ((x (invk k1)) (y k2)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -214,6 +221,7 @@ (traces ((recv (enc y (hash (invk x) y))))) (label 8) (unrealized (0 0))+ (maps ((0) ((x x) (y y)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -231,6 +239,7 @@ (label 9) (parent 8) (unrealized (1 0))+ (maps ((0) ((x x) (y y)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton bug_example@@ -248,6 +257,7 @@ (parent 8) (unrealized (1 0)) (dead)+ (maps ((0) ((x x) (y y)))) (comment "empty cohort")) (defskeleton bug_example@@ -288,6 +298,7 @@ (label 12) (parent 9) (unrealized (2 0))+ (maps ((0) ((x (invk k1)) (y y)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton bug_example@@ -307,6 +318,7 @@ (parent 9) (unrealized (2 0)) (dead)+ (maps ((0) ((x x) (y y)))) (comment "empty cohort")) (defskeleton bug_example@@ -335,6 +347,7 @@ (operation encryption-test (added-strand flip2 2) (enc y (hash (invk k1) (invk y))) (3 0)) (strand-map 0 1 2 1))) (unrealized (3 0))+ (maps ((0) ((x k1) (y y)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton bug_example@@ -358,6 +371,7 @@ (parent 12) (unrealized (3 0)) (dead)+ (maps ((0) ((x (invk k1)) (y y)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/cert_lang.tst view
@@ -1,6 +1,6 @@ (herald cert-lang) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/cert_lang.scm") (defprotocol cert-uni basic@@ -29,8 +29,8 @@ (defrule certified-keys-uncompromised (forall ((zca strd) (subj ca name) (pk akey)) (implies- (and (p "certify" zca (idx 1)) (p "certify" "subj" zca subj)- (p "certify" "ca" zca ca) (p "certify" "pk" zca pk)+ (and (p "certify" zca (idx 1)) (p "certify" "pk" zca pk)+ (p "certify" "ca" zca ca) (p "certify" "subj" zca subj) (non (privk "cert" ca))) (non (invk pk))))) (defgenrule neqRl_indx@@ -53,6 +53,10 @@ (send ch-r (enc "challenge" chal pk)) (recv ch-r chal))) (label 0) (unrealized (0 0))+ (maps+ ((0)+ ((ca ca) (chal chal) (ch-ca ch-ca) (ch-r ch-r) (subj subj) (pk pk)+ (serial serial)))) (origs (chal (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -77,6 +81,10 @@ (label 1) (parent 0) (unrealized (0 2))+ (maps+ ((0)+ ((ca ca) (chal chal) (ch-ca ch-ca) (ch-r ch-r) (subj subj) (pk pk)+ (serial serial)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton cert-uni
tst/chan-envelope.tst view
@@ -1,6 +1,6 @@ (herald "Envelope Protocol With Channels" (bound 15)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/chan-envelope.scm") (comment "Strand count bounded at 15") @@ -72,6 +72,7 @@ (label 0) (unrealized (0 0) (1 2)) (preskeleton)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -90,6 +91,7 @@ (label 1) (parent 0) (unrealized (1 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -115,6 +117,7 @@ (label 2) (parent 1) (unrealized (0 0) (2 0))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -139,6 +142,7 @@ (label 3) (parent 2) (unrealized (0 0))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -169,6 +173,7 @@ (label 4) (parent 3) (unrealized (3 1) (3 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -200,6 +205,7 @@ (label 5) (parent 4) (unrealized (3 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -236,6 +242,7 @@ (label 6) (parent 5) (unrealized (4 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -273,6 +280,7 @@ (parent 5) (unrealized (4 0) (4 1)) (dead)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "empty cohort")) (defskeleton envelope@@ -312,6 +320,7 @@ (parent 6) (unrealized (5 0) (5 1)) (dead)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "empty cohort")) (defskeleton envelope@@ -351,6 +360,7 @@ (label 9) (parent 6) (unrealized (5 0) (5 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -390,6 +400,7 @@ (label 10) (parent 9) (unrealized (5 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -507,6 +518,7 @@ (label 12) (unrealized (0 0) (1 2)) (preskeleton)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -527,6 +539,7 @@ (label 13) (parent 12) (unrealized (0 0) (1 2))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -554,6 +567,7 @@ (label 14) (parent 13) (unrealized (0 0) (2 0))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -580,6 +594,7 @@ (label 15) (parent 14) (unrealized (0 0))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -613,6 +628,7 @@ (label 16) (parent 15) (unrealized (3 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -651,6 +667,7 @@ (label 17) (parent 16) (unrealized (4 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -690,6 +707,7 @@ (parent 16) (unrealized (4 0) (4 1)) (dead)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -731,6 +749,7 @@ (parent 17) (unrealized (5 0) (5 1)) (dead)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -772,6 +791,7 @@ (label 20) (parent 17) (unrealized (5 0) (5 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -813,6 +833,7 @@ (label 21) (parent 20) (unrealized (5 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -934,6 +955,7 @@ (label 23) (unrealized (0 0) (1 0) (2 2)) (preskeleton)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (2 3)) (n (2 0))) (comment "Not a skeleton")) @@ -956,6 +978,7 @@ (label 24) (parent 23) (unrealized (0 0) (2 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (2 3)) (n (2 0))) (comment "1 in cohort - 1 not yet seen")) @@ -985,6 +1008,7 @@ (label 25) (parent 24) (unrealized (0 0) (1 0) (3 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1013,6 +1037,7 @@ (label 26) (parent 25) (unrealized (0 0) (1 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1048,6 +1073,7 @@ (label 27) (parent 26) (unrealized (0 0) (4 1) (4 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1084,6 +1110,7 @@ (label 28) (parent 27) (unrealized (0 0) (4 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -1124,6 +1151,7 @@ (label 29) (parent 28) (unrealized (0 0) (5 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -1165,6 +1193,7 @@ (parent 28) (unrealized (0 0) (5 0) (5 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -1208,6 +1237,7 @@ (parent 29) (unrealized (0 0) (6 0) (6 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -1251,6 +1281,7 @@ (label 32) (parent 29) (unrealized (0 0) (6 0) (6 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1294,6 +1325,7 @@ (label 33) (parent 32) (unrealized (0 0) (6 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1340,6 +1372,7 @@ (label 34) (parent 33) (unrealized (0 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1391,6 +1424,7 @@ (label 35) (parent 34) (unrealized (8 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -1446,6 +1480,7 @@ (label 36) (parent 35) (unrealized (9 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton envelope@@ -1502,6 +1537,7 @@ (parent 35) (unrealized (9 0) (9 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -1561,6 +1597,7 @@ (parent 36) (unrealized (10 0) (10 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -1678,6 +1715,7 @@ (label 40) (parent 36) (unrealized (10 0) (10 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1738,6 +1776,7 @@ (label 41) (parent 40) (unrealized (10 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -1916,8 +1955,8 @@ (defrule ordered-extends (forall ((y z strd) (c chan)) (implies- (and (p "tpm-extend" y (idx 3)) (p "tpm-extend" z (idx 3))- (p "tpm-extend" "c" y c) (p "tpm-extend" "c" z c))+ (and (p "tpm-extend" z (idx 3)) (p "tpm-extend" y (idx 3))+ (p "tpm-extend" "c" z c) (p "tpm-extend" "c" y c)) (or (= y z) (prec y (idx 2) z (idx 3))@@ -1943,6 +1982,7 @@ (label 44) (unrealized (0 0) (1 2)) (preskeleton)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -1961,6 +2001,7 @@ (label 45) (parent 44) (unrealized (1 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -1986,6 +2027,7 @@ (label 46) (parent 45) (unrealized (0 0) (2 0))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2010,6 +2052,7 @@ (label 47) (parent 46) (unrealized (0 0))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2040,6 +2083,7 @@ (label 48) (parent 47) (unrealized (3 1) (3 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2071,6 +2115,7 @@ (label 49) (parent 48) (unrealized (3 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -2107,6 +2152,7 @@ (label 50) (parent 49) (unrealized (4 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2144,6 +2190,7 @@ (parent 49) (unrealized (4 0) (4 1)) (dead)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "empty cohort")) (defskeleton envelope@@ -2183,6 +2230,7 @@ (label 52) (parent 50) (unrealized (5 0) (5 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2222,6 +2270,7 @@ (label 53) (parent 52) (unrealized (5 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2319,8 +2368,8 @@ (defrule ordered-extends (forall ((y z strd) (c chan)) (implies- (and (p "tpm-extend" y (idx 3)) (p "tpm-extend" z (idx 3))- (p "tpm-extend" "c" y c) (p "tpm-extend" "c" z c))+ (and (p "tpm-extend" z (idx 3)) (p "tpm-extend" y (idx 3))+ (p "tpm-extend" "c" z c) (p "tpm-extend" "c" y c)) (or (= y z) (prec y (idx 2) z (idx 3))@@ -2348,6 +2397,7 @@ (label 55) (unrealized (0 0) (1 2)) (preskeleton)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -2368,6 +2418,7 @@ (label 56) (parent 55) (unrealized (0 0) (1 2))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -2395,6 +2446,7 @@ (label 57) (parent 56) (unrealized (0 0) (2 0))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2421,6 +2473,7 @@ (label 58) (parent 57) (unrealized (0 0))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2454,6 +2507,7 @@ (label 59) (parent 58) (unrealized (3 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -2492,6 +2546,7 @@ (label 60) (parent 59) (unrealized (4 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2531,6 +2586,7 @@ (parent 59) (unrealized (4 0) (4 1)) (dead)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -2572,6 +2628,7 @@ (label 62) (parent 60) (unrealized (5 0) (5 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2613,6 +2670,7 @@ (label 63) (parent 62) (unrealized (5 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2712,8 +2770,8 @@ (defrule ordered-extends (forall ((y z strd) (c chan)) (implies- (and (p "tpm-extend" y (idx 3)) (p "tpm-extend" z (idx 3))- (p "tpm-extend" "c" y c) (p "tpm-extend" "c" z c))+ (and (p "tpm-extend" z (idx 3)) (p "tpm-extend" y (idx 3))+ (p "tpm-extend" "c" z c) (p "tpm-extend" "c" y c)) (or (= y z) (prec y (idx 2) z (idx 3))@@ -2743,6 +2801,7 @@ (label 65) (unrealized (0 0) (1 0) (2 2)) (preskeleton)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (2 3)) (n (2 0))) (comment "Not a skeleton")) @@ -2765,6 +2824,7 @@ (label 66) (parent 65) (unrealized (0 0) (2 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (2 3)) (n (2 0))) (comment "1 in cohort - 1 not yet seen")) @@ -2794,6 +2854,7 @@ (label 67) (parent 66) (unrealized (0 0) (1 0) (3 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2822,6 +2883,7 @@ (label 68) (parent 67) (unrealized (0 0) (1 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2857,6 +2919,7 @@ (label 69) (parent 68) (unrealized (0 0) (4 1) (4 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2893,6 +2956,7 @@ (label 70) (parent 69) (unrealized (0 0) (4 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -2933,6 +2997,7 @@ (label 71) (parent 70) (unrealized (0 0) (5 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2974,6 +3039,7 @@ (parent 70) (unrealized (0 0) (5 0) (5 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -3017,6 +3083,7 @@ (label 73) (parent 71) (unrealized (0 0) (6 0) (6 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3060,6 +3127,7 @@ (label 74) (parent 73) (unrealized (0 0) (6 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3106,6 +3174,7 @@ (label 75) (parent 74) (unrealized (0 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3157,6 +3226,7 @@ (label 76) (parent 75) (unrealized (8 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -3212,6 +3282,7 @@ (label 77) (parent 76) (unrealized (9 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3268,6 +3339,7 @@ (parent 76) (unrealized (9 0) (9 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -3328,6 +3400,7 @@ (label 79) (parent 77) (unrealized (10 0) (10 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3388,6 +3461,7 @@ (label 80) (parent 79) (unrealized (10 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3505,8 +3579,8 @@ (defrule ordered-extends (forall ((y z strd) (c chan)) (implies- (and (p "tpm-extend" y (idx 3)) (p "tpm-extend" z (idx 3))- (p "tpm-extend" "c" y c) (p "tpm-extend" "c" z c))+ (and (p "tpm-extend" z (idx 3)) (p "tpm-extend" y (idx 3))+ (p "tpm-extend" "c" z c) (p "tpm-extend" "c" y c)) (or (= y z) (prec y (idx 2) z (idx 3))@@ -3514,11 +3588,10 @@ (defrule esk-same-as-chan (forall ((y z strd) (esk skey) (c c-0 chan)) (implies- (and (p "tpm-extend-enc" y (idx 3))- (p "tpm-extend-enc" z (idx 3))- (p "tpm-extend-enc" "esk" y esk)- (p "tpm-extend-enc" "esk" z esk) (p "tpm-extend-enc" "c" y c)- (p "tpm-extend-enc" "c" z c-0))+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" y (idx 3)) (p "tpm-extend-enc" "c" z c-0)+ (p "tpm-extend-enc" "c" y c) (p "tpm-extend-enc" "esk" z esk)+ (p "tpm-extend-enc" "esk" y esk)) (= c c-0)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -3541,6 +3614,7 @@ (label 82) (unrealized (0 0) (1 2)) (preskeleton)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -3559,6 +3633,7 @@ (label 83) (parent 82) (unrealized (1 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -3584,6 +3659,7 @@ (label 84) (parent 83) (unrealized (0 0) (2 0))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3608,6 +3684,7 @@ (label 85) (parent 84) (unrealized (0 0))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3638,6 +3715,7 @@ (label 86) (parent 85) (unrealized (3 1) (3 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3669,6 +3747,7 @@ (label 87) (parent 86) (unrealized (3 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -3705,6 +3784,7 @@ (label 88) (parent 87) (unrealized (4 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3742,6 +3822,7 @@ (parent 87) (unrealized (4 0) (4 1)) (dead)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "empty cohort")) (defskeleton envelope@@ -3781,6 +3862,7 @@ (label 90) (parent 88) (unrealized (5 0) (5 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3820,6 +3902,7 @@ (label 91) (parent 90) (unrealized (5 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3917,8 +4000,8 @@ (defrule ordered-extends (forall ((y z strd) (c chan)) (implies- (and (p "tpm-extend" y (idx 3)) (p "tpm-extend" z (idx 3))- (p "tpm-extend" "c" y c) (p "tpm-extend" "c" z c))+ (and (p "tpm-extend" z (idx 3)) (p "tpm-extend" y (idx 3))+ (p "tpm-extend" "c" z c) (p "tpm-extend" "c" y c)) (or (= y z) (prec y (idx 2) z (idx 3))@@ -3926,11 +4009,10 @@ (defrule esk-same-as-chan (forall ((y z strd) (esk skey) (c c-0 chan)) (implies- (and (p "tpm-extend-enc" y (idx 3))- (p "tpm-extend-enc" z (idx 3))- (p "tpm-extend-enc" "esk" y esk)- (p "tpm-extend-enc" "esk" z esk) (p "tpm-extend-enc" "c" y c)- (p "tpm-extend-enc" "c" z c-0))+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" y (idx 3)) (p "tpm-extend-enc" "c" z c-0)+ (p "tpm-extend-enc" "c" y c) (p "tpm-extend-enc" "esk" z esk)+ (p "tpm-extend-enc" "esk" y esk)) (= c c-0)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -3955,6 +4037,7 @@ (label 93) (unrealized (0 0) (1 2)) (preskeleton)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -3975,6 +4058,7 @@ (label 94) (parent 93) (unrealized (0 0) (1 2))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -4002,6 +4086,7 @@ (label 95) (parent 94) (unrealized (0 0) (2 0))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4028,6 +4113,7 @@ (label 96) (parent 95) (unrealized (0 0))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4061,6 +4147,7 @@ (label 97) (parent 96) (unrealized (3 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -4099,6 +4186,7 @@ (label 98) (parent 97) (unrealized (4 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4138,6 +4226,7 @@ (parent 97) (unrealized (4 0) (4 1)) (dead)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -4179,6 +4268,7 @@ (label 100) (parent 98) (unrealized (5 0) (5 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4220,6 +4310,7 @@ (label 101) (parent 100) (unrealized (5 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4319,8 +4410,8 @@ (defrule ordered-extends (forall ((y z strd) (c chan)) (implies- (and (p "tpm-extend" y (idx 3)) (p "tpm-extend" z (idx 3))- (p "tpm-extend" "c" y c) (p "tpm-extend" "c" z c))+ (and (p "tpm-extend" z (idx 3)) (p "tpm-extend" y (idx 3))+ (p "tpm-extend" "c" z c) (p "tpm-extend" "c" y c)) (or (= y z) (prec y (idx 2) z (idx 3))@@ -4328,11 +4419,10 @@ (defrule esk-same-as-chan (forall ((y z strd) (esk skey) (c c-0 chan)) (implies- (and (p "tpm-extend-enc" y (idx 3))- (p "tpm-extend-enc" z (idx 3))- (p "tpm-extend-enc" "esk" y esk)- (p "tpm-extend-enc" "esk" z esk) (p "tpm-extend-enc" "c" y c)- (p "tpm-extend-enc" "c" z c-0))+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" y (idx 3)) (p "tpm-extend-enc" "c" z c-0)+ (p "tpm-extend-enc" "c" y c) (p "tpm-extend-enc" "esk" z esk)+ (p "tpm-extend-enc" "esk" y esk)) (= c c-0)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -4359,6 +4449,7 @@ (label 103) (unrealized (0 0) (1 0) (2 2)) (preskeleton)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (2 3)) (n (2 0))) (comment "Not a skeleton")) @@ -4381,6 +4472,7 @@ (label 104) (parent 103) (unrealized (0 0) (2 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (2 3)) (n (2 0))) (comment "1 in cohort - 1 not yet seen")) @@ -4410,6 +4502,7 @@ (label 105) (parent 104) (unrealized (0 0) (1 0) (3 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4438,6 +4531,7 @@ (label 106) (parent 105) (unrealized (0 0) (1 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4473,6 +4567,7 @@ (label 107) (parent 106) (unrealized (0 0) (4 1) (4 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4509,6 +4604,7 @@ (label 108) (parent 107) (unrealized (0 0) (4 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -4549,6 +4645,7 @@ (label 109) (parent 108) (unrealized (0 0) (5 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4590,6 +4687,7 @@ (parent 108) (unrealized (0 0) (5 0) (5 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -4633,6 +4731,7 @@ (label 111) (parent 109) (unrealized (0 0) (6 0) (6 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4676,6 +4775,7 @@ (label 112) (parent 111) (unrealized (0 0) (6 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4722,6 +4822,7 @@ (label 113) (parent 112) (unrealized (0 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4773,6 +4874,7 @@ (label 114) (parent 113) (unrealized (8 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -4828,6 +4930,7 @@ (label 115) (parent 114) (unrealized (9 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4884,6 +4987,7 @@ (parent 114) (unrealized (9 0) (9 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -4945,6 +5049,7 @@ (parent 115) (unrealized (10 0) (10 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/chan-perrig-song.tst view
@@ -1,6 +1,6 @@ (herald perrig-song) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/chan-perrig-song.scm") (defprotocol perrig-song basic@@ -25,6 +25,7 @@ (traces ((send na) (recv c (cat na nb a b)))) (label 0) (unrealized (0 1))+ (maps ((0) ((na na) (c c) (nb nb) (a a) (b b)))) (origs (na (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -71,6 +72,7 @@ (traces ((recv na) (send c (cat na nb a b)) (recv nb))) (label 2) (unrealized (0 2))+ (maps ((0) ((nb nb) (c c) (na na) (a a) (b b)))) (origs (nb (0 1))) (comment "1 in cohort - 1 not yet seen"))
tst/chan-unilateral.tst view
@@ -1,6 +1,6 @@ (herald chan-unilateral) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/chan-unilateral.scm") (defprotocol unilateral basic@@ -83,6 +83,7 @@ (traces ((send ch n) (recv n))) (label 2) (unrealized (0 1))+ (maps ((0) ((ch ch) (n n)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -129,6 +130,7 @@ (traces ((send ch n) (recv n))) (label 4) (unrealized (0 1))+ (maps ((0) ((ch ch) (n n)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -174,6 +176,7 @@ (traces ((recv ch n) (send n))) (label 6) (unrealized (0 0))+ (maps ((0) ((n n) (ch ch)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -219,6 +222,7 @@ (traces ((recv ch n) (send n))) (label 8) (unrealized (0 0))+ (maps ((0) ((n n) (ch ch)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -265,6 +269,7 @@ (traces ((recv ch n) (send n))) (label 10) (unrealized (0 0))+ (maps ((0) ((n n) (ch ch)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -312,6 +317,7 @@ (traces ((recv ch n) (send n))) (label 12) (unrealized (0 0))+ (maps ((0) ((n n) (ch ch)))) (origs) (comment "1 in cohort - 1 not yet seen"))
tst/chan-yahalom-role-decl.tst view
@@ -1,6 +1,6 @@ (herald "Yahalom Protocol Without Forwarding" (bound 15)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/chan-yahalom-role-decl.scm") (comment "Strand count bounded at 15") @@ -39,6 +39,8 @@ (recv ch2 (cat a b k)) (recv (enc n-b k)))) (label 0) (unrealized (0 2))+ (maps+ ((0) ((n-b n-b) (b b) (a a) (n-a n-a) (k k) (ch1 ch1) (ch2 ch2)))) (origs (n-b (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -64,6 +66,8 @@ (label 1) (parent 0) (unrealized (0 3))+ (maps+ ((0) ((n-b n-b) (b b) (a a) (n-a n-a) (k k) (ch1 ch1) (ch2 ch2)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -91,6 +95,8 @@ (label 2) (parent 1) (unrealized (2 1))+ (maps+ ((0) ((n-b n-b) (b b) (a a) (n-a n-a) (k k) (ch1 ch1) (ch2 ch2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -116,6 +122,8 @@ (label 3) (parent 1) (unrealized (2 0))+ (maps+ ((0) ((n-b n-b) (b b) (a a) (n-a n-a) (k k) (ch1 ch1) (ch2 ch2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -173,6 +181,8 @@ (parent 3) (unrealized (2 0)) (dead)+ (maps+ ((0) ((n-b n-b) (b b) (a a) (n-a n-a) (k k) (ch1 ch1) (ch2 ch2)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -213,6 +223,8 @@ (recv ch2 (cat a b k)) (recv (enc n-b k))) ((recv k) (send k))) (label 6) (unrealized (0 2))+ (maps+ ((0 1) ((k k) (n-b n-b) (b b) (a a) (n-a n-a) (ch1 ch1) (ch2 ch2)))) (origs (n-b (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -239,6 +251,8 @@ (label 7) (parent 6) (unrealized (0 3) (1 0))+ (maps+ ((0 1) ((k k) (n-b n-b) (b b) (a a) (n-a n-a) (ch1 ch1) (ch2 ch2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -265,6 +279,8 @@ (parent 7) (unrealized (0 3) (1 0)) (dead)+ (maps+ ((0 1) ((k k) (n-b n-b) (b b) (a a) (n-a n-a) (ch1 ch1) (ch2 ch2)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -303,6 +319,7 @@ (send (enc n-b k)))) (label 9) (unrealized (0 1))+ (maps ((0) ((n-a n-a) (a a) (b b) (n-b n-b) (k k) (ch3 ch3)))) (origs (n-a (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -365,6 +382,7 @@ (send (enc n-b k))) ((recv k) (send k))) (label 11) (unrealized (0 1))+ (maps ((0 1) ((k k) (a a) (b b) (n-a n-a) (n-b n-b) (ch3 ch3)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -388,6 +406,7 @@ (label 12) (parent 11) (unrealized (1 0))+ (maps ((0 1) ((k k) (a a) (b b) (n-a n-a) (n-b n-b) (ch3 ch3)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -412,6 +431,7 @@ (parent 12) (unrealized (1 0)) (dead)+ (maps ((0 1) ((k k) (a a) (b b) (n-a n-a) (n-b n-b) (ch3 ch3)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -455,6 +475,10 @@ (recv ch2 (cat a-0 b-0 k)))) (label 14) (unrealized (0 1) (1 2))+ (maps+ ((0 1)+ ((n-a n-a) (k k) (a a) (b b) (n-b n-b) (ch3 ch3) (b-0 b-0)+ (a-0 a-0) (n-a-0 n-a-0) (n-b-0 n-b-0) (ch1 ch1) (ch2 ch2)))) (origs (n-a (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -484,6 +508,10 @@ (label 15) (parent 14) (unrealized (0 1))+ (maps+ ((0 1)+ ((n-a n-a) (k k) (a a) (b b) (n-b n-b) (ch3 ch3) (b-0 b-0)+ (a-0 a-0) (n-a-0 n-a-0) (n-b-0 n-b-0) (ch1 ch1) (ch2 ch2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -559,6 +587,10 @@ (recv ch2 (cat a-0 b-0 k)) (recv (enc n-b-0 k)))) (label 17) (unrealized (0 1) (1 2))+ (maps+ ((0 1)+ ((n-a n-a) (k k) (a a) (b b) (n-b n-b) (ch3 ch3) (b-0 b-0)+ (a-0 a-0) (n-a-0 n-a-0) (n-b-0 n-b-0) (ch1 ch1) (ch2 ch2)))) (origs (n-a (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -588,6 +620,10 @@ (label 18) (parent 17) (unrealized (0 1) (1 3))+ (maps+ ((0 1)+ ((n-a n-a) (k k) (a a) (b b) (n-b n-b) (ch3 ch3) (b-0 b-0)+ (a-0 a-0) (n-a-0 n-a-0) (n-b-0 n-b-0) (ch1 ch1) (ch2 ch2)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton yahalom@@ -615,6 +651,10 @@ (label 19) (parent 18) (unrealized (0 1))+ (maps+ ((0 1)+ ((n-a n-a) (k k) (a a) (b b) (n-b n-b) (ch3 ch3) (b-0 b-0)+ (a-0 a-0) (n-a-0 n-a-0) (n-b-0 n-b) (ch1 ch1) (ch2 ch2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -646,6 +686,10 @@ (label 20) (parent 18) (unrealized (0 1) (3 1))+ (maps+ ((0 1)+ ((n-a n-a) (k k) (a a) (b b) (n-b n-b) (ch3 ch3) (b-0 b-0)+ (a-0 a-0) (n-a-0 n-a-0) (n-b-0 n-b-0) (ch1 ch1) (ch2 ch2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -674,6 +718,10 @@ (label 21) (parent 18) (unrealized (0 1) (3 0))+ (maps+ ((0 1)+ ((n-a n-a) (k k) (a a) (b b) (n-b n-b) (ch3 ch3) (b-0 b-0)+ (a-0 a-0) (n-a-0 n-a-0) (n-b-0 n-b-0) (ch1 ch1) (ch2 ch2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -739,6 +787,10 @@ (parent 20) (unrealized (0 1)) (dead)+ (maps+ ((0 1)+ ((n-a n-a) (k k) (a a) (b b) (n-b n-b) (ch3 ch3) (b-0 b-0)+ (a-0 a-0) (n-a-0 n-a-0) (n-b-0 n-b-0) (ch1 ch1) (ch2 ch2)))) (comment "empty cohort")) (defskeleton yahalom@@ -769,6 +821,10 @@ (parent 21) (unrealized (0 1) (3 0)) (dead)+ (maps+ ((0 1)+ ((n-a n-a) (k k) (a a) (b b) (n-b n-b) (ch3 ch3) (b-0 b-0)+ (a-0 a-0) (n-a-0 n-a-0) (n-b-0 n-b-0) (ch1 ch1) (ch2 ch2)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -854,6 +910,10 @@ (label 26) (unrealized (1 0)) (preskeleton)+ (maps+ ((0 1)+ ((k k) (a a) (b b) (n-a n-a) (n-b n-b) (ch1 ch1) (ch2 ch2)+ (ch3 ch3)))) (origs (k (0 1))) (comment "Not a skeleton")) @@ -871,6 +931,10 @@ (label 27) (parent 26) (unrealized (1 0))+ (maps+ ((0 1)+ ((k k) (a a) (b b) (n-a n-a) (n-b n-b) (ch1 ch1) (ch2 ch2)+ (ch3 ch3)))) (origs (k (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -892,6 +956,10 @@ (parent 27) (unrealized (1 0)) (dead)+ (maps+ ((0 1)+ ((k k) (a a) (b b) (n-a n-a) (n-b n-b) (ch1 ch1) (ch2 ch2)+ (ch3 ch3)))) (origs (k (0 1))) (comment "empty cohort"))
tst/chan-yahalom.tst view
@@ -1,6 +1,6 @@ (herald "Yahalom Protocol Without Forwarding" (bound 15)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/chan-yahalom.scm") (comment "Strand count bounded at 15") @@ -36,6 +36,8 @@ (recv ch2 (cat a b k)) (recv (enc n-b k)))) (label 0) (unrealized (0 2))+ (maps+ ((0) ((a a) (b b) (n-b n-b) (ch1 ch1) (ch2 ch2) (n-a n-a) (k k)))) (origs (n-b (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -106,6 +108,10 @@ (send ch3 (cat a b k n-a-0 n-b-0)) (send ch2 (cat a b k)))) (label 2) (unrealized (0 3))+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a-0) (n-b-0 n-b-0) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1-0) (ch3 ch3)))) (origs (k (1 1)) (n-b (0 1))) (comment "2 in cohort - 2 not yet seen")) @@ -134,6 +140,10 @@ (label 3) (parent 2) (unrealized (2 1))+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a-0) (n-b-0 n-b-0) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1-0) (ch3 ch3)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -159,6 +169,10 @@ (label 4) (parent 2) (unrealized (2 0))+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a-0) (n-b-0 n-b-0) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1-0) (ch3 ch3)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -220,6 +234,10 @@ (label 6) (parent 3) (unrealized (2 1))+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a-0) (n-b-0 n-b-0) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1-0) (ch3 ch3)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -247,6 +265,10 @@ (parent 4) (unrealized (2 0)) (dead)+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a-0) (n-b-0 n-b-0) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1-0) (ch3 ch3)))) (comment "empty cohort")) (defskeleton yahalom@@ -279,6 +301,10 @@ (5 (operation generalization weakened ((1 2) (2 1))) (strand-map 0 1 2))) (realized)+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a-0) (n-b-0 n-b) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1-0) (ch3 ch3)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")@@ -322,6 +348,10 @@ (label 9) (unrealized (0 2) (0 3) (1 0)) (preskeleton)+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a-0) (n-b-0 n-b-0) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1-0) (ch3 ch3)))) (origs (k (1 1)) (n-b (0 1))) (comment "Not a skeleton")) @@ -344,6 +374,10 @@ (label 10) (parent 9) (unrealized (0 2) (0 3) (1 0))+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a-0) (n-b-0 n-b-0) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1-0) (ch3 ch3)))) (origs (k (1 1)) (n-b (0 1))) (comment "2 in cohort - 2 not yet seen")) @@ -368,6 +402,10 @@ (label 11) (parent 10) (unrealized (0 2) (0 3))+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a) (n-b-0 n-b) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1) (ch3 ch3)))) (origs (k (1 1)) (n-b (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -395,6 +433,10 @@ (label 12) (parent 10) (unrealized (0 2) (0 3))+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a-0) (n-b-0 n-b-0) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1-0) (ch3 ch3)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -418,6 +460,10 @@ (label 13) (parent 11) (unrealized (0 3))+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a) (n-b-0 n-b) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1) (ch3 ch3)))) (origs (k (1 1)) (n-b (0 1))) (comment "2 in cohort - 2 not yet seen")) @@ -445,6 +491,10 @@ (label 14) (parent 12) (unrealized (0 3))+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a-0) (n-b-0 n-b-0) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1-0) (ch3 ch3)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -472,6 +522,10 @@ (label 15) (parent 13) (unrealized (2 1))+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a) (n-b-0 n-b) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1) (ch3 ch3)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -495,6 +549,10 @@ (label 16) (parent 13) (unrealized (2 0))+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a) (n-b-0 n-b) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1) (ch3 ch3)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -525,6 +583,10 @@ (label 17) (parent 14) (unrealized (3 1))+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a-0) (n-b-0 n-b-0) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1-0) (ch3 ch3)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -552,6 +614,10 @@ (label 18) (parent 14) (unrealized (3 0))+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a-0) (n-b-0 n-b-0) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1-0) (ch3 ch3)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -612,6 +678,10 @@ (label 20) (parent 15) (unrealized (2 1))+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a) (n-b-0 n-b) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1) (ch3 ch3)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -637,6 +707,10 @@ (parent 16) (unrealized (2 0)) (dead)+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a) (n-b-0 n-b) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1) (ch3 ch3)))) (comment "empty cohort")) (defskeleton yahalom@@ -669,6 +743,10 @@ (parent 17) (unrealized (3 1)) (dead)+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a-0) (n-b-0 n-b-0) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1-0) (ch3 ch3)))) (comment "empty cohort")) (defskeleton yahalom@@ -698,6 +776,10 @@ (parent 18) (unrealized (3 0)) (dead)+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a-0) (n-b-0 n-b-0) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1-0) (ch3 ch3)))) (comment "empty cohort")) (defskeleton yahalom@@ -729,6 +811,10 @@ (19 (operation generalization weakened ((1 2) (2 1))) (strand-map 0 1 2))) (realized)+ (maps+ ((0 1)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a) (n-b-0 n-b) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1) (ch3 ch3)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")@@ -774,6 +860,10 @@ (label 25) (unrealized (0 2) (0 3) (1 0) (2 0)) (preskeleton)+ (maps+ ((0 1 2)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a-0) (n-b-0 n-b-0) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1-0) (ch3 ch3)))) (origs (k (1 1)) (n-b (0 1))) (comment "Not a skeleton")) @@ -798,6 +888,10 @@ (label 26) (parent 25) (unrealized (0 2) (0 3) (1 0) (2 0))+ (maps+ ((0 1 2)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a-0) (n-b-0 n-b-0) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1-0) (ch3 ch3)))) (origs (k (1 1)) (n-b (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -826,6 +920,10 @@ (parent 26) (unrealized (0 2) (0 3) (1 0) (2 0)) (dead)+ (maps+ ((0 1 2)+ ((k k) (n-b n-b) (n-a n-a) (n-a-0 n-a-0) (n-b-0 n-b-0) (a a) (b b)+ (ch1 ch1) (ch2 ch2) (ch1-0 ch1-0) (ch3 ch3)))) (origs (k (1 1)) (n-b (0 1))) (comment "empty cohort")) @@ -862,6 +960,7 @@ (send (enc n-b k)))) (label 28) (unrealized (0 1))+ (maps ((0) ((n-a n-a) (ch3 ch3) (a a) (b b) (n-b n-b) (k k)))) (origs (n-a (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -925,6 +1024,10 @@ ((recv ch1 (cat a b n-a n-b)) (send ch3-0 (cat a b k n-a n-b)))) (label 30) (unrealized (0 1) (1 0))+ (maps+ ((0 1)+ ((k k) (n-a n-a) (n-b n-b) (a a) (b b) (ch3 ch3) (ch3-0 ch3-0)+ (ch1 ch1)))) (origs (k (1 1)) (n-a (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -949,6 +1052,10 @@ (label 31) (parent 30) (unrealized (0 1))+ (maps+ ((0 1)+ ((k k) (n-a n-a) (n-b n-b) (a a) (b b) (ch3 ch3) (ch3-0 ch3-0)+ (ch1 ch1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -1014,6 +1121,10 @@ (send ch2 (cat a b k)))) (label 33) (unrealized (0 0))+ (maps+ ((0)+ ((ch1 ch1) (ch2 ch2) (ch3 ch3) (a a) (b b) (n-a n-a) (n-b n-b)+ (k k)))) (origs (k (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -1080,6 +1191,10 @@ (label 35) (unrealized (0 0) (1 0)) (preskeleton)+ (maps+ ((0 1)+ ((k k) (ch1 ch1) (ch2 ch2) (ch3 ch3) (a a) (b b) (n-a n-a)+ (n-b n-b)))) (origs (k (0 1))) (comment "Not a skeleton")) @@ -1098,6 +1213,10 @@ (label 36) (parent 35) (unrealized (0 0) (1 0))+ (maps+ ((0 1)+ ((k k) (ch1 ch1) (ch2 ch2) (ch3 ch3) (a a) (b b) (n-a n-a)+ (n-b n-b)))) (origs (k (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -1120,6 +1239,10 @@ (parent 36) (unrealized (0 0) (1 0)) (dead)+ (maps+ ((0 1)+ ((k k) (ch1 ch1) (ch2 ch2) (ch3 ch3) (a a) (b b) (n-a n-a)+ (n-b n-b)))) (origs (k (0 1))) (comment "empty cohort"))
tst/commitment.tst view
@@ -1,6 +1,6 @@ (herald commitment) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/commitment.scm") (defprotocol commit basic@@ -45,6 +45,10 @@ (send (enc "result" a b n quote outcome (privk "sig" b))))) (label 0) (unrealized (0 0))+ (maps+ ((0)+ ((a a) (b b) (n n) (quote quote) (outcome outcome)+ (sealed sealed)))) (origs) (comment "Not closed under rules")) @@ -62,6 +66,10 @@ (label 1) (parent 0) (unrealized (0 0))+ (maps+ ((0)+ ((a a) (b b) (n n) (quote quote) (outcome outcome)+ (sealed (hash a b n quote))))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -133,6 +141,7 @@ (send (enc "receipt" sealed (privk "sig" b))))) (label 3) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (sealed sealed)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -225,6 +234,7 @@ (label 6) (unrealized (0 0) (0 2)) (preskeleton)+ (maps ((0 1) ((n n) (quote quote) (outcome outcome) (a a) (b b)))) (origs) (ugens (n (1 0))) (comment "Not a skeleton"))@@ -246,6 +256,7 @@ (label 7) (parent 6) (unrealized (0 2))+ (maps ((0 1) ((n n) (quote quote) (outcome outcome) (a a) (b b)))) (origs) (ugens (n (1 0))) (comment "1 in cohort - 1 not yet seen"))
tst/comp_test.tst view
@@ -1,6 +1,6 @@ (herald "Main Example") -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/comp_test.scm") (defprotocol main-ex-src basic@@ -54,6 +54,7 @@ (recv (enc "sorry" a b k)))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (k k)))) (origs (k (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -64,6 +65,18 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk a) (invk b) (invk c)) (uniq-orig k)+ (comment+ (defgoal main-ex-src+ (forall ((i ssn text) (k skey) (a b c akey) (z strd))+ (implies+ (and (p "qn" z 2) (p "qn" "i" z i) (p "qn" "ssn" z ssn)+ (p "qn" "k" z k) (p "qn" "a" z a) (p "qn" "b" z b)+ (p "qn" "c" z c) (non (invk a)) (non (invk b))+ (non (invk c)) (uniq-at k z 0))+ (exists ((x mesg) (z-0 strd))+ (and (p "an" z-0 2) (p "an" "x" z-0 x) (p "an" "i" z-0 i)+ (p "an" "k" z-0 k) (p "an" "a" z-0 a) (p "an" "b" z-0 b)+ (p "an" "c" z-0 c) (prec z 0 z-0 0) (prec z-0 1 z 1))))))) (operation encryption-test (added-strand an 2) (enc "sorry" a b k) (0 1)) (strand-map 0)@@ -75,6 +88,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton main-ex-src@@ -84,6 +98,18 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk a) (invk b) (invk c)) (uniq-orig k)+ (comment+ (defgoal main-ex-src+ (forall ((i ssn text) (k skey) (a b c akey) (z strd))+ (implies+ (and (p "qn" z 2) (p "qn" "i" z i) (p "qn" "ssn" z ssn)+ (p "qn" "k" z k) (p "qn" "a" z a) (p "qn" "b" z b)+ (p "qn" "c" z c) (non (invk a)) (non (invk b))+ (non (invk c)) (uniq-at k z 0))+ (exists ((x mesg) (z-0 strd))+ (and (p "an" z-0 2) (p "an" "x" z-0 x) (p "an" "i" z-0 i)+ (p "an" "k" z-0 k) (p "an" "a" z-0 a) (p "an" "b" z-0 b)+ (p "an" "c" z-0 c) (prec z 0 z-0 0) (prec z-0 1 z 1))))))) (operation encryption-test (added-listener k) (enc "sorry" a b k) (0 1)) (strand-map 0)@@ -94,6 +120,7 @@ (parent 0) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (k k)))) (comment "empty cohort")) (defskeleton main-ex-src@@ -103,6 +130,18 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk a) (invk b) (invk c)) (uniq-orig k)+ (comment+ (defgoal main-ex-src+ (forall ((i ssn text) (k skey) (a b c akey) (z strd))+ (implies+ (and (p "qn" z 2) (p "qn" "i" z i) (p "qn" "ssn" z ssn)+ (p "qn" "k" z k) (p "qn" "a" z a) (p "qn" "b" z b)+ (p "qn" "c" z c) (non (invk a)) (non (invk b))+ (non (invk c)) (uniq-at k z 0))+ (exists ((x mesg) (z-0 strd))+ (and (p "an" z-0 2) (p "an" "x" z-0 x) (p "an" "i" z-0 i)+ (p "an" "k" z-0 k) (p "an" "a" z-0 a) (p "an" "b" z-0 b)+ (p "an" "c" z-0 c) (prec z 0 z-0 0) (prec z-0 1 z 1))))))) (operation encryption-test (displaced 2 0 qy 1) (enc k b c-0 i-0 (invk a)) (1 0)) (strand-map 0 1)@@ -159,6 +198,7 @@ (recv (enc "data" d k)))) (label 4) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (d d) (k k)))) (origs (k (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -179,6 +219,7 @@ (label 5) (parent 4) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (d d) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton main-ex-src@@ -197,6 +238,7 @@ (parent 4) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (d d) (k k)))) (comment "empty cohort")) (defskeleton main-ex-src@@ -269,6 +311,7 @@ (recv (enc "sorry" a b k)))) (label 8) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (k k)))) (origs (k (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -290,6 +333,7 @@ (label 9) (parent 8) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton main-ex-tgt@@ -309,6 +353,7 @@ (parent 8) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (k k)))) (comment "empty cohort")) (defskeleton main-ex-tgt@@ -329,6 +374,7 @@ (label 11) (parent 9) (unrealized (1 2))+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton main-ex-tgt@@ -406,6 +452,7 @@ (recv (enc "data" d k)))) (label 13) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (d d) (k k)))) (origs (k (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -428,6 +475,7 @@ (label 14) (parent 13) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (d d) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton main-ex-tgt@@ -446,6 +494,7 @@ (parent 13) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (d d) (k k)))) (comment "empty cohort")) (defskeleton main-ex-tgt@@ -466,6 +515,7 @@ (label 16) (parent 14) (unrealized (1 2))+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (d d) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton main-ex-tgt@@ -485,6 +535,7 @@ (label 17) (parent 16) (unrealized (1 2))+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (d d) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton main-ex-tgt@@ -540,6 +591,7 @@ (seen-ops (18 (operation generalization separated n-0) (strand-map 0 1 2))) (realized)+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (d d) (k k)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")@@ -576,16 +628,16 @@ (defrule src (forall ((z strd) (i ssn text) (k skey) (a b c akey)) (implies- (and (p "qn" z (idx 2)) (p "qn" "i" z i) (p "qn" "ssn" z ssn)- (p "qn" "k" z k) (p "qn" "a" z a) (p "qn" "b" z b)- (p "qn" "c" z c) (non (invk a)) (non (invk b)) (non (invk c))+ (and (p "qn" z (idx 2)) (p "qn" "c" z c) (p "qn" "b" z b)+ (p "qn" "a" z a) (p "qn" "k" z k) (p "qn" "ssn" z ssn)+ (p "qn" "i" z i) (non (invk c)) (non (invk b)) (non (invk a)) (uniq k)) (exists ((z-0 strd) (x mesg))- (and (p "an" z-0 (idx 4)) (p "an" "x" z-0 x)- (p "an" "i" z-0 i) (p "an" "k" z-0 k) (p "an" "a" z-0 a)- (p "an" "b" z-0 b) (p "an" "c" z-0 c)- (prec z (idx 0) z-0 (idx 0))- (prec z-0 (idx 3) z (idx 1)))))))+ (and (p "an" z-0 (idx 4)) (p "an" "c" z-0 c)+ (p "an" "b" z-0 b) (p "an" "a" z-0 a) (p "an" "k" z-0 k)+ (p "an" "i" z-0 i) (p "an" "x" z-0 x)+ (prec z-0 (idx 3) z (idx 1))+ (prec z (idx 0) z-0 (idx 0))))))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false)))) (defgenrule neqRl_strd@@ -603,6 +655,7 @@ (recv (enc "sorry" a b k)))) (label 20) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (k k)))) (origs (k (0 0))) (comment "Not closed under rules")) @@ -622,6 +675,7 @@ (label 21) (parent 20) (unrealized (1 2))+ (maps ((0) ((a a) (b b) (c c) (i i) (ssn ssn) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton main-ex-tgt-rule
tst/completeness-test.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/completeness-test.scm") (defprotocol completeness-test basic@@ -28,6 +28,7 @@ (send (enc "ok" s-0))) ((recv (enc "ok" s)))) (label 0) (unrealized (0 1) (1 0))+ (maps ((0 1) ((b b) (n n) (s s) (a a) (s-0 s-0)))) (origs (n (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -47,6 +48,7 @@ (label 1) (parent 0) (unrealized (0 1))+ (maps ((0 1) ((b b) (n n) (s s) (a a) (s-0 s)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -68,6 +70,7 @@ (label 2) (parent 0) (unrealized (0 1))+ (maps ((0 1) ((b b) (n n) (s s) (a a) (s-0 s-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton completeness-test@@ -146,6 +149,7 @@ (send (enc "ok" s-0)))) (label 5) (unrealized (0 0) (1 1))+ (maps ((0 1) ((b b) (n n) (s s) (a a) (s-0 s-0)))) (origs (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -167,6 +171,7 @@ (label 6) (parent 5) (unrealized (0 0))+ (maps ((0 1) ((b b) (n n) (s s) (a a) (s-0 s-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton completeness-test@@ -243,6 +248,7 @@ ((recv (enc "ok" s)))) (label 9) (unrealized (0 1) (1 0))+ (maps ((0 1) ((b b) (n n) (s s) (a a)))) (origs (n (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -261,6 +267,7 @@ (label 10) (parent 9) (unrealized (1 1))+ (maps ((1 0) ((b b) (n n) (s s) (a a)))) (origs (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -281,6 +288,7 @@ (label 11) (parent 9) (unrealized (0 1))+ (maps ((0 1) ((b b) (n n) (s s) (a a)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton completeness-test@@ -357,6 +365,7 @@ ((send (enc a n (pubk b))) (recv (enc n (pubk a))))) (label 14) (unrealized (0 0) (1 1))+ (maps ((0 1) ((b b) (n n) (s s) (a a)))) (origs (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -377,6 +386,7 @@ (label 15) (parent 14) (unrealized (0 0))+ (maps ((0 1) ((b b) (n n) (s s) (a a)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton completeness-test
tst/crushing.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/crushing.scm") (defprotocol crushing basic@@ -37,6 +37,7 @@ (recv (enc n n1 n2 n3 n (invk k))))) (label 0) (unrealized (0 1) (0 2) (0 3) (0 5))+ (maps ((0) ((k k) (n n) (n1 n1) (n2 n2) (n3 n3)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -59,6 +60,7 @@ (label 1) (parent 0) (unrealized (0 2) (0 3) (0 5))+ (maps ((0) ((k k) (n n) (n1 n1) (n2 n2) (n3 n3)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton crushing@@ -80,6 +82,7 @@ (label 2) (parent 1) (unrealized (0 3) (0 5))+ (maps ((0) ((k k) (n n) (n1 n1) (n2 n1) (n3 n3)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton crushing@@ -103,6 +106,7 @@ (label 3) (parent 1) (unrealized (0 3) (0 5))+ (maps ((0) ((k k) (n n) (n1 n1) (n2 n2) (n3 n3)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton crushing@@ -124,6 +128,7 @@ (label 4) (parent 2) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 n1) (n2 n1) (n3 n1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton crushing@@ -147,6 +152,7 @@ (label 5) (parent 2) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 n1) (n2 n1) (n3 n3)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton crushing@@ -170,6 +176,7 @@ (label 6) (parent 3) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 n1) (n2 n2) (n3 n1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton crushing@@ -193,6 +200,7 @@ (label 7) (parent 3) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 n1) (n2 n2) (n3 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton crushing@@ -219,6 +227,7 @@ (label 8) (parent 3) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 n1) (n2 n2) (n3 n3)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton crushing@@ -243,6 +252,7 @@ (label 9) (parent 4) (unrealized (2 0))+ (maps ((0) ((k k) (n n) (n1 n1) (n2 n1) (n3 n1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton crushing@@ -271,6 +281,7 @@ (parent 5) (unrealized (3 0)) (dead)+ (maps ((0) ((k k) (n n) (n1 n1) (n2 n1) (n3 n3)))) (comment "empty cohort")) (defskeleton crushing@@ -299,6 +310,7 @@ (parent 6) (unrealized (3 0)) (dead)+ (maps ((0) ((k k) (n n) (n1 n1) (n2 n2) (n3 n1)))) (comment "empty cohort")) (defskeleton crushing@@ -327,6 +339,7 @@ (parent 7) (unrealized (3 0)) (dead)+ (maps ((0) ((k k) (n n) (n1 n1) (n2 n2) (n3 n2)))) (comment "empty cohort")) (defskeleton crushing@@ -358,6 +371,7 @@ (parent 8) (unrealized (4 0)) (dead)+ (maps ((0) ((k k) (n n) (n1 n1) (n2 n2) (n3 n3)))) (comment "empty cohort")) (defskeleton crushing
tst/dass_simple.tst view
@@ -1,6 +1,6 @@ (herald "Distributed Authentication Security Service Protocol Variants") -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/dass_simple.scm") (defprotocol dass-simple basic@@ -37,6 +37,7 @@ (enc (enc k (pubk b)) (invk kp)))) (recv (enc "resp" tb k)))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (k k) (kp kp) (ta ta) (tb tb)))) (origs (k (0 0)) (kp (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -61,6 +62,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (k k) (kp kp) (ta ta) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dass-simple@@ -81,6 +83,7 @@ (parent 0) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (b b) (k k) (kp kp) (ta ta) (tb tb)))) (comment "empty cohort")) (defskeleton dass-simple@@ -104,6 +107,7 @@ (label 3) (parent 1) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (k k) (kp kp) (ta ta) (tb tb)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dass-simple@@ -129,6 +133,7 @@ (parent 1) (unrealized (2 0)) (dead)+ (maps ((0) ((a a) (b b) (k k) (kp kp) (ta ta) (tb tb)))) (comment "empty cohort")) (defskeleton dass-simple@@ -191,6 +196,7 @@ (enc (enc k (pubk b)) (invk kp)))) (recv (enc "resp" tb k)))) (label 6) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (k k) (kp kp) (ta ta) (tb tb)))) (origs (k (0 0)) (kp (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -215,6 +221,7 @@ (label 7) (parent 6) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (k k) (kp kp) (ta ta) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dass+@@ -235,6 +242,7 @@ (parent 6) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (b b) (k k) (kp kp) (ta ta) (tb tb)))) (comment "empty cohort")) (defskeleton dass+@@ -258,6 +266,7 @@ (label 9) (parent 7) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (k k) (kp kp) (ta ta) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dass+@@ -283,6 +292,7 @@ (parent 7) (unrealized (1 0) (2 0)) (dead)+ (maps ((0) ((a a) (b b) (k k) (kp kp) (ta ta) (tb tb)))) (comment "empty cohort")) (defskeleton dass+@@ -305,6 +315,7 @@ (label 11) (parent 9) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (k k) (kp kp) (ta ta) (tb tb)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dass+@@ -333,6 +344,7 @@ (label 12) (parent 9) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (k k) (kp kp) (ta ta) (tb tb)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dass+
+ tst/defact-atomic-open-closed.tst view
@@ -0,0 +1,1666 @@+(herald atomic-open-closed (bound 44))++(comment "CPSA 4.4.5")+(comment "All input read from tst/atomic-open-closed.scm")+(comment "Strand count bounded at 44")++(defprotocol atomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (recv (enc "may I pass" k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-open+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-open" "d" z d) (p "dev-open" "o" z o)+ (p "dev-open" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule gen-state-close+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-close" "d" z d) (p "dev-close" "o" z o)+ (p "dev-close" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-pass" "d" z d) (p "dev-pass" "o" z o)+ (p "dev-pass" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule intro-same-dev-up+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" "lk" z lk) (p "dev-up" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-open+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" "lk" z lk) (p "dev-open" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-close+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" "lk" z lk) (p "dev-close" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-pass+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" "lk" z lk) (p "dev-pass" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defrule single-thread-up-up+ (forall ((x y strd) (lk locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-up" y (idx 5))+ (p "dev-up" "lk" x lk) (p "dev-up" "lk" y lk))+ (or+ (= x y)+ (prec x (idx 4) y (idx 1))+ (prec y (idx 4) x (idx 1))))))+ (defrule single-thread-up-open+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-open" y (idx 4))+ (p "dev-up" "ls" x ls) (p "dev-open" "ls" y ls))+ (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-up-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-close" y (idx 4))+ (p "dev-up" "ls" x ls) (p "dev-close" "ls" y ls))+ (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-open-open+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-open" x (idx 4)) (p "dev-open" y (idx 4))+ (p "dev-open" "ls" x ls) (p "dev-open" "ls" y ls))+ (or+ (= x y)+ (prec x (idx 3) y (idx 1))+ (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-ls-open-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-open" x (idx 4)) (p "dev-close" y (idx 4))+ (p "dev-open" "ls" x ls) (p "dev-close" "ls" y ls))+ (or (prec x (idx 3) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-close-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-close" x (idx 4)) (p "dev-close" y (idx 4))+ (p "dev-close" "ls" x ls) (p "dev-close" "ls" y ls))+ (or+ (= x y)+ (prec x (idx 3) y (idx 1))+ (prec y (idx 3) x (idx 1))))))+ (defrule atomic-up-pass+ (forall ((x y strd) (lk locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-pass" y (idx 3))+ (p "dev-up" "lk" x lk) (p "dev-pass" "lk" y lk)+ (prec x (idx 2) y (idx 1)))+ (prec x (idx 4) y (idx 1)))))+ (defrule dev-up-completes+ (forall ((x strd))+ (implies (p "dev-up" x (idx 2)) (p "dev-up" x (idx 5)))))+ (defrule dev-open-completes+ (forall ((x strd))+ (implies (p "dev-open" x (idx 2)) (p "dev-open" x (idx 4)))))+ (defrule dev-close-completes+ (forall ((x strd))+ (implies (p "dev-close" x (idx 2)) (p "dev-close" x (idx 4)))))+ (defrule dev-pass-completes+ (forall ((x strd))+ (implies (p "dev-pass" x (idx 2)) (p "dev-pass" x (idx 3)))))+ (defrule dev-up-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-up" z (idx 5)) (prec x i1 z (idx 4)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-up-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-up" z (idx 5)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 4) x i1)))))+ (defrule dev-open-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-open" z (idx 4)) (prec x i1 z (idx 3)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-open-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-open" z (idx 4)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 3) x i1)))))+ (defrule dev-close-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-close" z (idx 4)) (prec x i1 z (idx 3)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-close-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-close" z (idx 4)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 3) x i1)))))+ (defrule dev-pass-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-pass" z (idx 3)) (prec x i1 z (idx 2)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-pass-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-pass" z (idx 3)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 2) x i1)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule causeRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z1 i1 z j))+ (or (= z z1) (prec z1 i1 z i)))))+ (defgenrule effectRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z i z1 i1))+ (or (= z z1) (prec z j z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule st-sg-dev-up-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-up-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5))+ (fact st-sg-str z (idx 3) (idx 4)))))+ (defgenrule st-sg-dev-open-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-open-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4))+ (fact st-sg-str z (idx 1) (idx 3)))))+ (defgenrule st-sg-dev-close-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-close-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4))+ (fact st-sg-str z (idx 1) (idx 3)))))+ (defgenrule st-sg-dev-pass-2+ (forall ((z strd))+ (implies (p "dev-pass" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2))))))++(defskeleton atomic-open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (uniq-orig k)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 0)+ (unrealized (0 1) (1 0))+ (preskeleton)+ (origs (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton atomic-open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (precedes ((0 0) (1 0)))+ (uniq-orig k)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 1)+ (parent 0)+ (unrealized (0 1) (1 0))+ (origs (k (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton atomic-open-closed+ (vars (old old1 mesg) (k skey) (d o name) (pt pt-0 pt-1 pt-2 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (precedes ((0 0) (2 0)) ((2 4) (1 0)))+ (uniq-orig k)+ (conf start-ch)+ (auth start-ch)+ + + (operation nonce-test (added-strand dev-up 3) k (1 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt old))+ (stor lk (cat pt-0 "st-k" d o k)) (load ls (cat pt-1 old1))+ (stor ls (cat pt-2 "st" d o))))+ (label 2)+ (parent 1)+ (unrealized (0 1) (1 0))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol atomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (recv (enc "may I pass" k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-open+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-open" "d" z d) (p "dev-open" "o" z o)+ (p "dev-open" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule gen-state-close+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-close" "d" z d) (p "dev-close" "o" z o)+ (p "dev-close" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-pass" "d" z d) (p "dev-pass" "o" z o)+ (p "dev-pass" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule intro-same-dev-up+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" "lk" z lk) (p "dev-up" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-open+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" "lk" z lk) (p "dev-open" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-close+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" "lk" z lk) (p "dev-close" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-pass+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" "lk" z lk) (p "dev-pass" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defrule single-thread-up-up+ (forall ((x y strd) (lk locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-up" y (idx 5))+ (p "dev-up" "lk" x lk) (p "dev-up" "lk" y lk))+ (or+ (= x y)+ (prec x (idx 4) y (idx 1))+ (prec y (idx 4) x (idx 1))))))+ (defrule single-thread-up-open+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-open" y (idx 4))+ (p "dev-up" "ls" x ls) (p "dev-open" "ls" y ls))+ (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-up-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-close" y (idx 4))+ (p "dev-up" "ls" x ls) (p "dev-close" "ls" y ls))+ (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-open-open+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-open" x (idx 4)) (p "dev-open" y (idx 4))+ (p "dev-open" "ls" x ls) (p "dev-open" "ls" y ls))+ (or+ (= x y)+ (prec x (idx 3) y (idx 1))+ (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-ls-open-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-open" x (idx 4)) (p "dev-close" y (idx 4))+ (p "dev-open" "ls" x ls) (p "dev-close" "ls" y ls))+ (or (prec x (idx 3) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-close-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-close" x (idx 4)) (p "dev-close" y (idx 4))+ (p "dev-close" "ls" x ls) (p "dev-close" "ls" y ls))+ (or+ (= x y)+ (prec x (idx 3) y (idx 1))+ (prec y (idx 3) x (idx 1))))))+ (defrule atomic-up-pass+ (forall ((x y strd) (lk locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-pass" y (idx 3))+ (p "dev-up" "lk" x lk) (p "dev-pass" "lk" y lk)+ (prec x (idx 2) y (idx 1)))+ (prec x (idx 4) y (idx 1)))))+ (defrule dev-up-completes+ (forall ((x strd))+ (implies (p "dev-up" x (idx 2)) (p "dev-up" x (idx 5)))))+ (defrule dev-open-completes+ (forall ((x strd))+ (implies (p "dev-open" x (idx 2)) (p "dev-open" x (idx 4)))))+ (defrule dev-close-completes+ (forall ((x strd))+ (implies (p "dev-close" x (idx 2)) (p "dev-close" x (idx 4)))))+ (defrule dev-pass-completes+ (forall ((x strd))+ (implies (p "dev-pass" x (idx 2)) (p "dev-pass" x (idx 3)))))+ (defrule dev-up-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-up" z (idx 5)) (prec x i1 z (idx 4)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-up-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-up" z (idx 5)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 4) x i1)))))+ (defrule dev-open-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-open" z (idx 4)) (prec x i1 z (idx 3)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-open-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-open" z (idx 4)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 3) x i1)))))+ (defrule dev-close-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-close" z (idx 4)) (prec x i1 z (idx 3)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-close-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-close" z (idx 4)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 3) x i1)))))+ (defrule dev-pass-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-pass" z (idx 3)) (prec x i1 z (idx 2)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-pass-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-pass" z (idx 3)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 2) x i1)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule causeRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z1 i1 z j))+ (or (= z z1) (prec z1 i1 z i)))))+ (defgenrule effectRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z i z1 i1))+ (or (= z z1) (prec z j z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule st-sg-dev-up-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-up-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5))+ (fact st-sg-str z (idx 3) (idx 4)))))+ (defgenrule st-sg-dev-open-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-open-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4))+ (fact st-sg-str z (idx 1) (idx 3)))))+ (defgenrule st-sg-dev-close-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-close-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4))+ (fact st-sg-str z (idx 1) (idx 3)))))+ (defgenrule st-sg-dev-pass-2+ (forall ((z strd))+ (implies (p "dev-pass" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2))))))++(defskeleton atomic-open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ (traces+ ((recv (enc "may I pass" k)) (load lk (cat pt "st-k" d o k))+ (load ls (cat pt-0 "st" d o o)) (send (enc "you may pass" n k))))+ (label 3)+ (realized)+ (origs (n (0 3)))+ (comment "Not closed under rules"))++(defskeleton atomic-open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ + + (traces+ ((recv (enc "may I pass" k)) (load lk (cat pt "st-k" d o k))+ (load ls (cat pt-0 "st" d o o)) (send (enc "you may pass" n k))))+ (label 4)+ (parent 3)+ (unrealized (0 1) (0 2))+ (origs (n (0 3)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton atomic-open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (precedes ((1 4) (0 1)))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (auth start-ch)+ + (leads-to ((1 2) (0 1)))+ + (operation channel-test (added-strand dev-up 3)+ (ch-msg lk (cat pt-1 "st-k" d o k)) (0 1))+ (strand-map 0)+ (traces+ ((recv (enc "may I pass" k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k)) (load ls (cat pt-2 old1))+ (stor ls (cat pt-3 "st" d o))))+ (label 5)+ (parent 4)+ (unrealized (0 2) (1 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton atomic-open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k) (d d) (o o) (start-ch start-ch))+ (precedes ((1 4) (0 1)) ((2 0) (1 0)))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((1 2) (0 1)))+ + (operation channel-test (added-strand owner-power-dev 1)+ (ch-msg start-ch (cat "power-up" d o k)) (1 0))+ (strand-map 0 1)+ (traces+ ((recv (enc "may I pass" k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k)) (load ls (cat pt-2 old1))+ (stor ls (cat pt-3 "st" d o)))+ ((send start-ch (cat "power-up" d o k))))+ (label 6)+ (parent 5)+ (unrealized (0 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton atomic-open-closed+ (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)+ (ls lk locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (precedes ((1 4) (3 1)) ((2 0) (1 0)) ((3 3) (0 1)))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k) (cat "st-k" d o k-0))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((1 2) (0 1)) ((3 3) (0 2)))+ + (operation channel-test (added-strand dev-open 4)+ (ch-msg ls (cat pt "st" d o o)) (0 2))+ (strand-map 0 1 2)+ (traces+ ((recv (enc "may I pass" k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k)) (load ls (cat pt-2 old1))+ (stor ls (cat pt-3 "st" d o)))+ ((send start-ch (cat "power-up" d o k)))+ ((recv (enc "open" d o n-0 k-0)) (load lk (cat pt-4 "st-k" d o k-0))+ (load ls (cat pt-5 "st" d any)) (stor ls (cat pt "st" d o o))))+ (label 7)+ (parent 6)+ (seen 8)+ (seen-ops+ (8+ (operation channel-test (added-strand dev-up 3)+ (ch-msg lk (cat pt-2 "st-k" d o k)) (3 1))+ (strand-map 0 1 2 3)))+ (unrealized (3 1))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton atomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (precedes ((1 4) (3 1)) ((2 0) (1 0)) ((3 3) (0 1)))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((1 2) (0 1)) ((1 2) (3 1)) ((3 3) (0 2)))+ + (operation channel-test (displaced 4 1 dev-up 3)+ (ch-msg lk (cat pt-5 "st-k" d o k-0)) (3 1))+ (strand-map 0 1 2 3)+ (traces+ ((recv (enc "may I pass" k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k)) (load ls (cat pt-2 old1))+ (stor ls (cat pt-3 "st" d o)))+ ((send start-ch (cat "power-up" d o k)))+ ((recv (enc "open" d o n-0 k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt-4 "st" d any)) (stor ls (cat pt "st" d o o))))+ (label 8)+ (parent 7)+ (realized)+ (shape)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls))))+ (origs (pt-1 (1 2)) (pt (3 3)) (pt-3 (1 4)) (n (0 3))))++(comment "Nothing left to do")++(defprotocol atomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (recv (enc "may I pass" k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-open+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-open" "d" z d) (p "dev-open" "o" z o)+ (p "dev-open" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule gen-state-close+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-close" "d" z d) (p "dev-close" "o" z o)+ (p "dev-close" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-pass" "d" z d) (p "dev-pass" "o" z o)+ (p "dev-pass" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule intro-same-dev-up+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" "lk" z lk) (p "dev-up" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-open+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" "lk" z lk) (p "dev-open" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-close+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" "lk" z lk) (p "dev-close" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-pass+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" "lk" z lk) (p "dev-pass" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defrule single-thread-up-up+ (forall ((x y strd) (lk locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-up" y (idx 5))+ (p "dev-up" "lk" x lk) (p "dev-up" "lk" y lk))+ (or+ (= x y)+ (prec x (idx 4) y (idx 1))+ (prec y (idx 4) x (idx 1))))))+ (defrule single-thread-up-open+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-open" y (idx 4))+ (p "dev-up" "ls" x ls) (p "dev-open" "ls" y ls))+ (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-up-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-close" y (idx 4))+ (p "dev-up" "ls" x ls) (p "dev-close" "ls" y ls))+ (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-open-open+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-open" x (idx 4)) (p "dev-open" y (idx 4))+ (p "dev-open" "ls" x ls) (p "dev-open" "ls" y ls))+ (or+ (= x y)+ (prec x (idx 3) y (idx 1))+ (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-ls-open-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-open" x (idx 4)) (p "dev-close" y (idx 4))+ (p "dev-open" "ls" x ls) (p "dev-close" "ls" y ls))+ (or (prec x (idx 3) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-close-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-close" x (idx 4)) (p "dev-close" y (idx 4))+ (p "dev-close" "ls" x ls) (p "dev-close" "ls" y ls))+ (or+ (= x y)+ (prec x (idx 3) y (idx 1))+ (prec y (idx 3) x (idx 1))))))+ (defrule atomic-up-pass+ (forall ((x y strd) (lk locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-pass" y (idx 3))+ (p "dev-up" "lk" x lk) (p "dev-pass" "lk" y lk)+ (prec x (idx 2) y (idx 1)))+ (prec x (idx 4) y (idx 1)))))+ (defrule dev-up-completes+ (forall ((x strd))+ (implies (p "dev-up" x (idx 2)) (p "dev-up" x (idx 5)))))+ (defrule dev-open-completes+ (forall ((x strd))+ (implies (p "dev-open" x (idx 2)) (p "dev-open" x (idx 4)))))+ (defrule dev-close-completes+ (forall ((x strd))+ (implies (p "dev-close" x (idx 2)) (p "dev-close" x (idx 4)))))+ (defrule dev-pass-completes+ (forall ((x strd))+ (implies (p "dev-pass" x (idx 2)) (p "dev-pass" x (idx 3)))))+ (defrule dev-up-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-up" z (idx 5)) (prec x i1 z (idx 4)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-up-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-up" z (idx 5)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 4) x i1)))))+ (defrule dev-open-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-open" z (idx 4)) (prec x i1 z (idx 3)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-open-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-open" z (idx 4)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 3) x i1)))))+ (defrule dev-close-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-close" z (idx 4)) (prec x i1 z (idx 3)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-close-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-close" z (idx 4)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 3) x i1)))))+ (defrule dev-pass-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-pass" z (idx 3)) (prec x i1 z (idx 2)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-pass-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-pass" z (idx 3)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 2) x i1)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule causeRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z1 i1 z j))+ (or (= z z1) (prec z1 i1 z i)))))+ (defgenrule effectRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z i z1 i1))+ (or (= z z1) (prec z j z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule st-sg-dev-up-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-up-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5))+ (fact st-sg-str z (idx 3) (idx 4)))))+ (defgenrule st-sg-dev-open-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-open-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4))+ (fact st-sg-str z (idx 1) (idx 3)))))+ (defgenrule st-sg-dev-close-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-close-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4))+ (fact st-sg-str z (idx 1) (idx 3)))))+ (defgenrule st-sg-dev-pass-2+ (forall ((z strd))+ (implies (p "dev-pass" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2))))))++(defskeleton atomic-open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (uniq-orig k n)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt "st-k" d-0 o-0 k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0))+ (send (enc "you may pass" n k))))+ (label 9)+ (unrealized (0 1) (1 0) (1 1))+ (preskeleton)+ (origs (n (1 3)) (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton atomic-open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (precedes ((0 0) (1 1)))+ (uniq-orig k n)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt "st-k" d-0 o-0 k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0))+ (send (enc "you may pass" n k))))+ (label 10)+ (parent 9)+ (unrealized (0 1) (1 0) (1 1))+ (origs (n (1 3)) (k (0 0)))+ (comment "Not closed under rules"))++(defskeleton atomic-open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (precedes ((0 0) (1 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d-0 o-0 o-0) (cat "st-k" d-0 o-0 k))+ (conf start-ch)+ + + (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt "st-k" d-0 o-0 k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0))+ (send (enc "you may pass" n k))))+ (label 11)+ (parent 10)+ (unrealized (0 1) (1 0) (1 1) (1 2))+ (origs (n (1 3)) (k (0 0)))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton atomic-open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (defstrand user-pass 1 (k k))+ (precedes ((0 0) (1 1)) ((2 0) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d-0 o-0 o-0) (cat "st-k" d-0 o-0 k))+ (conf start-ch)+ + + (operation encryption-test (added-strand user-pass 1)+ (enc "may I pass" k) (1 0))+ (strand-map 0 1)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt "st-k" d-0 o-0 k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0))+ (send (enc "you may pass" n k))) ((send (enc "may I pass" k))))+ (label 12)+ (parent 11)+ (unrealized (0 1) (1 1) (1 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton atomic-open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((2 1) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d-0 o-0 o-0) (cat "st-k" d-0 o-0 k))+ (conf start-ch)+ + + (operation encryption-test (added-listener k) (enc "may I pass" k)+ (1 0))+ (strand-map 0 1)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt "st-k" d-0 o-0 k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0))+ (send (enc "you may pass" n k))) ((recv k) (send k)))+ (label 13)+ (parent 11)+ (unrealized (0 1) (1 1) (1 2) (2 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton atomic-open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o d-0 o-0 name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch start-ch-0 chan)+ (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (defstrand user-pass 1 (k k))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d-0) (o o-0)+ (start-ch start-ch-0) (lk lk) (ls ls))+ (precedes ((0 0) (3 0)) ((2 0) (1 0)) ((3 4) (1 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d-0 o-0 o-0) (cat "st-k" d-0 o-0 k))+ (conf start-ch)+ (auth start-ch-0)+ + (leads-to ((3 2) (1 1)))+ + (operation channel-test (added-strand dev-up 3)+ (ch-msg lk (cat pt-1 "st-k" d-0 o-0 k)) (1 1))+ (strand-map 0 1 2)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt-1 "st-k" d-0 o-0 k))+ (load ls (cat pt "st" d-0 o-0 o-0))+ (send (enc "you may pass" n k))) ((send (enc "may I pass" k)))+ ((recv start-ch-0 (cat "power-up" d-0 o-0 k))+ (load lk (cat pt-0 old)) (stor lk (cat pt-1 "st-k" d-0 o-0 k))+ (load ls (cat pt-2 old1)) (stor ls (cat pt-3 "st" d-0 o-0))))+ (label 14)+ (parent 12)+ (unrealized (0 1) (1 2) (3 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton atomic-open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o d-0 o-0 name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan)+ (lk ls lk-0 ls-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d-0) (o o-0)+ (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (deflistener k)+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d-0) (o o-0)+ (start-ch start-ch) (lk lk-0) (ls ls-0))+ (precedes ((0 0) (3 0)) ((2 1) (1 0)) ((3 4) (2 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + + (operation nonce-test (added-strand dev-up 3) k (2 0)+ (ch-msg start-ch (cat "power-up" d-0 o-0 k)))+ (strand-map 0 1 2)+ (traces+ ((send start-ch (cat "power-up" d-0 o-0 k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt "st-k" d o k))+ (load ls (cat pt-0 "st" d o o)) (send (enc "you may pass" n k)))+ ((recv k) (send k))+ ((recv start-ch (cat "power-up" d-0 o-0 k))+ (load lk-0 (cat pt-1 old)) (stor lk-0 (cat pt-2 "st-k" d-0 o-0 k))+ (load ls-0 (cat pt-3 old1)) (stor ls-0 (cat pt-4 "st" d-0 o-0))))+ (label 15)+ (parent 13)+ (unrealized (0 1) (1 1) (1 2) (2 0))+ (dead)+ (comment "empty cohort"))++(defskeleton atomic-open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand user-pass 1 (k k))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (precedes ((0 0) (3 0)) ((2 0) (1 0)) ((3 4) (1 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((3 2) (1 1)))+ + (operation channel-test (displaced 4 0 owner-power-dev 1)+ (ch-msg start-ch-0 (cat "power-up" d-0 o-0 k)) (3 0))+ (strand-map 0 1 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((send (enc "may I pass" k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k)) (load ls (cat pt-2 old1))+ (stor ls (cat pt-3 "st" d o))))+ (label 16)+ (parent 14)+ (unrealized (0 1) (1 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton atomic-open-closed+ (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)+ (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand user-pass 1 (k k))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (precedes ((0 0) (3 0)) ((2 0) (1 0)) ((3 4) (4 1)) ((4 3) (1 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k) (cat "st-k" d o k-0))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((3 2) (1 1)) ((4 3) (1 2)))+ + (operation channel-test (added-strand dev-open 4)+ (ch-msg ls (cat pt "st" d o o)) (1 2))+ (strand-map 0 1 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((send (enc "may I pass" k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k)) (load ls (cat pt-2 old1))+ (stor ls (cat pt-3 "st" d o)))+ ((recv (enc "open" d o n-0 k-0)) (load lk (cat pt-4 "st-k" d o k-0))+ (load ls (cat pt-5 "st" d any)) (stor ls (cat pt "st" d o o))))+ (label 17)+ (parent 16)+ (seen 18)+ (seen-ops+ (18+ (operation channel-test (added-strand dev-up 3)+ (ch-msg lk (cat pt-2 "st-k" d o k)) (4 1))+ (strand-map 0 1 2 3 4)))+ (unrealized (0 1) (4 1))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton atomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand user-pass 1 (k k))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (precedes ((0 0) (3 0)) ((2 0) (1 0)) ((3 4) (4 1)) ((4 3) (1 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((3 2) (1 1)) ((3 2) (4 1)) ((4 3) (1 2)))+ + (operation channel-test (displaced 5 3 dev-up 3)+ (ch-msg lk (cat pt-5 "st-k" d o k-0)) (4 1))+ (strand-map 0 1 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((send (enc "may I pass" k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k)) (load ls (cat pt-2 old1))+ (stor ls (cat pt-3 "st" d o)))+ ((recv (enc "open" d o n-0 k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt-4 "st" d any)) (stor ls (cat pt "st" d o o))))+ (label 18)+ (parent 17)+ (unrealized (0 1) (4 0))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton atomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand user-pass 1 (k k))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (precedes ((0 0) (3 0)) ((2 0) (1 0)) ((3 4) (4 1)) ((4 3) (1 1))+ ((5 0) (4 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((3 2) (1 1)) ((3 2) (4 1)) ((4 3) (1 2)))+ + (operation encryption-test (added-strand owner-open 1)+ (enc "open" d o n-0 k) (4 0))+ (strand-map 0 1 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((send (enc "may I pass" k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k)) (load ls (cat pt-2 old1))+ (stor ls (cat pt-3 "st" d o)))+ ((recv (enc "open" d o n-0 k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt-4 "st" d any)) (stor ls (cat pt "st" d o o)))+ ((send (enc "open" d o n-0 k))))+ (label 19)+ (parent 18)+ (seen 21)+ (seen-ops+ (21+ (operation encryption-test (added-strand dev-up 6) (enc "up" k)+ (0 1)) (strand-map 0 1 2 5 3 4)))+ (unrealized (0 1))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton atomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand user-pass 1 (k k))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (deflistener k)+ (precedes ((0 0) (3 0)) ((0 0) (5 0)) ((2 0) (1 0)) ((3 4) (4 1))+ ((4 3) (1 1)) ((5 1) (4 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((3 2) (1 1)) ((3 2) (4 1)) ((4 3) (1 2)))+ + (operation encryption-test (added-listener k) (enc "open" d o n-0 k)+ (4 0))+ (strand-map 0 1 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((send (enc "may I pass" k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k)) (load ls (cat pt-2 old1))+ (stor ls (cat pt-3 "st" d o)))+ ((recv (enc "open" d o n-0 k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt-4 "st" d any)) (stor ls (cat pt "st" d o o)))+ ((recv k) (send k)))+ (label 20)+ (parent 18)+ (seen 23)+ (seen-ops+ (23+ (operation nonce-test (added-strand dev-up 3) k (5 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (0 1) (5 0))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton atomic-open-closed+ (vars (any old old1 mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (precedes ((0 0) (5 0)) ((2 0) (1 0)) ((3 3) (1 1)) ((4 0) (3 0))+ ((5 4) (3 1)) ((5 5) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((3 3) (1 2)) ((5 2) (1 1)) ((5 2) (3 1)))+ + (operation encryption-test (displaced 3 6 dev-up 6) (enc "up" k)+ (0 1))+ (strand-map 0 1 2 5 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt-2 "st-k" d o k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((send (enc "may I pass" k)))+ ((recv (enc "open" d o n-0 k)) (load lk (cat pt-2 "st-k" d o k))+ (load ls (cat pt-0 "st" d any)) (stor ls (cat pt "st" d o o)))+ ((send (enc "open" d o n-0 k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (stor lk (cat pt-2 "st-k" d o k)) (load ls (cat pt-3 old1))+ (stor ls (cat pt-4 "st" d o)) (send (enc "up" k))))+ (label 21)+ (parent 19)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls))))+ (origs (pt-2 (5 2)) (pt-4 (5 4)) (pt (3 3)) (n (1 3)) (k (0 0))))++(defskeleton atomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand user-pass 1 (k k))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (deflistener k)+ (precedes ((0 0) (3 0)) ((0 0) (6 0)) ((2 0) (1 0)) ((3 4) (4 1))+ ((4 3) (1 1)) ((5 0) (4 0)) ((6 1) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((3 2) (1 1)) ((3 2) (4 1)) ((4 3) (1 2)))+ + (operation encryption-test (added-listener k) (enc "up" k) (0 1))+ (strand-map 0 1 2 3 4 5)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((send (enc "may I pass" k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k)) (load ls (cat pt-2 old1))+ (stor ls (cat pt-3 "st" d o)))+ ((recv (enc "open" d o n-0 k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt-4 "st" d any)) (stor ls (cat pt "st" d o o)))+ ((send (enc "open" d o n-0 k))) ((recv k) (send k)))+ (label 22)+ (parent 19)+ (seen 24)+ (seen-ops+ (24+ (operation nonce-test (added-strand dev-up 3) k (6 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5 6)))+ (unrealized (6 0))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton atomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand user-pass 1 (k k))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (deflistener k)+ (precedes ((0 0) (3 0)) ((2 0) (1 0)) ((3 4) (5 0)) ((4 3) (1 1))+ ((5 1) (4 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((3 2) (1 1)) ((3 2) (4 1)) ((4 3) (1 2)))+ + (operation nonce-test (displaced 6 3 dev-up 3) k (5 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((send (enc "may I pass" k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k)) (load ls (cat pt-2 old1))+ (stor ls (cat pt-3 "st" d o)))+ ((recv (enc "open" d o n-0 k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt-4 "st" d any)) (stor ls (cat pt "st" d o o)))+ ((recv k) (send k)))+ (label 23)+ (parent 20)+ (unrealized (0 1) (5 0))+ (dead)+ (comment "empty cohort"))++(defskeleton atomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand user-pass 1 (k k))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (deflistener k)+ (precedes ((0 0) (3 0)) ((2 0) (1 0)) ((3 4) (4 1)) ((3 4) (6 0))+ ((4 3) (1 1)) ((5 0) (4 0)) ((6 1) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((3 2) (1 1)) ((3 2) (4 1)) ((4 3) (1 2)))+ + (operation nonce-test (displaced 7 3 dev-up 3) k (6 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5 6)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((send (enc "may I pass" k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k)) (load ls (cat pt-2 old1))+ (stor ls (cat pt-3 "st" d o)))+ ((recv (enc "open" d o n-0 k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt-4 "st" d any)) (stor ls (cat pt "st" d o o)))+ ((send (enc "open" d o n-0 k))) ((recv k) (send k)))+ (label 24)+ (parent 22)+ (unrealized (6 0))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")
+ tst/defact-atomic-open-closed_shapes.tst view
@@ -0,0 +1,968 @@+(comment "CPSA 4.4.5")+(comment "Extracted shapes")++(herald atomic-open-closed (bound 44))++(comment "CPSA 4.4.5")++(comment "All input read from tst/atomic-open-closed.scm")++(comment "Strand count bounded at 44")++(defprotocol atomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (recv (enc "may I pass" k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-open+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-open" "d" z d) (p "dev-open" "o" z o)+ (p "dev-open" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule gen-state-close+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-close" "d" z d) (p "dev-close" "o" z o)+ (p "dev-close" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-pass" "d" z d) (p "dev-pass" "o" z o)+ (p "dev-pass" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule intro-same-dev-up+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" "lk" z lk) (p "dev-up" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-open+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" "lk" z lk) (p "dev-open" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-close+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" "lk" z lk) (p "dev-close" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-pass+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" "lk" z lk) (p "dev-pass" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defrule single-thread-up-up+ (forall ((x y strd) (lk locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-up" y (idx 5))+ (p "dev-up" "lk" x lk) (p "dev-up" "lk" y lk))+ (or+ (= x y)+ (prec x (idx 4) y (idx 1))+ (prec y (idx 4) x (idx 1))))))+ (defrule single-thread-up-open+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-open" y (idx 4))+ (p "dev-up" "ls" x ls) (p "dev-open" "ls" y ls))+ (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-up-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-close" y (idx 4))+ (p "dev-up" "ls" x ls) (p "dev-close" "ls" y ls))+ (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-open-open+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-open" x (idx 4)) (p "dev-open" y (idx 4))+ (p "dev-open" "ls" x ls) (p "dev-open" "ls" y ls))+ (or+ (= x y)+ (prec x (idx 3) y (idx 1))+ (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-ls-open-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-open" x (idx 4)) (p "dev-close" y (idx 4))+ (p "dev-open" "ls" x ls) (p "dev-close" "ls" y ls))+ (or (prec x (idx 3) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-close-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-close" x (idx 4)) (p "dev-close" y (idx 4))+ (p "dev-close" "ls" x ls) (p "dev-close" "ls" y ls))+ (or+ (= x y)+ (prec x (idx 3) y (idx 1))+ (prec y (idx 3) x (idx 1))))))+ (defrule atomic-up-pass+ (forall ((x y strd) (lk locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-pass" y (idx 3))+ (p "dev-up" "lk" x lk) (p "dev-pass" "lk" y lk)+ (prec x (idx 2) y (idx 1)))+ (prec x (idx 4) y (idx 1)))))+ (defrule dev-up-completes+ (forall ((x strd))+ (implies (p "dev-up" x (idx 2)) (p "dev-up" x (idx 5)))))+ (defrule dev-open-completes+ (forall ((x strd))+ (implies (p "dev-open" x (idx 2)) (p "dev-open" x (idx 4)))))+ (defrule dev-close-completes+ (forall ((x strd))+ (implies (p "dev-close" x (idx 2)) (p "dev-close" x (idx 4)))))+ (defrule dev-pass-completes+ (forall ((x strd))+ (implies (p "dev-pass" x (idx 2)) (p "dev-pass" x (idx 3)))))+ (defrule dev-up-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-up" z (idx 5)) (prec x i1 z (idx 4)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-up-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-up" z (idx 5)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 4) x i1)))))+ (defrule dev-open-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-open" z (idx 4)) (prec x i1 z (idx 3)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-open-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-open" z (idx 4)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 3) x i1)))))+ (defrule dev-close-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-close" z (idx 4)) (prec x i1 z (idx 3)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-close-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-close" z (idx 4)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 3) x i1)))))+ (defrule dev-pass-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-pass" z (idx 3)) (prec x i1 z (idx 2)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-pass-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-pass" z (idx 3)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 2) x i1)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule cau-dev-open-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-open" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-close-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-close" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-pass-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-pass" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1)))))))++(defskeleton atomic-open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (uniq-orig k)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 0)+ (unrealized (0 1) (1 0))+ (preskeleton)+ (origs (k (0 0)))+ (comment "Not a skeleton"))++(comment "Nothing left to do")++(defprotocol atomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (recv (enc "may I pass" k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-open+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-open" "d" z d) (p "dev-open" "o" z o)+ (p "dev-open" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule gen-state-close+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-close" "d" z d) (p "dev-close" "o" z o)+ (p "dev-close" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-pass" "d" z d) (p "dev-pass" "o" z o)+ (p "dev-pass" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule intro-same-dev-up+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" "lk" z lk) (p "dev-up" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-open+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" "lk" z lk) (p "dev-open" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-close+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" "lk" z lk) (p "dev-close" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-pass+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" "lk" z lk) (p "dev-pass" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defrule single-thread-up-up+ (forall ((x y strd) (lk locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-up" y (idx 5))+ (p "dev-up" "lk" x lk) (p "dev-up" "lk" y lk))+ (or+ (= x y)+ (prec x (idx 4) y (idx 1))+ (prec y (idx 4) x (idx 1))))))+ (defrule single-thread-up-open+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-open" y (idx 4))+ (p "dev-up" "ls" x ls) (p "dev-open" "ls" y ls))+ (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-up-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-close" y (idx 4))+ (p "dev-up" "ls" x ls) (p "dev-close" "ls" y ls))+ (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-open-open+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-open" x (idx 4)) (p "dev-open" y (idx 4))+ (p "dev-open" "ls" x ls) (p "dev-open" "ls" y ls))+ (or+ (= x y)+ (prec x (idx 3) y (idx 1))+ (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-ls-open-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-open" x (idx 4)) (p "dev-close" y (idx 4))+ (p "dev-open" "ls" x ls) (p "dev-close" "ls" y ls))+ (or (prec x (idx 3) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-close-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-close" x (idx 4)) (p "dev-close" y (idx 4))+ (p "dev-close" "ls" x ls) (p "dev-close" "ls" y ls))+ (or+ (= x y)+ (prec x (idx 3) y (idx 1))+ (prec y (idx 3) x (idx 1))))))+ (defrule atomic-up-pass+ (forall ((x y strd) (lk locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-pass" y (idx 3))+ (p "dev-up" "lk" x lk) (p "dev-pass" "lk" y lk)+ (prec x (idx 2) y (idx 1)))+ (prec x (idx 4) y (idx 1)))))+ (defrule dev-up-completes+ (forall ((x strd))+ (implies (p "dev-up" x (idx 2)) (p "dev-up" x (idx 5)))))+ (defrule dev-open-completes+ (forall ((x strd))+ (implies (p "dev-open" x (idx 2)) (p "dev-open" x (idx 4)))))+ (defrule dev-close-completes+ (forall ((x strd))+ (implies (p "dev-close" x (idx 2)) (p "dev-close" x (idx 4)))))+ (defrule dev-pass-completes+ (forall ((x strd))+ (implies (p "dev-pass" x (idx 2)) (p "dev-pass" x (idx 3)))))+ (defrule dev-up-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-up" z (idx 5)) (prec x i1 z (idx 4)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-up-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-up" z (idx 5)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 4) x i1)))))+ (defrule dev-open-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-open" z (idx 4)) (prec x i1 z (idx 3)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-open-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-open" z (idx 4)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 3) x i1)))))+ (defrule dev-close-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-close" z (idx 4)) (prec x i1 z (idx 3)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-close-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-close" z (idx 4)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 3) x i1)))))+ (defrule dev-pass-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-pass" z (idx 3)) (prec x i1 z (idx 2)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-pass-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-pass" z (idx 3)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 2) x i1)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule cau-dev-open-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-open" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-close-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-close" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-pass-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-pass" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1)))))))++(defskeleton atomic-open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ (traces+ ((recv (enc "may I pass" k)) (load lk (cat pt "st-k" d o k))+ (load ls (cat pt-0 "st" d o o)) (send (enc "you may pass" n k))))+ (label 3)+ (realized)+ (origs (n (0 3)))+ (comment "Not closed under rules"))++(defskeleton atomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (precedes ((1 4) (3 1)) ((2 0) (1 0)) ((3 3) (0 1)))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((1 2) (0 1)) ((1 2) (3 1)) ((3 3) (0 2)))+ (operation channel-test (displaced 4 1 dev-up 3)+ (ch-msg lk (cat pt-5 "st-k" d o k-0)) (3 1))+ (strand-map 0 1 2 3)+ (traces+ ((recv (enc "may I pass" k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k)) (load ls (cat pt-2 old1))+ (stor ls (cat pt-3 "st" d o)))+ ((send start-ch (cat "power-up" d o k)))+ ((recv (enc "open" d o n-0 k)) (load lk (cat pt-1 "st-k" d o k))+ (load ls (cat pt-4 "st" d any)) (stor ls (cat pt "st" d o o))))+ (label 8)+ (parent 3)+ (realized)+ (shape)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls))))+ (origs (pt-1 (1 2)) (pt (3 3)) (pt-3 (1 4)) (n (0 3))))++(comment "Nothing left to do")++(defprotocol atomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (recv (enc "may I pass" k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-open+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-open" "d" z d) (p "dev-open" "o" z o)+ (p "dev-open" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule gen-state-close+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-close" "d" z d) (p "dev-close" "o" z o)+ (p "dev-close" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o k mesg))+ (implies+ (and (p "dev-pass" "d" z d) (p "dev-pass" "o" z o)+ (p "dev-pass" "k" z k))+ (gen-st (cat "st-k" d o k)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule intro-same-dev-up+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" "lk" z lk) (p "dev-up" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-open+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" "lk" z lk) (p "dev-open" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-close+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" "lk" z lk) (p "dev-close" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule intro-same-dev-pass+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" "lk" z lk) (p "dev-pass" "ls" z ls))+ (fact same-dev ls lk))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defrule single-thread-up-up+ (forall ((x y strd) (lk locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-up" y (idx 5))+ (p "dev-up" "lk" x lk) (p "dev-up" "lk" y lk))+ (or+ (= x y)+ (prec x (idx 4) y (idx 1))+ (prec y (idx 4) x (idx 1))))))+ (defrule single-thread-up-open+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-open" y (idx 4))+ (p "dev-up" "ls" x ls) (p "dev-open" "ls" y ls))+ (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-up-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-close" y (idx 4))+ (p "dev-up" "ls" x ls) (p "dev-close" "ls" y ls))+ (or (prec x (idx 4) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-open-open+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-open" x (idx 4)) (p "dev-open" y (idx 4))+ (p "dev-open" "ls" x ls) (p "dev-open" "ls" y ls))+ (or+ (= x y)+ (prec x (idx 3) y (idx 1))+ (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-ls-open-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-open" x (idx 4)) (p "dev-close" y (idx 4))+ (p "dev-open" "ls" x ls) (p "dev-close" "ls" y ls))+ (or (prec x (idx 3) y (idx 1)) (prec y (idx 3) x (idx 1))))))+ (defrule single-thread-close-close+ (forall ((x y strd) (ls locn))+ (implies+ (and (p "dev-close" x (idx 4)) (p "dev-close" y (idx 4))+ (p "dev-close" "ls" x ls) (p "dev-close" "ls" y ls))+ (or+ (= x y)+ (prec x (idx 3) y (idx 1))+ (prec y (idx 3) x (idx 1))))))+ (defrule atomic-up-pass+ (forall ((x y strd) (lk locn))+ (implies+ (and (p "dev-up" x (idx 5)) (p "dev-pass" y (idx 3))+ (p "dev-up" "lk" x lk) (p "dev-pass" "lk" y lk)+ (prec x (idx 2) y (idx 1)))+ (prec x (idx 4) y (idx 1)))))+ (defrule dev-up-completes+ (forall ((x strd))+ (implies (p "dev-up" x (idx 2)) (p "dev-up" x (idx 5)))))+ (defrule dev-open-completes+ (forall ((x strd))+ (implies (p "dev-open" x (idx 2)) (p "dev-open" x (idx 4)))))+ (defrule dev-close-completes+ (forall ((x strd))+ (implies (p "dev-close" x (idx 2)) (p "dev-close" x (idx 4)))))+ (defrule dev-pass-completes+ (forall ((x strd))+ (implies (p "dev-pass" x (idx 2)) (p "dev-pass" x (idx 3)))))+ (defrule dev-up-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-up" z (idx 5)) (prec x i1 z (idx 4)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-up-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-up" z (idx 5)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 4) x i1)))))+ (defrule dev-open-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-open" z (idx 4)) (prec x i1 z (idx 3)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-open-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-open" z (idx 4)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 3) x i1)))))+ (defrule dev-close-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-close" z (idx 4)) (prec x i1 z (idx 3)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-close-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-close" z (idx 4)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 3) x i1)))))+ (defrule dev-pass-atomic1+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-pass" z (idx 3)) (prec x i1 z (idx 2)))+ (or (= x z) (prec x i1 z (idx 1))))))+ (defrule dev-pass-atomic2+ (forall ((x z strd) (i1 indx))+ (implies+ (and (p "dev-pass" z (idx 3)) (prec z (idx 1) x i1))+ (or (= x z) (prec z (idx 2) x i1)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule cau-dev-open-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-open" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-close-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-close" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-pass-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-pass" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1)))))))++(defskeleton atomic-open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (uniq-orig k n)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt "st-k" d-0 o-0 k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0))+ (send (enc "you may pass" n k))))+ (label 9)+ (unrealized (0 1) (1 0) (1 1))+ (preskeleton)+ (origs (n (1 3)) (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton atomic-open-closed+ (vars (any old old1 mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (precedes ((0 0) (5 0)) ((2 0) (1 0)) ((3 3) (1 1)) ((4 0) (3 0))+ ((5 4) (3 1)) ((5 5) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((3 3) (1 2)) ((5 2) (1 1)) ((5 2) (3 1)))+ (operation encryption-test (displaced 3 6 dev-up 6) (enc "up" k)+ (0 1))+ (strand-map 0 1 2 5 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv (enc "may I pass" k)) (load lk (cat pt-2 "st-k" d o k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((send (enc "may I pass" k)))+ ((recv (enc "open" d o n-0 k)) (load lk (cat pt-2 "st-k" d o k))+ (load ls (cat pt-0 "st" d any)) (stor ls (cat pt "st" d o o)))+ ((send (enc "open" d o n-0 k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (stor lk (cat pt-2 "st-k" d o k)) (load ls (cat pt-3 old1))+ (stor ls (cat pt-4 "st" d o)) (send (enc "up" k))))+ (label 21)+ (parent 9)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls))))+ (origs (pt-2 (5 2)) (pt-4 (5 4)) (pt (3 3)) (n (1 3)) (k (0 0))))++(comment "Nothing left to do")
+ tst/defact-dhstatic-state.tst view
@@ -0,0 +1,2913 @@+(herald dhstatic-state (algebra diffie-hellman) (bound 16))++(comment "CPSA 4.4.5")+(comment "All input read from tst/dhstatic-state.scm")+(comment "Strand count bounded at 16")++(defprotocol dhstatic-state diffie-hellman+ (defrole cert+ (vars (subj ca name) (serial data) (galpha mesg))+ (trace (recv (sig (cert-req subj galpha ca) (privk "sig" subj)))+ (send (sig (cert subj galpha ca serial) (privk "sig" ca))))+ (uniq-orig serial)+ (comment "Certificate Authority"))+ (defrole get-cert+ (vars (self ca name) (serial data) (ra rndx) (static-key locn)+ (ignore mesg))+ (trace+ (send (sig (cert-req self (exp (gen) ra) ca) (privk "sig" self)))+ (recv (sig (cert self (exp (gen) ra) ca serial) (privk "sig" ca)))+ (load static-key ignore)+ (stor static-key (cat "privkey" self ra serial ca)))+ (uniq-gen ra)+ (comment "Get certified"))+ (defrole init+ (vars (a b ca name) (ra rndx) (serial-a serial-b data) (alpha expt)+ (n text) (static-key locn))+ (trace (load static-key (cat "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) alpha) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra alpha))))+ (recv n))+ (uniq-orig n)+ (gen-st (cat "privkey" a ra serial-a ca))+ + (comment "Initiator is A"))+ (defrole resp+ (vars (a b ca name) (rb rndx) (serial-b serial-a data) (alpha expt)+ (n text) (static-key locn))+ (trace (load static-key (cat "privkey" b rb serial-b ca))+ (recv+ (sig (cert a (exp (gen) alpha) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul rb alpha))))+ (send n))+ + (gen-st (cat "privkey" b rb serial-b ca))+ (comment "Responder is B"))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule fact-init-neq0+ (forall ((z strd) (b a name))+ (implies+ (and (p "init" z (idx 2)) (p "init" "a" z a) (p "init" "b" z b))+ (fact neq a b))))+ (defgenrule fact-resp-neq0+ (forall ((z strd) (b a name))+ (implies+ (and (p "resp" z (idx 2)) (p "resp" "a" z a) (p "resp" "b" z b))+ (fact neq a b))))+ (defgenrule trRl_get-cert-at-3+ (forall ((z strd))+ (implies (p "get-cert" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_get-cert-at-2+ (forall ((z strd))+ (implies (p "get-cert" z (idx 4)) (trans z (idx 2)))))+ (defgenrule gen-st-init-0+ (forall ((z strd) (a name) (ra rndx) (serial-a data) (ca name))+ (implies+ (and (p "init" z (idx 1)) (p "init" "ca" z ca)+ (p "init" "serial-a" z serial-a) (p "init" "ra" z ra)+ (p "init" "a" z a))+ (gen-st (cat "privkey" a ra serial-a ca)))))+ (defgenrule gen-st-resp-0+ (forall ((z strd) (b name) (rb rndx) (serial-b data) (ca name))+ (implies+ (and (p "resp" z (idx 1)) (p "resp" "ca" z ca)+ (p "resp" "serial-b" z serial-b) (p "resp" "rb" z rb)+ (p "resp" "b" z b))+ (gen-st (cat "privkey" b rb serial-b ca)))))+ (lang (cert-req (tupl 3)) (cert (tupl 4)) (sig sign)))++(defskeleton dhstatic-state+ (vars (serial-a serial-b data) (n text) (ca b a name) (pt pval)+ (static-key locn) (ra rndx) (alpha expt))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha alpha))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig n)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) alpha) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra alpha))))+ (recv n)))+ (label 0)+ (unrealized (0 1))+ (origs (n (0 2)))+ (comment "Not closed under rules"))++(defskeleton dhstatic-state+ (vars (serial-a serial-b data) (n text) (ca b a name) (pt pval)+ (static-key locn) (ra rndx) (alpha expt))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha alpha))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig n)+ (gen-st (cat "privkey" a ra serial-a ca))+ + + (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) alpha) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra alpha))))+ (recv n)))+ (label 1)+ (parent 0)+ (unrealized (0 0) (0 1))+ (origs (n (0 2)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-a serial-b data) (n text) (ca b a name)+ (pt pt-0 pval) (static-key locn) (alpha expt) (ra rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha alpha))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (precedes ((1 3) (0 0)))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig n)+ (uniq-gen ra)+ (gen-st (cat "privkey" a ra serial-a ca))+ + (leads-to ((1 3) (0 0)))+ + (operation channel-test (added-strand get-cert 4)+ (ch-msg static-key (cat pt "privkey" a ra serial-a ca)) (0 0))+ (strand-map 0)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) alpha) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul alpha ra))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca))))+ (label 2)+ (parent 1)+ (unrealized (0 1) (1 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-a serial-b data) (n text) (ca b a name)+ (pt pt-0 pval) (static-key locn) (alpha expt) (ra rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha alpha))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (precedes ((1 0) (2 0)) ((1 3) (0 0)) ((2 1) (1 1)))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig serial-a n)+ (uniq-gen ra)+ (gen-st (cat "privkey" a ra serial-a ca))+ + (leads-to ((1 3) (0 0)))+ + (operation encryption-test (added-strand cert 2)+ (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)) (1 1))+ (strand-map 0 1)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) alpha) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul alpha ra))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))))+ (label 3)+ (parent 2)+ (unrealized (0 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-a serial-b data) (n text) (ca b a name)+ (pt pt-0 pval) (static-key locn) (alpha expt) (ra rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha alpha))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) alpha)) (serial serial-b)+ (subj b) (ca ca))+ (precedes ((1 0) (2 0)) ((1 3) (0 0)) ((2 1) (1 1)) ((3 1) (0 1)))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra)+ (gen-st (cat "privkey" a ra serial-a ca))+ + (leads-to ((1 3) (0 0)))+ + (operation encryption-test (added-strand cert 2)+ (sig (cert b (exp (gen) alpha) ca serial-b) (privk "sig" ca)) (0 1))+ (strand-map 0 1 2)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) alpha) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul alpha ra))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req b (exp (gen) alpha) ca) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) alpha) ca serial-b) (privk "sig" ca)))))+ (label 4)+ (parent 3)+ (unrealized (3 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-a serial-b data) (n text) (ca b a name)+ (pt pt-0 pval) (static-key locn) (ra ra-0 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand get-cert 1 (self b) (ca ca) (ra ra-0))+ (precedes ((1 0) (2 0)) ((1 3) (0 0)) ((2 1) (1 1)) ((3 1) (0 1))+ ((4 0) (3 0)))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" a ra serial-a ca))+ + (leads-to ((1 3) (0 0)))+ + (operation encryption-test (added-strand get-cert 1)+ (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)) (3 0))+ (strand-map 0 1 2 3)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca))))+ ((send (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)))))+ (label 5)+ (parent 4)+ (unrealized (0 3))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-a serial-b data) (n text)+ (ca b a ca-0 name) (pt pt-0 pt-1 pval)+ (static-key static-key-0 locn) (ra ra-0 rb rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand get-cert 1 (self b) (ca ca) (ra ra-0))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca-0) (static-key static-key-0) (rb rb)+ (alpha (mul ra ra-0 (rec rb))))+ (precedes ((0 2) (5 2)) ((1 0) (2 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((2 1) (5 1)) ((3 1) (0 1)) ((3 1) (5 0)) ((4 0) (3 0))+ ((5 3) (0 3)))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" b rb serial-b ca-0)+ (cat "privkey" a ra serial-a ca))+ + (leads-to ((1 3) (0 0)))+ + (operation nonce-test (added-strand resp 4) n (0 3)+ (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (strand-map 0 1 2 3 4)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca))))+ ((send (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b))))+ ((load static-key-0 (cat pt-1 "privkey" b rb serial-b ca-0))+ (recv+ (sig (cert a (exp (gen) (mul ra ra-0 (rec rb))) ca-0 serial-a)+ (privk "sig" ca-0)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n)))+ (label 6)+ (parent 5)+ (unrealized (5 0) (5 1))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-a serial-b data) (n text) (ca b a name)+ (pt pt-0 pval) (static-key locn) (ra ra-0 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand get-cert 1 (self b) (ca ca) (ra ra-0))+ (deflistener (exp (gen) (mul ra ra-0)))+ (precedes ((1 0) (2 0)) ((1 0) (5 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((3 1) (0 1)) ((4 0) (3 0)) ((4 0) (5 0)) ((5 1) (0 3)))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" a ra serial-a ca))+ + (leads-to ((1 3) (0 0)))+ + (operation nonce-test (added-listener (exp (gen) (mul ra ra-0))) n+ (0 3) (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (strand-map 0 1 2 3 4)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca))))+ ((send (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b))))+ ((recv (exp (gen) (mul ra ra-0))) (send (exp (gen) (mul ra ra-0)))))+ (label 7)+ (parent 5)+ (unrealized (5 0))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-a serial-b data) (n text)+ (b a ca name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key-0) (rb ra-0) (alpha ra))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-b) (self b)+ (ca ca) (static-key static-key-0) (ra ra-0))+ (precedes ((0 2) (4 2)) ((1 0) (2 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((2 1) (4 1)) ((3 1) (0 1)) ((3 1) (5 1)) ((4 3) (0 3))+ ((5 0) (3 0)) ((5 3) (4 0)))+ (non-orig (privk "sig" b) (privk "sig" ca))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" b ra-0 serial-b ca)+ (cat "privkey" a ra serial-a ca))+ + (leads-to ((1 3) (0 0)) ((5 3) (4 0)))+ + (operation channel-test (displaced 4 6 get-cert 4)+ (ch-msg static-key-0 (cat pt-1 "privkey" b ra-1 serial-b ca)) (5 0))+ (strand-map 0 1 2 3 5 4)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca))))+ ((load static-key-0 (cat pt-1 "privkey" b ra-0 serial-b ca))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)))+ (recv+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" b ra-0 serial-b ca))))+ (label 8)+ (parent 6)+ (realized)+ (shape)+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-0) (n n)+ (static-key static-key))))+ (origs (pt-1 (5 3)) (serial-b (3 1)) (serial-a (2 1)) (pt (1 3))+ (n (0 2)))+ (ugens (ra-0 (5 0)) (ra (1 0))))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-a serial-b data) (n text)+ (ca b a ca-0 name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 ra-1 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand get-cert 1 (self b) (ca ca) (ra ra-0))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca-0) (static-key static-key-0) (rb ra-1)+ (alpha (mul ra ra-0 (rec ra-1))))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-b) (self b)+ (ca ca-0) (static-key static-key-0) (ra ra-1))+ (precedes ((0 2) (5 2)) ((1 0) (2 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((2 1) (5 1)) ((3 1) (0 1)) ((3 1) (6 1)) ((4 0) (3 0))+ ((5 3) (0 3)) ((6 3) (5 0)))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" b ra-1 serial-b ca-0)+ (cat "privkey" a ra serial-a ca))+ + (leads-to ((1 3) (0 0)) ((6 3) (5 0)))+ + (operation channel-test (added-strand get-cert 4)+ (ch-msg static-key-0 (cat pt-1 "privkey" b ra-1 serial-b ca-0))+ (5 0))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca))))+ ((send (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b))))+ ((load static-key-0 (cat pt-1 "privkey" b ra-1 serial-b ca-0))+ (recv+ (sig (cert a (exp (gen) (mul ra ra-0 (rec ra-1))) ca-0 serial-a)+ (privk "sig" ca-0)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra-1) ca-0) (privk "sig" b)))+ (recv+ (sig (cert b (exp (gen) ra-1) ca-0 serial-b)+ (privk "sig" ca-0))) (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" b ra-1 serial-b ca-0))))+ (label 9)+ (parent 6)+ (unrealized (5 1))+ (comment "3 in cohort - 3 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-a serial-b data) (n text) (ca b a name)+ (pt pt-0 pval) (static-key locn) (ra ra-0 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand get-cert 1 (self b) (ca ca) (ra ra-0))+ (deflistener (exp (gen) (mul ra ra-0)))+ (deflistener (cat (exp (gen) ra) ra-0))+ (precedes ((1 0) (2 0)) ((1 0) (6 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((3 1) (0 1)) ((4 0) (3 0)) ((4 0) (6 0)) ((5 1) (0 3))+ ((6 1) (5 0)))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" a ra serial-a ca))+ + (leads-to ((1 3) (0 0)))+ + (operation nonce-test (added-listener (cat (exp (gen) ra) ra-0))+ (exp (gen) (mul ra ra-0)) (5 0))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca))))+ ((send (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b))))+ ((recv (exp (gen) (mul ra ra-0))) (send (exp (gen) (mul ra ra-0))))+ ((recv (cat (exp (gen) ra) ra-0)) (send (cat (exp (gen) ra) ra-0))))+ (label 10)+ (parent 7)+ (unrealized (6 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-a serial-b data) (n text) (ca b a name)+ (pt pt-0 pval) (static-key locn) (ra ra-0 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand get-cert 1 (self b) (ca ca) (ra ra-0))+ (deflistener (exp (gen) (mul ra ra-0)))+ (deflistener (cat (exp (gen) ra-0) ra))+ (precedes ((1 0) (2 0)) ((1 0) (6 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((3 1) (0 1)) ((4 0) (3 0)) ((4 0) (6 0)) ((5 1) (0 3))+ ((6 1) (5 0)))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" a ra serial-a ca))+ + (leads-to ((1 3) (0 0)))+ + (operation nonce-test (added-listener (cat (exp (gen) ra-0) ra))+ (exp (gen) (mul ra ra-0)) (5 0))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca))))+ ((send (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b))))+ ((recv (exp (gen) (mul ra ra-0))) (send (exp (gen) (mul ra ra-0))))+ ((recv (cat (exp (gen) ra-0) ra)) (send (cat (exp (gen) ra-0) ra))))+ (label 11)+ (parent 7)+ (unrealized (6 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-a serial-b data) (n text)+ (ca b a ca-0 name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 ra-1 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand get-cert 1 (self b) (ca ca) (ra ra-0))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca-0) (static-key static-key-0) (rb ra-1)+ (alpha (mul ra ra-0 (rec ra-1))))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-b) (self b)+ (ca ca-0) (static-key static-key-0) (ra ra-1))+ (deflistener (cat (exp (gen) (mul ra ra-0)) ra-1))+ (precedes ((0 2) (5 2)) ((1 0) (2 0)) ((1 0) (7 0)) ((1 3) (0 0))+ ((2 1) (1 1)) ((2 1) (5 1)) ((3 1) (0 1)) ((3 1) (6 1))+ ((4 0) (3 0)) ((4 0) (7 0)) ((5 3) (0 3)) ((6 0) (7 0))+ ((6 3) (5 0)) ((7 1) (5 1)))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" b ra-1 serial-b ca-0)+ (cat "privkey" a ra serial-a ca))+ + (leads-to ((1 3) (0 0)) ((6 3) (5 0)))+ + (operation nonce-test+ (added-listener (cat (exp (gen) (mul ra ra-0)) ra-1))+ (exp (gen) (mul ra ra-0 (rec ra-1))) (5 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca))))+ ((send (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b))))+ ((load static-key-0 (cat pt-1 "privkey" b ra-1 serial-b ca-0))+ (recv+ (sig (cert a (exp (gen) (mul ra ra-0 (rec ra-1))) ca-0 serial-a)+ (privk "sig" ca-0)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra-1) ca-0) (privk "sig" b)))+ (recv+ (sig (cert b (exp (gen) ra-1) ca-0 serial-b)+ (privk "sig" ca-0))) (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" b ra-1 serial-b ca-0)))+ ((recv (cat (exp (gen) (mul ra ra-0)) ra-1))+ (send (cat (exp (gen) (mul ra ra-0)) ra-1))))+ (label 12)+ (parent 9)+ (unrealized (7 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-a serial-b data) (n text)+ (ca b a ca-0 name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 ra-1 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand get-cert 1 (self b) (ca ca) (ra ra-0))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca-0) (static-key static-key-0) (rb ra-1)+ (alpha (mul ra ra-0 (rec ra-1))))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-b) (self b)+ (ca ca-0) (static-key static-key-0) (ra ra-1))+ (deflistener (cat (exp (gen) (mul ra (rec ra-1))) ra-0))+ (precedes ((0 2) (5 2)) ((1 0) (2 0)) ((1 0) (7 0)) ((1 3) (0 0))+ ((2 1) (1 1)) ((2 1) (5 1)) ((3 1) (0 1)) ((3 1) (6 1))+ ((4 0) (3 0)) ((4 0) (7 0)) ((5 3) (0 3)) ((6 0) (7 0))+ ((6 3) (5 0)) ((7 1) (5 1)))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" b ra-1 serial-b ca-0)+ (cat "privkey" a ra serial-a ca))+ + (leads-to ((1 3) (0 0)) ((6 3) (5 0)))+ + (operation nonce-test+ (added-listener (cat (exp (gen) (mul ra (rec ra-1))) ra-0))+ (exp (gen) (mul ra ra-0 (rec ra-1))) (5 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca))))+ ((send (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b))))+ ((load static-key-0 (cat pt-1 "privkey" b ra-1 serial-b ca-0))+ (recv+ (sig (cert a (exp (gen) (mul ra ra-0 (rec ra-1))) ca-0 serial-a)+ (privk "sig" ca-0)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra-1) ca-0) (privk "sig" b)))+ (recv+ (sig (cert b (exp (gen) ra-1) ca-0 serial-b)+ (privk "sig" ca-0))) (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" b ra-1 serial-b ca-0)))+ ((recv (cat (exp (gen) (mul ra (rec ra-1))) ra-0))+ (send (cat (exp (gen) (mul ra (rec ra-1))) ra-0))))+ (label 13)+ (parent 9)+ (unrealized (7 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-a serial-b data) (n text)+ (ca b a ca-0 name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 ra-1 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand get-cert 1 (self b) (ca ca) (ra ra-0))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca-0) (static-key static-key-0) (rb ra-1)+ (alpha (mul ra ra-0 (rec ra-1))))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-b) (self b)+ (ca ca-0) (static-key static-key-0) (ra ra-1))+ (deflistener (cat (exp (gen) (mul ra-0 (rec ra-1))) ra))+ (precedes ((0 2) (5 2)) ((1 0) (2 0)) ((1 0) (7 0)) ((1 3) (0 0))+ ((2 1) (1 1)) ((2 1) (5 1)) ((3 1) (0 1)) ((3 1) (6 1))+ ((4 0) (3 0)) ((4 0) (7 0)) ((5 3) (0 3)) ((6 0) (7 0))+ ((6 3) (5 0)) ((7 1) (5 1)))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" b ra-1 serial-b ca-0)+ (cat "privkey" a ra serial-a ca))+ + (leads-to ((1 3) (0 0)) ((6 3) (5 0)))+ + (operation nonce-test+ (added-listener (cat (exp (gen) (mul ra-0 (rec ra-1))) ra))+ (exp (gen) (mul ra ra-0 (rec ra-1))) (5 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca))))+ ((send (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b))))+ ((load static-key-0 (cat pt-1 "privkey" b ra-1 serial-b ca-0))+ (recv+ (sig (cert a (exp (gen) (mul ra ra-0 (rec ra-1))) ca-0 serial-a)+ (privk "sig" ca-0)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra-1) ca-0) (privk "sig" b)))+ (recv+ (sig (cert b (exp (gen) ra-1) ca-0 serial-b)+ (privk "sig" ca-0))) (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" b ra-1 serial-b ca-0)))+ ((recv (cat (exp (gen) (mul ra-0 (rec ra-1))) ra))+ (send (cat (exp (gen) (mul ra-0 (rec ra-1))) ra))))+ (label 14)+ (parent 9)+ (unrealized (7 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-a serial-b serial data) (n text)+ (a self ca name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b self) (ca ca) (static-key static-key) (ra ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-b)+ (subj self) (ca ca))+ (deflistener (exp (gen) (mul ra ra-0)))+ (deflistener (cat (exp (gen) ra) ra-0))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial) (self self)+ (ca ca) (static-key static-key-0) (ra ra-0))+ (precedes ((1 0) (2 0)) ((1 0) (5 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((3 1) (0 1)) ((4 1) (0 3)) ((5 1) (4 0)) ((6 0) (3 0))+ ((6 3) (5 0)))+ (non-orig (privk "sig" self) (privk "sig" ca))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" a ra serial-a ca))+ + (leads-to ((1 3) (0 0)))+ + (operation nonce-test (displaced 4 7 get-cert 4) ra-0 (6 0))+ (strand-map 0 1 2 3 6 4 5)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (send (enc n a self serial-a serial-b (exp (gen) (mul ra ra-0))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (send+ (sig (cert self (exp (gen) ra-0) ca serial-b)+ (privk "sig" ca))))+ ((recv (exp (gen) (mul ra ra-0))) (send (exp (gen) (mul ra ra-0))))+ ((recv (cat (exp (gen) ra) ra-0)) (send (cat (exp (gen) ra) ra-0)))+ ((send (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial) (privk "sig" ca)))+ (load static-key-0 (cat pt-1 ignore-0))+ (stor static-key-0 (cat pt-2 "privkey" self ra-0 serial ca))))+ (label 15)+ (parent 10)+ (unrealized (5 0) (6 1))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-a serial-b data) (n text) (ca b a name)+ (pt pt-0 pval) (static-key locn) (ra ra-0 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra-0) (alpha ra))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra-0))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand get-cert 1 (self b) (ca ca) (ra ra))+ (deflistener (exp (gen) (mul ra ra-0)))+ (deflistener (cat (exp (gen) ra) ra-0))+ (precedes ((1 0) (2 0)) ((1 3) (0 0)) ((1 3) (6 0)) ((2 1) (1 1))+ ((3 1) (0 1)) ((4 0) (3 0)) ((4 0) (6 0)) ((5 1) (0 3))+ ((6 1) (5 0)))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" a ra-0 serial-a ca))+ + (leads-to ((1 3) (0 0)))+ + (operation nonce-test (displaced 7 1 get-cert 4) ra-0 (6 0))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((load static-key (cat pt "privkey" a ra-0 serial-a ca))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)))+ (recv+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra-0 serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b))))+ ((recv (exp (gen) (mul ra ra-0))) (send (exp (gen) (mul ra ra-0))))+ ((recv (cat (exp (gen) ra) ra-0)) (send (cat (exp (gen) ra) ra-0))))+ (label 16)+ (parent 11)+ (unrealized (6 0))+ (dead)+ (comment "empty cohort"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-a serial-b data) (n text)+ (ca b a ca-0 name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 ra-1 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand get-cert 1 (self b) (ca ca) (ra ra-0))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca-0) (static-key static-key-0) (rb ra-1)+ (alpha (mul ra ra-0 (rec ra-1))))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-b) (self b)+ (ca ca-0) (static-key static-key-0) (ra ra-1))+ (deflistener (cat (exp (gen) (mul ra ra-0)) ra-1))+ (precedes ((0 2) (5 2)) ((1 0) (2 0)) ((1 0) (7 0)) ((1 3) (0 0))+ ((2 1) (1 1)) ((2 1) (5 1)) ((3 1) (0 1)) ((3 1) (6 1))+ ((4 0) (3 0)) ((5 3) (0 3)) ((6 3) (5 0)) ((6 3) (7 0))+ ((7 1) (5 1)))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" b ra-1 serial-b ca-0)+ (cat "privkey" a ra serial-a ca))+ + (leads-to ((1 3) (0 0)) ((6 3) (5 0)))+ + (operation nonce-test (displaced 8 6 get-cert 4) ra-1 (7 0))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca))))+ ((send (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b))))+ ((load static-key-0 (cat pt-1 "privkey" b ra-1 serial-b ca-0))+ (recv+ (sig (cert a (exp (gen) (mul ra ra-0 (rec ra-1))) ca-0 serial-a)+ (privk "sig" ca-0)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra-1) ca-0) (privk "sig" b)))+ (recv+ (sig (cert b (exp (gen) ra-1) ca-0 serial-b)+ (privk "sig" ca-0))) (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" b ra-1 serial-b ca-0)))+ ((recv (cat (exp (gen) (mul ra ra-0)) ra-1))+ (send (cat (exp (gen) (mul ra ra-0)) ra-1))))+ (label 17)+ (parent 12)+ (unrealized (7 0))+ (dead)+ (comment "empty cohort"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 ignore-1 mesg) (serial-a serial-b serial data)+ (n text) (a ca self ca-0 name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval)+ (static-key static-key-0 static-key-1 locn) (ra ra-0 ra-1 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b self) (ca ca-0) (static-key static-key) (ra ra) (alpha ra-1))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca-0) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca-0))+ (defstrand cert 2 (galpha (exp (gen) ra-1)) (serial serial-b)+ (subj self) (ca ca-0))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b self) (ca ca) (static-key static-key-0) (rb ra-0)+ (alpha (mul ra (rec ra-0) ra-1)))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-b) (self self)+ (ca ca) (static-key static-key-0) (ra ra-0))+ (deflistener (cat (exp (gen) (mul ra (rec ra-0))) ra-1))+ (defstrand get-cert 4 (ignore ignore-1) (serial serial) (self self)+ (ca ca-0) (static-key static-key-1) (ra ra-1))+ (precedes ((0 2) (4 2)) ((1 0) (2 0)) ((1 0) (6 0)) ((1 3) (0 0))+ ((2 1) (1 1)) ((2 1) (4 1)) ((3 1) (0 1)) ((3 1) (5 1))+ ((4 3) (0 3)) ((5 0) (6 0)) ((5 3) (4 0)) ((6 1) (4 1))+ ((7 0) (3 0)) ((7 3) (6 0)))+ (non-orig (privk "sig" self) (privk "sig" ca-0))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" a ra serial-a ca-0)+ (cat "privkey" self ra-0 serial-b ca))+ + (leads-to ((1 3) (0 0)) ((5 3) (4 0)))+ + (operation nonce-test (displaced 4 8 get-cert 4) ra-1 (7 0))+ (strand-map 0 1 2 3 7 4 5 6)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca-0))+ (recv+ (sig (cert self (exp (gen) ra-1) ca-0 serial-b)+ (privk "sig" ca-0)))+ (send (enc n a self serial-a serial-b (exp (gen) (mul ra ra-1))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca-0) (privk "sig" a)))+ (recv+ (sig (cert a (exp (gen) ra) ca-0 serial-a) (privk "sig" ca-0)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca-0)))+ ((recv (sig (cert-req a (exp (gen) ra) ca-0) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra) ca-0 serial-a) (privk "sig" ca-0))))+ ((recv+ (sig (cert-req self (exp (gen) ra-1) ca-0) (privk "sig" self)))+ (send+ (sig (cert self (exp (gen) ra-1) ca-0 serial-b)+ (privk "sig" ca-0))))+ ((load static-key-0 (cat pt-1 "privkey" self ra-0 serial-b ca))+ (recv+ (sig (cert a (exp (gen) (mul ra (rec ra-0) ra-1)) ca serial-a)+ (privk "sig" ca)))+ (recv (enc n a self serial-a serial-b (exp (gen) (mul ra ra-1))))+ (send n))+ ((send (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" self ra-0 serial-b ca)))+ ((recv (cat (exp (gen) (mul ra (rec ra-0))) ra-1))+ (send (cat (exp (gen) (mul ra (rec ra-0))) ra-1)))+ ((send+ (sig (cert-req self (exp (gen) ra-1) ca-0) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-1) ca-0 serial)+ (privk "sig" ca-0))) (load static-key-1 (cat pt-3 ignore-1))+ (stor static-key-1 (cat pt-4 "privkey" self ra-1 serial ca-0))))+ (label 18)+ (parent 13)+ (unrealized (6 0) (7 1))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-a serial-b data) (n text)+ (ca b a ca-0 name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 ra-1 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra-1) (alpha ra))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra-1))+ (defstrand cert 2 (galpha (exp (gen) ra-1)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand get-cert 1 (self b) (ca ca) (ra ra))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca-0) (static-key static-key-0) (rb ra-0)+ (alpha (mul ra (rec ra-0) ra-1)))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-b) (self b)+ (ca ca-0) (static-key static-key-0) (ra ra-0))+ (deflistener (cat (exp (gen) (mul ra (rec ra-0))) ra-1))+ (precedes ((0 2) (5 2)) ((1 0) (2 0)) ((1 3) (0 0)) ((1 3) (7 0))+ ((2 1) (1 1)) ((3 1) (0 1)) ((3 1) (6 1)) ((4 0) (3 0))+ ((4 0) (7 0)) ((5 3) (0 3)) ((6 0) (7 0)) ((6 3) (5 0))+ ((7 1) (5 1)))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" b ra-0 serial-b ca-0)+ (cat "privkey" a ra-1 serial-a ca))+ + (leads-to ((1 3) (0 0)) ((6 3) (5 0)))+ + (operation nonce-test (displaced 8 1 get-cert 4) ra-1 (7 0))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces+ ((load static-key (cat pt "privkey" a ra-1 serial-a ca))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-1))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra-1) ca) (privk "sig" a)))+ (recv+ (sig (cert a (exp (gen) ra-1) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra-1 serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra-1) ca) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra-1) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b))))+ ((load static-key-0 (cat pt-1 "privkey" b ra-0 serial-b ca-0))+ (recv+ (sig (cert a (exp (gen) (mul ra (rec ra-0) ra-1)) ca-0 serial-a)+ (privk "sig" ca-0)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-1))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra-0) ca-0) (privk "sig" b)))+ (recv+ (sig (cert b (exp (gen) ra-0) ca-0 serial-b)+ (privk "sig" ca-0))) (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" b ra-0 serial-b ca-0)))+ ((recv (cat (exp (gen) (mul ra (rec ra-0))) ra-1))+ (send (cat (exp (gen) (mul ra (rec ra-0))) ra-1))))+ (label 19)+ (parent 14)+ (unrealized (7 0))+ (dead)+ (comment "empty cohort"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-a serial-b data) (n text)+ (a self ca name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b self) (ca ca) (static-key static-key) (ra ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-b)+ (subj self) (ca ca))+ (deflistener (exp (gen) (mul ra ra-0)))+ (deflistener (cat (exp (gen) ra) ra-0))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-b) (self self)+ (ca ca) (static-key static-key-0) (ra ra-0))+ (precedes ((1 0) (2 0)) ((1 0) (5 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((3 1) (0 1)) ((3 1) (6 1)) ((4 1) (0 3)) ((5 1) (4 0))+ ((6 0) (3 0)) ((6 3) (5 0)))+ (non-orig (privk "sig" self) (privk "sig" ca))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" a ra serial-a ca))+ + (leads-to ((1 3) (0 0)))+ + (operation encryption-test (displaced 7 3 cert 2)+ (sig (cert self (exp (gen) ra-0) ca serial) (privk "sig" ca)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (send (enc n a self serial-a serial-b (exp (gen) (mul ra ra-0))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (send+ (sig (cert self (exp (gen) ra-0) ca serial-b)+ (privk "sig" ca))))+ ((recv (exp (gen) (mul ra ra-0))) (send (exp (gen) (mul ra ra-0))))+ ((recv (cat (exp (gen) ra) ra-0)) (send (cat (exp (gen) ra) ra-0)))+ ((send (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (load static-key-0 (cat pt-1 ignore-0))+ (stor static-key-0 (cat pt-2 "privkey" self ra-0 serial-b ca))))+ (label 20)+ (parent 15)+ (unrealized (5 0))+ (dead)+ (comment "empty cohort"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-a serial-b serial data) (n text)+ (a self ca name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b self) (ca ca) (static-key static-key) (ra ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-b)+ (subj self) (ca ca))+ (deflistener (exp (gen) (mul ra ra-0)))+ (deflistener (cat (exp (gen) ra) ra-0))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial) (self self)+ (ca ca) (static-key static-key-0) (ra ra-0))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial)+ (subj self) (ca ca))+ (precedes ((1 0) (2 0)) ((1 0) (5 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((3 1) (0 1)) ((4 1) (0 3)) ((5 1) (4 0)) ((6 0) (3 0))+ ((6 0) (7 0)) ((6 3) (5 0)) ((7 1) (6 1)))+ (non-orig (privk "sig" self) (privk "sig" ca))+ (uniq-orig serial-a serial-b serial n)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" a ra serial-a ca))+ + (leads-to ((1 3) (0 0)))+ + (operation encryption-test (added-strand cert 2)+ (sig (cert self (exp (gen) ra-0) ca serial) (privk "sig" ca)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (send (enc n a self serial-a serial-b (exp (gen) (mul ra ra-0))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (send+ (sig (cert self (exp (gen) ra-0) ca serial-b)+ (privk "sig" ca))))+ ((recv (exp (gen) (mul ra ra-0))) (send (exp (gen) (mul ra ra-0))))+ ((recv (cat (exp (gen) ra) ra-0)) (send (cat (exp (gen) ra) ra-0)))+ ((send (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial) (privk "sig" ca)))+ (load static-key-0 (cat pt-1 ignore-0))+ (stor static-key-0 (cat pt-2 "privkey" self ra-0 serial ca)))+ ((recv (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (send+ (sig (cert self (exp (gen) ra-0) ca serial) (privk "sig" ca)))))+ (label 21)+ (parent 15)+ (unrealized (5 0))+ (dead)+ (comment "empty cohort"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 ignore-1 mesg) (serial-a serial-b data)+ (n text) (a ca self ca-0 name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval)+ (static-key static-key-0 static-key-1 locn) (ra ra-0 ra-1 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b self) (ca ca-0) (static-key static-key) (ra ra) (alpha ra-1))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca-0) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca-0))+ (defstrand cert 2 (galpha (exp (gen) ra-1)) (serial serial-b)+ (subj self) (ca ca-0))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b self) (ca ca) (static-key static-key-0) (rb ra-0)+ (alpha (mul ra (rec ra-0) ra-1)))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-b) (self self)+ (ca ca) (static-key static-key-0) (ra ra-0))+ (deflistener (cat (exp (gen) (mul ra (rec ra-0))) ra-1))+ (defstrand get-cert 4 (ignore ignore-1) (serial serial-b) (self self)+ (ca ca-0) (static-key static-key-1) (ra ra-1))+ (precedes ((0 2) (4 2)) ((1 0) (2 0)) ((1 0) (6 0)) ((1 3) (0 0))+ ((2 1) (1 1)) ((2 1) (4 1)) ((3 1) (0 1)) ((3 1) (5 1))+ ((3 1) (7 1)) ((4 3) (0 3)) ((5 0) (6 0)) ((5 3) (4 0))+ ((6 1) (4 1)) ((7 0) (3 0)) ((7 3) (6 0)))+ (non-orig (privk "sig" self) (privk "sig" ca-0))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" a ra serial-a ca-0)+ (cat "privkey" self ra-0 serial-b ca))+ + (leads-to ((1 3) (0 0)) ((5 3) (4 0)))+ + (operation encryption-test (displaced 8 3 cert 2)+ (sig (cert self (exp (gen) ra-1) ca-0 serial) (privk "sig" ca-0))+ (7 1))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca-0))+ (recv+ (sig (cert self (exp (gen) ra-1) ca-0 serial-b)+ (privk "sig" ca-0)))+ (send (enc n a self serial-a serial-b (exp (gen) (mul ra ra-1))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca-0) (privk "sig" a)))+ (recv+ (sig (cert a (exp (gen) ra) ca-0 serial-a) (privk "sig" ca-0)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca-0)))+ ((recv (sig (cert-req a (exp (gen) ra) ca-0) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra) ca-0 serial-a) (privk "sig" ca-0))))+ ((recv+ (sig (cert-req self (exp (gen) ra-1) ca-0) (privk "sig" self)))+ (send+ (sig (cert self (exp (gen) ra-1) ca-0 serial-b)+ (privk "sig" ca-0))))+ ((load static-key-0 (cat pt-1 "privkey" self ra-0 serial-b ca))+ (recv+ (sig (cert a (exp (gen) (mul ra (rec ra-0) ra-1)) ca serial-a)+ (privk "sig" ca)))+ (recv (enc n a self serial-a serial-b (exp (gen) (mul ra ra-1))))+ (send n))+ ((send (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" self ra-0 serial-b ca)))+ ((recv (cat (exp (gen) (mul ra (rec ra-0))) ra-1))+ (send (cat (exp (gen) (mul ra (rec ra-0))) ra-1)))+ ((send+ (sig (cert-req self (exp (gen) ra-1) ca-0) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-1) ca-0 serial-b)+ (privk "sig" ca-0))) (load static-key-1 (cat pt-3 ignore-1))+ (stor static-key-1 (cat pt-4 "privkey" self ra-1 serial-b ca-0))))+ (label 22)+ (parent 18)+ (unrealized (6 0))+ (dead)+ (comment "empty cohort"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 ignore-1 mesg) (serial-a serial-b serial data)+ (n text) (a ca self ca-0 name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval)+ (static-key static-key-0 static-key-1 locn) (ra ra-0 ra-1 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b self) (ca ca-0) (static-key static-key) (ra ra) (alpha ra-1))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca-0) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca-0))+ (defstrand cert 2 (galpha (exp (gen) ra-1)) (serial serial-b)+ (subj self) (ca ca-0))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b self) (ca ca) (static-key static-key-0) (rb ra-0)+ (alpha (mul ra (rec ra-0) ra-1)))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-b) (self self)+ (ca ca) (static-key static-key-0) (ra ra-0))+ (deflistener (cat (exp (gen) (mul ra (rec ra-0))) ra-1))+ (defstrand get-cert 4 (ignore ignore-1) (serial serial) (self self)+ (ca ca-0) (static-key static-key-1) (ra ra-1))+ (defstrand cert 2 (galpha (exp (gen) ra-1)) (serial serial)+ (subj self) (ca ca-0))+ (precedes ((0 2) (4 2)) ((1 0) (2 0)) ((1 0) (6 0)) ((1 3) (0 0))+ ((2 1) (1 1)) ((2 1) (4 1)) ((3 1) (0 1)) ((3 1) (5 1))+ ((4 3) (0 3)) ((5 0) (6 0)) ((5 3) (4 0)) ((6 1) (4 1))+ ((7 0) (3 0)) ((7 0) (8 0)) ((7 3) (6 0)) ((8 1) (7 1)))+ (non-orig (privk "sig" self) (privk "sig" ca-0))+ (uniq-orig serial-a serial-b serial n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" a ra serial-a ca-0)+ (cat "privkey" self ra-0 serial-b ca))+ + (leads-to ((1 3) (0 0)) ((5 3) (4 0)))+ + (operation encryption-test (added-strand cert 2)+ (sig (cert self (exp (gen) ra-1) ca-0 serial) (privk "sig" ca-0))+ (7 1))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca-0))+ (recv+ (sig (cert self (exp (gen) ra-1) ca-0 serial-b)+ (privk "sig" ca-0)))+ (send (enc n a self serial-a serial-b (exp (gen) (mul ra ra-1))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca-0) (privk "sig" a)))+ (recv+ (sig (cert a (exp (gen) ra) ca-0 serial-a) (privk "sig" ca-0)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca-0)))+ ((recv (sig (cert-req a (exp (gen) ra) ca-0) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra) ca-0 serial-a) (privk "sig" ca-0))))+ ((recv+ (sig (cert-req self (exp (gen) ra-1) ca-0) (privk "sig" self)))+ (send+ (sig (cert self (exp (gen) ra-1) ca-0 serial-b)+ (privk "sig" ca-0))))+ ((load static-key-0 (cat pt-1 "privkey" self ra-0 serial-b ca))+ (recv+ (sig (cert a (exp (gen) (mul ra (rec ra-0) ra-1)) ca serial-a)+ (privk "sig" ca)))+ (recv (enc n a self serial-a serial-b (exp (gen) (mul ra ra-1))))+ (send n))+ ((send (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" self ra-0 serial-b ca)))+ ((recv (cat (exp (gen) (mul ra (rec ra-0))) ra-1))+ (send (cat (exp (gen) (mul ra (rec ra-0))) ra-1)))+ ((send+ (sig (cert-req self (exp (gen) ra-1) ca-0) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-1) ca-0 serial)+ (privk "sig" ca-0))) (load static-key-1 (cat pt-3 ignore-1))+ (stor static-key-1 (cat pt-4 "privkey" self ra-1 serial ca-0)))+ ((recv+ (sig (cert-req self (exp (gen) ra-1) ca-0) (privk "sig" self)))+ (send+ (sig (cert self (exp (gen) ra-1) ca-0 serial)+ (privk "sig" ca-0)))))+ (label 23)+ (parent 18)+ (unrealized (6 0))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol dhstatic-state diffie-hellman+ (defrole cert+ (vars (subj ca name) (serial data) (galpha mesg))+ (trace (recv (sig (cert-req subj galpha ca) (privk "sig" subj)))+ (send (sig (cert subj galpha ca serial) (privk "sig" ca))))+ (uniq-orig serial)+ (comment "Certificate Authority"))+ (defrole get-cert+ (vars (self ca name) (serial data) (ra rndx) (static-key locn)+ (ignore mesg))+ (trace+ (send (sig (cert-req self (exp (gen) ra) ca) (privk "sig" self)))+ (recv (sig (cert self (exp (gen) ra) ca serial) (privk "sig" ca)))+ (load static-key ignore)+ (stor static-key (cat "privkey" self ra serial ca)))+ (uniq-gen ra)+ (comment "Get certified"))+ (defrole init+ (vars (a b ca name) (ra rndx) (serial-a serial-b data) (alpha expt)+ (n text) (static-key locn))+ (trace (load static-key (cat "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) alpha) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra alpha))))+ (recv n))+ (uniq-orig n)+ (gen-st (cat "privkey" a ra serial-a ca))+ + (comment "Initiator is A"))+ (defrole resp+ (vars (a b ca name) (rb rndx) (serial-b serial-a data) (alpha expt)+ (n text) (static-key locn))+ (trace (load static-key (cat "privkey" b rb serial-b ca))+ (recv+ (sig (cert a (exp (gen) alpha) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul rb alpha))))+ (send n))+ + (gen-st (cat "privkey" b rb serial-b ca))+ (comment "Responder is B"))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule fact-init-neq0+ (forall ((z strd) (b a name))+ (implies+ (and (p "init" z (idx 2)) (p "init" "a" z a) (p "init" "b" z b))+ (fact neq a b))))+ (defgenrule fact-resp-neq0+ (forall ((z strd) (b a name))+ (implies+ (and (p "resp" z (idx 2)) (p "resp" "a" z a) (p "resp" "b" z b))+ (fact neq a b))))+ (defgenrule trRl_get-cert-at-3+ (forall ((z strd))+ (implies (p "get-cert" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_get-cert-at-2+ (forall ((z strd))+ (implies (p "get-cert" z (idx 4)) (trans z (idx 2)))))+ (defgenrule gen-st-init-0+ (forall ((z strd) (a name) (ra rndx) (serial-a data) (ca name))+ (implies+ (and (p "init" z (idx 1)) (p "init" "ca" z ca)+ (p "init" "serial-a" z serial-a) (p "init" "ra" z ra)+ (p "init" "a" z a))+ (gen-st (cat "privkey" a ra serial-a ca)))))+ (defgenrule gen-st-resp-0+ (forall ((z strd) (b name) (rb rndx) (serial-b data) (ca name))+ (implies+ (and (p "resp" z (idx 1)) (p "resp" "ca" z ca)+ (p "resp" "serial-b" z serial-b) (p "resp" "rb" z rb)+ (p "resp" "b" z b))+ (gen-st (cat "privkey" b rb serial-b ca)))))+ (lang (cert-req (tupl 3)) (cert (tupl 4)) (sig sign)))++(defskeleton dhstatic-state+ (vars (serial-b serial-a data) (n text) (ca a b name) (pt pval)+ (static-key locn) (rb rndx) (alpha expt))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb rb) (alpha alpha))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (traces+ ((load static-key (cat pt "privkey" b rb serial-b ca))+ (recv+ (sig (cert a (exp (gen) alpha) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul rb alpha))))+ (send n)))+ (label 24)+ (unrealized (0 1))+ (origs)+ (comment "Not closed under rules"))++(defskeleton dhstatic-state+ (vars (serial-b serial-a data) (n text) (ca a b name) (pt pval)+ (static-key locn) (rb rndx) (alpha expt))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb rb) (alpha alpha))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (gen-st (cat "privkey" b rb serial-b ca))+ + + (traces+ ((load static-key (cat pt "privkey" b rb serial-b ca))+ (recv+ (sig (cert a (exp (gen) alpha) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul rb alpha))))+ (send n)))+ (label 25)+ (parent 24)+ (unrealized (0 0) (0 1))+ (origs)+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-b serial-a data) (n text) (ca a b name)+ (pt pt-0 pval) (static-key locn) (alpha expt) (ra rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb ra) (alpha alpha))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (precedes ((1 3) (0 0)))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (uniq-gen ra)+ (gen-st (cat "privkey" b ra serial-b ca))+ + (leads-to ((1 3) (0 0)))+ + (operation channel-test (added-strand get-cert 4)+ (ch-msg static-key (cat pt "privkey" b ra serial-b ca)) (0 0))+ (strand-map 0)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert a (exp (gen) alpha) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul alpha ra))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca))))+ (label 26)+ (parent 25)+ (unrealized (0 1) (1 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-b serial-a data) (n text) (ca a b name)+ (pt pt-0 pval) (static-key locn) (alpha expt) (ra rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb ra) (alpha alpha))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (precedes ((1 0) (2 0)) ((1 3) (0 0)) ((2 1) (1 1)))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (uniq-orig serial-b)+ (uniq-gen ra)+ (gen-st (cat "privkey" b ra serial-b ca))+ + (leads-to ((1 3) (0 0)))+ + (operation encryption-test (added-strand cert 2)+ (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)) (1 1))+ (strand-map 0 1)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert a (exp (gen) alpha) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul alpha ra))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))))+ (label 27)+ (parent 26)+ (unrealized (0 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-b serial-a data) (n text) (ca a b name)+ (pt pt-0 pval) (static-key locn) (alpha expt) (ra rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb ra) (alpha alpha))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) alpha)) (serial serial-a)+ (subj a) (ca ca))+ (precedes ((1 0) (2 0)) ((1 3) (0 0)) ((2 1) (1 1)) ((3 1) (0 1)))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (uniq-orig serial-b serial-a)+ (uniq-gen ra)+ (gen-st (cat "privkey" b ra serial-b ca))+ + (leads-to ((1 3) (0 0)))+ + (operation encryption-test (added-strand cert 2)+ (sig (cert a (exp (gen) alpha) ca serial-a) (privk "sig" ca)) (0 1))+ (strand-map 0 1 2)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert a (exp (gen) alpha) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul alpha ra))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req a (exp (gen) alpha) ca) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) alpha) ca serial-a) (privk "sig" ca)))))+ (label 28)+ (parent 27)+ (unrealized (3 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-b serial-a data) (n text) (ca a b name)+ (pt pt-0 pval) (static-key locn) (ra ra-0 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand get-cert 1 (self a) (ca ca) (ra ra-0))+ (precedes ((1 0) (2 0)) ((1 3) (0 0)) ((2 1) (1 1)) ((3 1) (0 1))+ ((4 0) (3 0)))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (uniq-orig serial-b serial-a)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" b ra serial-b ca))+ + (leads-to ((1 3) (0 0)))+ + (operation encryption-test (added-strand get-cert 1)+ (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)) (3 0))+ (strand-map 0 1 2 3)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca))))+ ((send (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)))))+ (label 29)+ (parent 28)+ (unrealized (0 2))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-b serial-a data) (n text)+ (ca a b ca-0 name) (pt pt-0 pt-1 pval)+ (static-key static-key-0 locn) (ra ra-0 ra-1 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand get-cert 1 (self a) (ca ca) (ra ra-0))+ (defstrand init 3 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca-0) (static-key static-key-0) (ra ra-1)+ (alpha (mul ra ra-0 (rec ra-1))))+ (precedes ((1 0) (2 0)) ((1 3) (0 0)) ((2 1) (1 1)) ((2 1) (5 1))+ ((3 1) (0 1)) ((3 1) (5 0)) ((4 0) (3 0)) ((5 2) (0 2)))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (uniq-orig serial-b serial-a n)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" a ra-1 serial-a ca-0)+ (cat "privkey" b ra serial-b ca))+ + (leads-to ((1 3) (0 0)))+ + (operation encryption-test (added-strand init 3)+ (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))) (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca))))+ ((send (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a))))+ ((load static-key-0 (cat pt-1 "privkey" a ra-1 serial-a ca-0))+ (recv+ (sig (cert b (exp (gen) (mul ra ra-0 (rec ra-1))) ca-0 serial-b)+ (privk "sig" ca-0)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))))+ (label 30)+ (parent 29)+ (unrealized (5 0) (5 1))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-b serial-a data) (n text) (ca a b name)+ (pt pt-0 pval) (static-key locn) (ra ra-0 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand get-cert 1 (self a) (ca ca) (ra ra-0))+ (deflistener (exp (gen) (mul ra ra-0)))+ (precedes ((1 0) (2 0)) ((1 0) (5 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((3 1) (0 1)) ((4 0) (3 0)) ((4 0) (5 0)) ((5 1) (0 2)))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (uniq-orig serial-b serial-a)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" b ra serial-b ca))+ + (leads-to ((1 3) (0 0)))+ + (operation encryption-test (added-listener (exp (gen) (mul ra ra-0)))+ (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))) (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca))))+ ((send (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a))))+ ((recv (exp (gen) (mul ra ra-0))) (send (exp (gen) (mul ra ra-0)))))+ (label 31)+ (parent 29)+ (unrealized (5 0))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-b serial-a data) (n text)+ (a b ca name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand init 3 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key-0) (ra ra-0) (alpha ra))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-a) (self a)+ (ca ca) (static-key static-key-0) (ra ra-0))+ (precedes ((1 0) (2 0)) ((1 3) (0 0)) ((2 1) (1 1)) ((2 1) (4 1))+ ((3 1) (0 1)) ((3 1) (5 1)) ((4 2) (0 2)) ((5 0) (3 0))+ ((5 3) (4 0)))+ (non-orig (privk "sig" a) (privk "sig" ca))+ (uniq-orig serial-b serial-a n)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" a ra-0 serial-a ca)+ (cat "privkey" b ra serial-b ca))+ + (leads-to ((1 3) (0 0)) ((5 3) (4 0)))+ + (operation channel-test (displaced 4 6 get-cert 4)+ (ch-msg static-key-0 (cat pt-1 "privkey" a ra-1 serial-a ca)) (5 0))+ (strand-map 0 1 2 3 5 4)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca))))+ ((load static-key-0 (cat pt-1 "privkey" a ra-0 serial-a ca))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0)))))+ ((send (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)))+ (recv+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" a ra-0 serial-a ca))))+ (label 32)+ (parent 30)+ (realized)+ (shape)+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-0) (n n)+ (static-key static-key))))+ (origs (pt-1 (5 3)) (n (4 2)) (serial-a (3 1)) (serial-b (2 1))+ (pt (1 3)))+ (ugens (ra-0 (5 0)) (ra (1 0))))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-b serial-a data) (n text)+ (ca a b ca-0 name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 ra-1 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand get-cert 1 (self a) (ca ca) (ra ra-0))+ (defstrand init 3 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca-0) (static-key static-key-0) (ra ra-1)+ (alpha (mul ra ra-0 (rec ra-1))))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-a) (self a)+ (ca ca-0) (static-key static-key-0) (ra ra-1))+ (precedes ((1 0) (2 0)) ((1 3) (0 0)) ((2 1) (1 1)) ((2 1) (5 1))+ ((3 1) (0 1)) ((3 1) (6 1)) ((4 0) (3 0)) ((5 2) (0 2))+ ((6 3) (5 0)))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (uniq-orig serial-b serial-a n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" a ra-1 serial-a ca-0)+ (cat "privkey" b ra serial-b ca))+ + (leads-to ((1 3) (0 0)) ((6 3) (5 0)))+ + (operation channel-test (added-strand get-cert 4)+ (ch-msg static-key-0 (cat pt-1 "privkey" a ra-1 serial-a ca-0))+ (5 0))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca))))+ ((send (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a))))+ ((load static-key-0 (cat pt-1 "privkey" a ra-1 serial-a ca-0))+ (recv+ (sig (cert b (exp (gen) (mul ra ra-0 (rec ra-1))) ca-0 serial-b)+ (privk "sig" ca-0)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0)))))+ ((send (sig (cert-req a (exp (gen) ra-1) ca-0) (privk "sig" a)))+ (recv+ (sig (cert a (exp (gen) ra-1) ca-0 serial-a)+ (privk "sig" ca-0))) (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" a ra-1 serial-a ca-0))))+ (label 33)+ (parent 30)+ (unrealized (5 1))+ (comment "3 in cohort - 3 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-b serial-a data) (n text) (ca a b name)+ (pt pt-0 pval) (static-key locn) (ra ra-0 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand get-cert 1 (self a) (ca ca) (ra ra-0))+ (deflistener (exp (gen) (mul ra ra-0)))+ (deflistener (cat (exp (gen) ra) ra-0))+ (precedes ((1 0) (2 0)) ((1 0) (6 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((3 1) (0 1)) ((4 0) (3 0)) ((4 0) (6 0)) ((5 1) (0 2))+ ((6 1) (5 0)))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (uniq-orig serial-b serial-a)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" b ra serial-b ca))+ + (leads-to ((1 3) (0 0)))+ + (operation nonce-test (added-listener (cat (exp (gen) ra) ra-0))+ (exp (gen) (mul ra ra-0)) (5 0))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca))))+ ((send (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a))))+ ((recv (exp (gen) (mul ra ra-0))) (send (exp (gen) (mul ra ra-0))))+ ((recv (cat (exp (gen) ra) ra-0)) (send (cat (exp (gen) ra) ra-0))))+ (label 34)+ (parent 31)+ (unrealized (6 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-b serial-a data) (n text) (ca a b name)+ (pt pt-0 pval) (static-key locn) (ra ra-0 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand get-cert 1 (self a) (ca ca) (ra ra-0))+ (deflistener (exp (gen) (mul ra ra-0)))+ (deflistener (cat (exp (gen) ra-0) ra))+ (precedes ((1 0) (2 0)) ((1 0) (6 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((3 1) (0 1)) ((4 0) (3 0)) ((4 0) (6 0)) ((5 1) (0 2))+ ((6 1) (5 0)))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (uniq-orig serial-b serial-a)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" b ra serial-b ca))+ + (leads-to ((1 3) (0 0)))+ + (operation nonce-test (added-listener (cat (exp (gen) ra-0) ra))+ (exp (gen) (mul ra ra-0)) (5 0))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca))))+ ((send (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a))))+ ((recv (exp (gen) (mul ra ra-0))) (send (exp (gen) (mul ra ra-0))))+ ((recv (cat (exp (gen) ra-0) ra)) (send (cat (exp (gen) ra-0) ra))))+ (label 35)+ (parent 31)+ (unrealized (6 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-b serial-a data) (n text)+ (ca a b ca-0 name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 ra-1 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand get-cert 1 (self a) (ca ca) (ra ra-0))+ (defstrand init 3 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca-0) (static-key static-key-0) (ra ra-1)+ (alpha (mul ra ra-0 (rec ra-1))))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-a) (self a)+ (ca ca-0) (static-key static-key-0) (ra ra-1))+ (deflistener (cat (exp (gen) (mul ra ra-0)) ra-1))+ (precedes ((1 0) (2 0)) ((1 0) (7 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((2 1) (5 1)) ((3 1) (0 1)) ((3 1) (6 1)) ((4 0) (3 0))+ ((4 0) (7 0)) ((5 2) (0 2)) ((6 0) (7 0)) ((6 3) (5 0))+ ((7 1) (5 1)))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (uniq-orig serial-b serial-a n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" a ra-1 serial-a ca-0)+ (cat "privkey" b ra serial-b ca))+ + (leads-to ((1 3) (0 0)) ((6 3) (5 0)))+ + (operation nonce-test+ (added-listener (cat (exp (gen) (mul ra ra-0)) ra-1))+ (exp (gen) (mul ra ra-0 (rec ra-1))) (5 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca))))+ ((send (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a))))+ ((load static-key-0 (cat pt-1 "privkey" a ra-1 serial-a ca-0))+ (recv+ (sig (cert b (exp (gen) (mul ra ra-0 (rec ra-1))) ca-0 serial-b)+ (privk "sig" ca-0)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0)))))+ ((send (sig (cert-req a (exp (gen) ra-1) ca-0) (privk "sig" a)))+ (recv+ (sig (cert a (exp (gen) ra-1) ca-0 serial-a)+ (privk "sig" ca-0))) (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" a ra-1 serial-a ca-0)))+ ((recv (cat (exp (gen) (mul ra ra-0)) ra-1))+ (send (cat (exp (gen) (mul ra ra-0)) ra-1))))+ (label 36)+ (parent 33)+ (unrealized (7 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-b serial-a data) (n text)+ (ca a b ca-0 name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 ra-1 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand get-cert 1 (self a) (ca ca) (ra ra-0))+ (defstrand init 3 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca-0) (static-key static-key-0) (ra ra-1)+ (alpha (mul ra ra-0 (rec ra-1))))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-a) (self a)+ (ca ca-0) (static-key static-key-0) (ra ra-1))+ (deflistener (cat (exp (gen) (mul ra (rec ra-1))) ra-0))+ (precedes ((1 0) (2 0)) ((1 0) (7 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((2 1) (5 1)) ((3 1) (0 1)) ((3 1) (6 1)) ((4 0) (3 0))+ ((4 0) (7 0)) ((5 2) (0 2)) ((6 0) (7 0)) ((6 3) (5 0))+ ((7 1) (5 1)))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (uniq-orig serial-b serial-a n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" a ra-1 serial-a ca-0)+ (cat "privkey" b ra serial-b ca))+ + (leads-to ((1 3) (0 0)) ((6 3) (5 0)))+ + (operation nonce-test+ (added-listener (cat (exp (gen) (mul ra (rec ra-1))) ra-0))+ (exp (gen) (mul ra ra-0 (rec ra-1))) (5 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca))))+ ((send (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a))))+ ((load static-key-0 (cat pt-1 "privkey" a ra-1 serial-a ca-0))+ (recv+ (sig (cert b (exp (gen) (mul ra ra-0 (rec ra-1))) ca-0 serial-b)+ (privk "sig" ca-0)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0)))))+ ((send (sig (cert-req a (exp (gen) ra-1) ca-0) (privk "sig" a)))+ (recv+ (sig (cert a (exp (gen) ra-1) ca-0 serial-a)+ (privk "sig" ca-0))) (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" a ra-1 serial-a ca-0)))+ ((recv (cat (exp (gen) (mul ra (rec ra-1))) ra-0))+ (send (cat (exp (gen) (mul ra (rec ra-1))) ra-0))))+ (label 37)+ (parent 33)+ (unrealized (7 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-b serial-a data) (n text)+ (ca a b ca-0 name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 ra-1 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand get-cert 1 (self a) (ca ca) (ra ra-0))+ (defstrand init 3 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca-0) (static-key static-key-0) (ra ra-1)+ (alpha (mul ra ra-0 (rec ra-1))))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-a) (self a)+ (ca ca-0) (static-key static-key-0) (ra ra-1))+ (deflistener (cat (exp (gen) (mul ra-0 (rec ra-1))) ra))+ (precedes ((1 0) (2 0)) ((1 0) (7 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((2 1) (5 1)) ((3 1) (0 1)) ((3 1) (6 1)) ((4 0) (3 0))+ ((4 0) (7 0)) ((5 2) (0 2)) ((6 0) (7 0)) ((6 3) (5 0))+ ((7 1) (5 1)))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (uniq-orig serial-b serial-a n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" a ra-1 serial-a ca-0)+ (cat "privkey" b ra serial-b ca))+ + (leads-to ((1 3) (0 0)) ((6 3) (5 0)))+ + (operation nonce-test+ (added-listener (cat (exp (gen) (mul ra-0 (rec ra-1))) ra))+ (exp (gen) (mul ra ra-0 (rec ra-1))) (5 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca))))+ ((send (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a))))+ ((load static-key-0 (cat pt-1 "privkey" a ra-1 serial-a ca-0))+ (recv+ (sig (cert b (exp (gen) (mul ra ra-0 (rec ra-1))) ca-0 serial-b)+ (privk "sig" ca-0)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0)))))+ ((send (sig (cert-req a (exp (gen) ra-1) ca-0) (privk "sig" a)))+ (recv+ (sig (cert a (exp (gen) ra-1) ca-0 serial-a)+ (privk "sig" ca-0))) (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" a ra-1 serial-a ca-0)))+ ((recv (cat (exp (gen) (mul ra-0 (rec ra-1))) ra))+ (send (cat (exp (gen) (mul ra-0 (rec ra-1))) ra))))+ (label 38)+ (parent 33)+ (unrealized (7 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-b serial-a serial data) (n text)+ (b self ca name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n)+ (a self) (b b) (ca ca) (static-key static-key) (rb ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-a)+ (subj self) (ca ca))+ (deflistener (exp (gen) (mul ra ra-0)))+ (deflistener (cat (exp (gen) ra) ra-0))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial) (self self)+ (ca ca) (static-key static-key-0) (ra ra-0))+ (precedes ((1 0) (2 0)) ((1 0) (5 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((3 1) (0 1)) ((4 1) (0 2)) ((5 1) (4 0)) ((6 0) (3 0))+ ((6 3) (5 0)))+ (non-orig (privk "sig" self) (privk "sig" ca))+ (uniq-orig serial-b serial-a)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" b ra serial-b ca))+ + (leads-to ((1 3) (0 0)))+ + (operation nonce-test (displaced 4 7 get-cert 4) ra-0 (6 0))+ (strand-map 0 1 2 3 6 4 5)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (recv (enc n self b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (send+ (sig (cert self (exp (gen) ra-0) ca serial-a)+ (privk "sig" ca))))+ ((recv (exp (gen) (mul ra ra-0))) (send (exp (gen) (mul ra ra-0))))+ ((recv (cat (exp (gen) ra) ra-0)) (send (cat (exp (gen) ra) ra-0)))+ ((send (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial) (privk "sig" ca)))+ (load static-key-0 (cat pt-1 ignore-0))+ (stor static-key-0 (cat pt-2 "privkey" self ra-0 serial ca))))+ (label 39)+ (parent 34)+ (unrealized (5 0) (6 1))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore mesg) (serial-b serial-a data) (n text) (ca a b name)+ (pt pt-0 pval) (static-key locn) (ra ra-0 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb ra-0) (alpha ra))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra-0))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand get-cert 1 (self a) (ca ca) (ra ra))+ (deflistener (exp (gen) (mul ra ra-0)))+ (deflistener (cat (exp (gen) ra) ra-0))+ (precedes ((1 0) (2 0)) ((1 3) (0 0)) ((1 3) (6 0)) ((2 1) (1 1))+ ((3 1) (0 1)) ((4 0) (3 0)) ((4 0) (6 0)) ((5 1) (0 2))+ ((6 1) (5 0)))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (uniq-orig serial-b serial-a)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" b ra-0 serial-b ca))+ + (leads-to ((1 3) (0 0)))+ + (operation nonce-test (displaced 7 1 get-cert 4) ra-0 (6 0))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((load static-key (cat pt "privkey" b ra-0 serial-b ca))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)))+ (recv+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra-0 serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a))))+ ((recv (exp (gen) (mul ra ra-0))) (send (exp (gen) (mul ra ra-0))))+ ((recv (cat (exp (gen) ra) ra-0)) (send (cat (exp (gen) ra) ra-0))))+ (label 40)+ (parent 35)+ (unrealized (6 0))+ (dead)+ (comment "empty cohort"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-b serial-a data) (n text)+ (ca a b ca-0 name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 ra-1 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand get-cert 1 (self a) (ca ca) (ra ra-0))+ (defstrand init 3 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca-0) (static-key static-key-0) (ra ra-1)+ (alpha (mul ra ra-0 (rec ra-1))))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-a) (self a)+ (ca ca-0) (static-key static-key-0) (ra ra-1))+ (deflistener (cat (exp (gen) (mul ra ra-0)) ra-1))+ (precedes ((1 0) (2 0)) ((1 0) (7 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((2 1) (5 1)) ((3 1) (0 1)) ((3 1) (6 1)) ((4 0) (3 0))+ ((5 2) (0 2)) ((6 3) (5 0)) ((6 3) (7 0)) ((7 1) (5 1)))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (uniq-orig serial-b serial-a n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" a ra-1 serial-a ca-0)+ (cat "privkey" b ra serial-b ca))+ + (leads-to ((1 3) (0 0)) ((6 3) (5 0)))+ + (operation nonce-test (displaced 8 6 get-cert 4) ra-1 (7 0))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca))))+ ((send (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a))))+ ((load static-key-0 (cat pt-1 "privkey" a ra-1 serial-a ca-0))+ (recv+ (sig (cert b (exp (gen) (mul ra ra-0 (rec ra-1))) ca-0 serial-b)+ (privk "sig" ca-0)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0)))))+ ((send (sig (cert-req a (exp (gen) ra-1) ca-0) (privk "sig" a)))+ (recv+ (sig (cert a (exp (gen) ra-1) ca-0 serial-a)+ (privk "sig" ca-0))) (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" a ra-1 serial-a ca-0)))+ ((recv (cat (exp (gen) (mul ra ra-0)) ra-1))+ (send (cat (exp (gen) (mul ra ra-0)) ra-1))))+ (label 41)+ (parent 36)+ (unrealized (7 0))+ (dead)+ (comment "empty cohort"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 ignore-1 mesg) (serial-b serial-a serial data)+ (n text) (b ca self ca-0 name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval)+ (static-key static-key-0 static-key-1 locn) (ra ra-0 ra-1 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n)+ (a self) (b b) (ca ca-0) (static-key static-key) (rb ra)+ (alpha ra-1))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca-0) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca-0))+ (defstrand cert 2 (galpha (exp (gen) ra-1)) (serial serial-a)+ (subj self) (ca ca-0))+ (defstrand init 3 (serial-a serial-a) (serial-b serial-b) (n n)+ (a self) (b b) (ca ca) (static-key static-key-0) (ra ra-0)+ (alpha (mul ra (rec ra-0) ra-1)))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-a) (self self)+ (ca ca) (static-key static-key-0) (ra ra-0))+ (deflistener (cat (exp (gen) (mul ra (rec ra-0))) ra-1))+ (defstrand get-cert 4 (ignore ignore-1) (serial serial) (self self)+ (ca ca-0) (static-key static-key-1) (ra ra-1))+ (precedes ((1 0) (2 0)) ((1 0) (6 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((2 1) (4 1)) ((3 1) (0 1)) ((3 1) (5 1)) ((4 2) (0 2))+ ((5 0) (6 0)) ((5 3) (4 0)) ((6 1) (4 1)) ((7 0) (3 0))+ ((7 3) (6 0)))+ (non-orig (privk "sig" self) (privk "sig" ca-0))+ (uniq-orig serial-b serial-a n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" b ra serial-b ca-0)+ (cat "privkey" self ra-0 serial-a ca))+ + (leads-to ((1 3) (0 0)) ((5 3) (4 0)))+ + (operation nonce-test (displaced 4 8 get-cert 4) ra-1 (7 0))+ (strand-map 0 1 2 3 7 4 5 6)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca-0))+ (recv+ (sig (cert self (exp (gen) ra-1) ca-0 serial-a)+ (privk "sig" ca-0)))+ (recv (enc n self b serial-a serial-b (exp (gen) (mul ra ra-1))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca-0) (privk "sig" b)))+ (recv+ (sig (cert b (exp (gen) ra) ca-0 serial-b) (privk "sig" ca-0)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca-0)))+ ((recv (sig (cert-req b (exp (gen) ra) ca-0) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra) ca-0 serial-b) (privk "sig" ca-0))))+ ((recv+ (sig (cert-req self (exp (gen) ra-1) ca-0) (privk "sig" self)))+ (send+ (sig (cert self (exp (gen) ra-1) ca-0 serial-a)+ (privk "sig" ca-0))))+ ((load static-key-0 (cat pt-1 "privkey" self ra-0 serial-a ca))+ (recv+ (sig (cert b (exp (gen) (mul ra (rec ra-0) ra-1)) ca serial-b)+ (privk "sig" ca)))+ (send (enc n self b serial-a serial-b (exp (gen) (mul ra ra-1)))))+ ((send (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" self ra-0 serial-a ca)))+ ((recv (cat (exp (gen) (mul ra (rec ra-0))) ra-1))+ (send (cat (exp (gen) (mul ra (rec ra-0))) ra-1)))+ ((send+ (sig (cert-req self (exp (gen) ra-1) ca-0) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-1) ca-0 serial)+ (privk "sig" ca-0))) (load static-key-1 (cat pt-3 ignore-1))+ (stor static-key-1 (cat pt-4 "privkey" self ra-1 serial ca-0))))+ (label 42)+ (parent 37)+ (unrealized (6 0) (7 1))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-b serial-a data) (n text)+ (ca a b ca-0 name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 ra-1 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb ra-1) (alpha ra))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra-1))+ (defstrand cert 2 (galpha (exp (gen) ra-1)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand get-cert 1 (self a) (ca ca) (ra ra))+ (defstrand init 3 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca-0) (static-key static-key-0) (ra ra-0)+ (alpha (mul ra (rec ra-0) ra-1)))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-a) (self a)+ (ca ca-0) (static-key static-key-0) (ra ra-0))+ (deflistener (cat (exp (gen) (mul ra (rec ra-0))) ra-1))+ (precedes ((1 0) (2 0)) ((1 3) (0 0)) ((1 3) (7 0)) ((2 1) (1 1))+ ((3 1) (0 1)) ((3 1) (6 1)) ((4 0) (3 0)) ((4 0) (7 0))+ ((5 2) (0 2)) ((6 0) (7 0)) ((6 3) (5 0)) ((7 1) (5 1)))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (uniq-orig serial-b serial-a n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" a ra-0 serial-a ca-0)+ (cat "privkey" b ra-1 serial-b ca))+ + (leads-to ((1 3) (0 0)) ((6 3) (5 0)))+ + (operation nonce-test (displaced 8 1 get-cert 4) ra-1 (7 0))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces+ ((load static-key (cat pt "privkey" b ra-1 serial-b ca))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-1))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra-1) ca) (privk "sig" b)))+ (recv+ (sig (cert b (exp (gen) ra-1) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra-1 serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra-1) ca) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra-1) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a))))+ ((load static-key-0 (cat pt-1 "privkey" a ra-0 serial-a ca-0))+ (recv+ (sig (cert b (exp (gen) (mul ra (rec ra-0) ra-1)) ca-0 serial-b)+ (privk "sig" ca-0)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-1)))))+ ((send (sig (cert-req a (exp (gen) ra-0) ca-0) (privk "sig" a)))+ (recv+ (sig (cert a (exp (gen) ra-0) ca-0 serial-a)+ (privk "sig" ca-0))) (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" a ra-0 serial-a ca-0)))+ ((recv (cat (exp (gen) (mul ra (rec ra-0))) ra-1))+ (send (cat (exp (gen) (mul ra (rec ra-0))) ra-1))))+ (label 43)+ (parent 38)+ (unrealized (7 0))+ (dead)+ (comment "empty cohort"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-b serial-a data) (n text)+ (b self ca name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n)+ (a self) (b b) (ca ca) (static-key static-key) (rb ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-a)+ (subj self) (ca ca))+ (deflistener (exp (gen) (mul ra ra-0)))+ (deflistener (cat (exp (gen) ra) ra-0))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-a) (self self)+ (ca ca) (static-key static-key-0) (ra ra-0))+ (precedes ((1 0) (2 0)) ((1 0) (5 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((3 1) (0 1)) ((3 1) (6 1)) ((4 1) (0 2)) ((5 1) (4 0))+ ((6 0) (3 0)) ((6 3) (5 0)))+ (non-orig (privk "sig" self) (privk "sig" ca))+ (uniq-orig serial-b serial-a)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" b ra serial-b ca))+ + (leads-to ((1 3) (0 0)))+ + (operation encryption-test (displaced 7 3 cert 2)+ (sig (cert self (exp (gen) ra-0) ca serial) (privk "sig" ca)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (recv (enc n self b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (send+ (sig (cert self (exp (gen) ra-0) ca serial-a)+ (privk "sig" ca))))+ ((recv (exp (gen) (mul ra ra-0))) (send (exp (gen) (mul ra ra-0))))+ ((recv (cat (exp (gen) ra) ra-0)) (send (cat (exp (gen) ra) ra-0)))+ ((send (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (load static-key-0 (cat pt-1 ignore-0))+ (stor static-key-0 (cat pt-2 "privkey" self ra-0 serial-a ca))))+ (label 44)+ (parent 39)+ (unrealized (5 0))+ (dead)+ (comment "empty cohort"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-b serial-a serial data) (n text)+ (b self ca name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n)+ (a self) (b b) (ca ca) (static-key static-key) (rb ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-a)+ (subj self) (ca ca))+ (deflistener (exp (gen) (mul ra ra-0)))+ (deflistener (cat (exp (gen) ra) ra-0))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial) (self self)+ (ca ca) (static-key static-key-0) (ra ra-0))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial)+ (subj self) (ca ca))+ (precedes ((1 0) (2 0)) ((1 0) (5 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((3 1) (0 1)) ((4 1) (0 2)) ((5 1) (4 0)) ((6 0) (3 0))+ ((6 0) (7 0)) ((6 3) (5 0)) ((7 1) (6 1)))+ (non-orig (privk "sig" self) (privk "sig" ca))+ (uniq-orig serial-b serial-a serial)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" b ra serial-b ca))+ + (leads-to ((1 3) (0 0)))+ + (operation encryption-test (added-strand cert 2)+ (sig (cert self (exp (gen) ra-0) ca serial) (privk "sig" ca)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (recv (enc n self b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (send+ (sig (cert self (exp (gen) ra-0) ca serial-a)+ (privk "sig" ca))))+ ((recv (exp (gen) (mul ra ra-0))) (send (exp (gen) (mul ra ra-0))))+ ((recv (cat (exp (gen) ra) ra-0)) (send (cat (exp (gen) ra) ra-0)))+ ((send (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial) (privk "sig" ca)))+ (load static-key-0 (cat pt-1 ignore-0))+ (stor static-key-0 (cat pt-2 "privkey" self ra-0 serial ca)))+ ((recv (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (send+ (sig (cert self (exp (gen) ra-0) ca serial) (privk "sig" ca)))))+ (label 45)+ (parent 39)+ (unrealized (5 0))+ (dead)+ (comment "empty cohort"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 ignore-1 mesg) (serial-b serial-a data)+ (n text) (b ca self ca-0 name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval)+ (static-key static-key-0 static-key-1 locn) (ra ra-0 ra-1 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n)+ (a self) (b b) (ca ca-0) (static-key static-key) (rb ra)+ (alpha ra-1))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca-0) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca-0))+ (defstrand cert 2 (galpha (exp (gen) ra-1)) (serial serial-a)+ (subj self) (ca ca-0))+ (defstrand init 3 (serial-a serial-a) (serial-b serial-b) (n n)+ (a self) (b b) (ca ca) (static-key static-key-0) (ra ra-0)+ (alpha (mul ra (rec ra-0) ra-1)))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-a) (self self)+ (ca ca) (static-key static-key-0) (ra ra-0))+ (deflistener (cat (exp (gen) (mul ra (rec ra-0))) ra-1))+ (defstrand get-cert 4 (ignore ignore-1) (serial serial-a) (self self)+ (ca ca-0) (static-key static-key-1) (ra ra-1))+ (precedes ((1 0) (2 0)) ((1 0) (6 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((2 1) (4 1)) ((3 1) (0 1)) ((3 1) (5 1)) ((3 1) (7 1))+ ((4 2) (0 2)) ((5 0) (6 0)) ((5 3) (4 0)) ((6 1) (4 1))+ ((7 0) (3 0)) ((7 3) (6 0)))+ (non-orig (privk "sig" self) (privk "sig" ca-0))+ (uniq-orig serial-b serial-a n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" b ra serial-b ca-0)+ (cat "privkey" self ra-0 serial-a ca))+ + (leads-to ((1 3) (0 0)) ((5 3) (4 0)))+ + (operation encryption-test (displaced 8 3 cert 2)+ (sig (cert self (exp (gen) ra-1) ca-0 serial) (privk "sig" ca-0))+ (7 1))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca-0))+ (recv+ (sig (cert self (exp (gen) ra-1) ca-0 serial-a)+ (privk "sig" ca-0)))+ (recv (enc n self b serial-a serial-b (exp (gen) (mul ra ra-1))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca-0) (privk "sig" b)))+ (recv+ (sig (cert b (exp (gen) ra) ca-0 serial-b) (privk "sig" ca-0)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca-0)))+ ((recv (sig (cert-req b (exp (gen) ra) ca-0) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra) ca-0 serial-b) (privk "sig" ca-0))))+ ((recv+ (sig (cert-req self (exp (gen) ra-1) ca-0) (privk "sig" self)))+ (send+ (sig (cert self (exp (gen) ra-1) ca-0 serial-a)+ (privk "sig" ca-0))))+ ((load static-key-0 (cat pt-1 "privkey" self ra-0 serial-a ca))+ (recv+ (sig (cert b (exp (gen) (mul ra (rec ra-0) ra-1)) ca serial-b)+ (privk "sig" ca)))+ (send (enc n self b serial-a serial-b (exp (gen) (mul ra ra-1)))))+ ((send (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" self ra-0 serial-a ca)))+ ((recv (cat (exp (gen) (mul ra (rec ra-0))) ra-1))+ (send (cat (exp (gen) (mul ra (rec ra-0))) ra-1)))+ ((send+ (sig (cert-req self (exp (gen) ra-1) ca-0) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-1) ca-0 serial-a)+ (privk "sig" ca-0))) (load static-key-1 (cat pt-3 ignore-1))+ (stor static-key-1 (cat pt-4 "privkey" self ra-1 serial-a ca-0))))+ (label 46)+ (parent 42)+ (unrealized (6 0))+ (dead)+ (comment "empty cohort"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 ignore-1 mesg) (serial-b serial-a serial data)+ (n text) (b ca self ca-0 name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval)+ (static-key static-key-0 static-key-1 locn) (ra ra-0 ra-1 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n)+ (a self) (b b) (ca ca-0) (static-key static-key) (rb ra)+ (alpha ra-1))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca-0) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca-0))+ (defstrand cert 2 (galpha (exp (gen) ra-1)) (serial serial-a)+ (subj self) (ca ca-0))+ (defstrand init 3 (serial-a serial-a) (serial-b serial-b) (n n)+ (a self) (b b) (ca ca) (static-key static-key-0) (ra ra-0)+ (alpha (mul ra (rec ra-0) ra-1)))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-a) (self self)+ (ca ca) (static-key static-key-0) (ra ra-0))+ (deflistener (cat (exp (gen) (mul ra (rec ra-0))) ra-1))+ (defstrand get-cert 4 (ignore ignore-1) (serial serial) (self self)+ (ca ca-0) (static-key static-key-1) (ra ra-1))+ (defstrand cert 2 (galpha (exp (gen) ra-1)) (serial serial)+ (subj self) (ca ca-0))+ (precedes ((1 0) (2 0)) ((1 0) (6 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((2 1) (4 1)) ((3 1) (0 1)) ((3 1) (5 1)) ((4 2) (0 2))+ ((5 0) (6 0)) ((5 3) (4 0)) ((6 1) (4 1)) ((7 0) (3 0))+ ((7 0) (8 0)) ((7 3) (6 0)) ((8 1) (7 1)))+ (non-orig (privk "sig" self) (privk "sig" ca-0))+ (uniq-orig serial-b serial-a serial n)+ (uniq-gen ra ra-0 ra-1)+ (gen-st (cat "privkey" b ra serial-b ca-0)+ (cat "privkey" self ra-0 serial-a ca))+ + (leads-to ((1 3) (0 0)) ((5 3) (4 0)))+ + (operation encryption-test (added-strand cert 2)+ (sig (cert self (exp (gen) ra-1) ca-0 serial) (privk "sig" ca-0))+ (7 1))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca-0))+ (recv+ (sig (cert self (exp (gen) ra-1) ca-0 serial-a)+ (privk "sig" ca-0)))+ (recv (enc n self b serial-a serial-b (exp (gen) (mul ra ra-1))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca-0) (privk "sig" b)))+ (recv+ (sig (cert b (exp (gen) ra) ca-0 serial-b) (privk "sig" ca-0)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca-0)))+ ((recv (sig (cert-req b (exp (gen) ra) ca-0) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra) ca-0 serial-b) (privk "sig" ca-0))))+ ((recv+ (sig (cert-req self (exp (gen) ra-1) ca-0) (privk "sig" self)))+ (send+ (sig (cert self (exp (gen) ra-1) ca-0 serial-a)+ (privk "sig" ca-0))))+ ((load static-key-0 (cat pt-1 "privkey" self ra-0 serial-a ca))+ (recv+ (sig (cert b (exp (gen) (mul ra (rec ra-0) ra-1)) ca serial-b)+ (privk "sig" ca)))+ (send (enc n self b serial-a serial-b (exp (gen) (mul ra ra-1)))))+ ((send (sig (cert-req self (exp (gen) ra-0) ca) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" self ra-0 serial-a ca)))+ ((recv (cat (exp (gen) (mul ra (rec ra-0))) ra-1))+ (send (cat (exp (gen) (mul ra (rec ra-0))) ra-1)))+ ((send+ (sig (cert-req self (exp (gen) ra-1) ca-0) (privk "sig" self)))+ (recv+ (sig (cert self (exp (gen) ra-1) ca-0 serial)+ (privk "sig" ca-0))) (load static-key-1 (cat pt-3 ignore-1))+ (stor static-key-1 (cat pt-4 "privkey" self ra-1 serial ca-0)))+ ((recv+ (sig (cert-req self (exp (gen) ra-1) ca-0) (privk "sig" self)))+ (send+ (sig (cert self (exp (gen) ra-1) ca-0 serial)+ (privk "sig" ca-0)))))+ (label 47)+ (parent 42)+ (unrealized (6 0))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")
+ tst/defact-dhstatic-state_shapes.tst view
@@ -0,0 +1,390 @@+(comment "CPSA 4.4.5")+(comment "Extracted shapes")++(herald dhstatic-state (algebra diffie-hellman) (bound 16))++(comment "CPSA 4.4.5")++(comment "All input read from tst/dhstatic-state.scm")++(comment "Strand count bounded at 16")++(defprotocol dhstatic-state diffie-hellman+ (defrole cert+ (vars (subj ca name) (serial data) (galpha mesg))+ (trace (recv (sig (cert-req subj galpha ca) (privk "sig" subj)))+ (send (sig (cert subj galpha ca serial) (privk "sig" ca))))+ (uniq-orig serial)+ (comment "Certificate Authority"))+ (defrole get-cert+ (vars (self ca name) (serial data) (ra rndx) (static-key locn)+ (ignore mesg))+ (trace+ (send (sig (cert-req self (exp (gen) ra) ca) (privk "sig" self)))+ (recv (sig (cert self (exp (gen) ra) ca serial) (privk "sig" ca)))+ (load static-key ignore)+ (stor static-key (cat "privkey" self ra serial ca)))+ (uniq-gen ra)+ (comment "Get certified"))+ (defrole init+ (vars (a b ca name) (ra rndx) (serial-a serial-b data) (alpha expt)+ (n text) (static-key locn))+ (trace (load static-key (cat "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) alpha) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra alpha))))+ (recv n))+ (uniq-orig n)+ (gen-st (cat "privkey" a ra serial-a ca))+ (comment "Initiator is A"))+ (defrole resp+ (vars (a b ca name) (rb rndx) (serial-b serial-a data) (alpha expt)+ (n text) (static-key locn))+ (trace (load static-key (cat "privkey" b rb serial-b ca))+ (recv+ (sig (cert a (exp (gen) alpha) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul rb alpha))))+ (send n))+ (gen-st (cat "privkey" b rb serial-b ca))+ (comment "Responder is B"))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule fact-init-neq0+ (forall ((z strd) (b a name))+ (implies+ (and (p "init" z (idx 2)) (p "init" "a" z a) (p "init" "b" z b))+ (fact neq a b))))+ (defgenrule fact-resp-neq0+ (forall ((z strd) (b a name))+ (implies+ (and (p "resp" z (idx 2)) (p "resp" "a" z a) (p "resp" "b" z b))+ (fact neq a b))))+ (defgenrule trRl_get-cert-at-3+ (forall ((z strd))+ (implies (p "get-cert" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_get-cert-at-2+ (forall ((z strd))+ (implies (p "get-cert" z (idx 4)) (trans z (idx 2)))))+ (defgenrule gen-st-init-0+ (forall ((z strd) (a name) (ra rndx) (serial-a data) (ca name))+ (implies+ (and (p "init" z (idx 1)) (p "init" "ca" z ca)+ (p "init" "serial-a" z serial-a) (p "init" "ra" z ra)+ (p "init" "a" z a))+ (gen-st (cat "privkey" a ra serial-a ca)))))+ (defgenrule gen-st-resp-0+ (forall ((z strd) (b name) (rb rndx) (serial-b data) (ca name))+ (implies+ (and (p "resp" z (idx 1)) (p "resp" "ca" z ca)+ (p "resp" "serial-b" z serial-b) (p "resp" "rb" z rb)+ (p "resp" "b" z b))+ (gen-st (cat "privkey" b rb serial-b ca)))))+ (lang (cert-req (tupl 3)) (cert (tupl 4)) (sig sign)))++(defskeleton dhstatic-state+ (vars (serial-a serial-b data) (n text) (ca b a name) (pt pval)+ (static-key locn) (ra rndx) (alpha expt))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha alpha))+ (non-orig (privk "sig" ca) (privk "sig" b))+ (uniq-orig n)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) alpha) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra alpha))))+ (recv n)))+ (label 0)+ (unrealized (0 1))+ (origs (n (0 2)))+ (comment "Not closed under rules"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-a serial-b data) (n text)+ (b a ca name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 rndx))+ (defstrand init 4 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (ra ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-a) (self a)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key-0) (rb ra-0) (alpha ra))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-b) (self b)+ (ca ca) (static-key static-key-0) (ra ra-0))+ (precedes ((0 2) (4 2)) ((1 0) (2 0)) ((1 3) (0 0)) ((2 1) (1 1))+ ((2 1) (4 1)) ((3 1) (0 1)) ((3 1) (5 1)) ((4 3) (0 3))+ ((5 0) (3 0)) ((5 3) (4 0)))+ (non-orig (privk "sig" b) (privk "sig" ca))+ (uniq-orig serial-a serial-b n)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" b ra-0 serial-b ca)+ (cat "privkey" a ra serial-a ca))+ (leads-to ((1 3) (0 0)) ((5 3) (4 0)))+ (operation channel-test (displaced 4 6 get-cert 4)+ (ch-msg static-key-0 (cat pt-1 "privkey" b ra-1 serial-b ca)) (5 0))+ (strand-map 0 1 2 3 5 4)+ (traces+ ((load static-key (cat pt "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (recv n))+ ((send (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" a ra serial-a ca)))+ ((recv (sig (cert-req a (exp (gen) ra) ca) (privk "sig" a)))+ (send (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca))))+ ((recv (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)))+ (send+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca))))+ ((load static-key-0 (cat pt-1 "privkey" b ra-0 serial-b ca))+ (recv (sig (cert a (exp (gen) ra) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra-0) ca) (privk "sig" b)))+ (recv+ (sig (cert b (exp (gen) ra-0) ca serial-b) (privk "sig" ca)))+ (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" b ra-0 serial-b ca))))+ (label 8)+ (parent 0)+ (realized)+ (shape)+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-0) (n n)+ (static-key static-key))))+ (origs (pt-1 (5 3)) (serial-b (3 1)) (serial-a (2 1)) (pt (1 3))+ (n (0 2)))+ (ugens (ra-0 (5 0)) (ra (1 0))))++(comment "Nothing left to do")++(defprotocol dhstatic-state diffie-hellman+ (defrole cert+ (vars (subj ca name) (serial data) (galpha mesg))+ (trace (recv (sig (cert-req subj galpha ca) (privk "sig" subj)))+ (send (sig (cert subj galpha ca serial) (privk "sig" ca))))+ (uniq-orig serial)+ (comment "Certificate Authority"))+ (defrole get-cert+ (vars (self ca name) (serial data) (ra rndx) (static-key locn)+ (ignore mesg))+ (trace+ (send (sig (cert-req self (exp (gen) ra) ca) (privk "sig" self)))+ (recv (sig (cert self (exp (gen) ra) ca serial) (privk "sig" ca)))+ (load static-key ignore)+ (stor static-key (cat "privkey" self ra serial ca)))+ (uniq-gen ra)+ (comment "Get certified"))+ (defrole init+ (vars (a b ca name) (ra rndx) (serial-a serial-b data) (alpha expt)+ (n text) (static-key locn))+ (trace (load static-key (cat "privkey" a ra serial-a ca))+ (recv+ (sig (cert b (exp (gen) alpha) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra alpha))))+ (recv n))+ (uniq-orig n)+ (gen-st (cat "privkey" a ra serial-a ca))+ (comment "Initiator is A"))+ (defrole resp+ (vars (a b ca name) (rb rndx) (serial-b serial-a data) (alpha expt)+ (n text) (static-key locn))+ (trace (load static-key (cat "privkey" b rb serial-b ca))+ (recv+ (sig (cert a (exp (gen) alpha) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul rb alpha))))+ (send n))+ (gen-st (cat "privkey" b rb serial-b ca))+ (comment "Responder is B"))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule fact-init-neq0+ (forall ((z strd) (b a name))+ (implies+ (and (p "init" z (idx 2)) (p "init" "a" z a) (p "init" "b" z b))+ (fact neq a b))))+ (defgenrule fact-resp-neq0+ (forall ((z strd) (b a name))+ (implies+ (and (p "resp" z (idx 2)) (p "resp" "a" z a) (p "resp" "b" z b))+ (fact neq a b))))+ (defgenrule trRl_get-cert-at-3+ (forall ((z strd))+ (implies (p "get-cert" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_get-cert-at-2+ (forall ((z strd))+ (implies (p "get-cert" z (idx 4)) (trans z (idx 2)))))+ (defgenrule gen-st-init-0+ (forall ((z strd) (a name) (ra rndx) (serial-a data) (ca name))+ (implies+ (and (p "init" z (idx 1)) (p "init" "ca" z ca)+ (p "init" "serial-a" z serial-a) (p "init" "ra" z ra)+ (p "init" "a" z a))+ (gen-st (cat "privkey" a ra serial-a ca)))))+ (defgenrule gen-st-resp-0+ (forall ((z strd) (b name) (rb rndx) (serial-b data) (ca name))+ (implies+ (and (p "resp" z (idx 1)) (p "resp" "ca" z ca)+ (p "resp" "serial-b" z serial-b) (p "resp" "rb" z rb)+ (p "resp" "b" z b))+ (gen-st (cat "privkey" b rb serial-b ca)))))+ (lang (cert-req (tupl 3)) (cert (tupl 4)) (sig sign)))++(defskeleton dhstatic-state+ (vars (serial-b serial-a data) (n text) (ca a b name) (pt pval)+ (static-key locn) (rb rndx) (alpha expt))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb rb) (alpha alpha))+ (non-orig (privk "sig" ca) (privk "sig" a))+ (traces+ ((load static-key (cat pt "privkey" b rb serial-b ca))+ (recv+ (sig (cert a (exp (gen) alpha) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul rb alpha))))+ (send n)))+ (label 24)+ (unrealized (0 1))+ (origs)+ (comment "Not closed under rules"))++(defskeleton dhstatic-state+ (vars (ignore ignore-0 mesg) (serial-b serial-a data) (n text)+ (a b ca name) (pt pt-0 pt-1 pt-2 pval)+ (static-key static-key-0 locn) (ra ra-0 rndx))+ (defstrand resp 4 (serial-b serial-b) (serial-a serial-a) (n n) (a a)+ (b b) (ca ca) (static-key static-key) (rb ra) (alpha ra-0))+ (defstrand get-cert 4 (ignore ignore) (serial serial-b) (self b)+ (ca ca) (static-key static-key) (ra ra))+ (defstrand cert 2 (galpha (exp (gen) ra)) (serial serial-b) (subj b)+ (ca ca))+ (defstrand cert 2 (galpha (exp (gen) ra-0)) (serial serial-a) (subj a)+ (ca ca))+ (defstrand init 3 (serial-a serial-a) (serial-b serial-b) (n n) (a a)+ (b b) (ca ca) (static-key static-key-0) (ra ra-0) (alpha ra))+ (defstrand get-cert 4 (ignore ignore-0) (serial serial-a) (self a)+ (ca ca) (static-key static-key-0) (ra ra-0))+ (precedes ((1 0) (2 0)) ((1 3) (0 0)) ((2 1) (1 1)) ((2 1) (4 1))+ ((3 1) (0 1)) ((3 1) (5 1)) ((4 2) (0 2)) ((5 0) (3 0))+ ((5 3) (4 0)))+ (non-orig (privk "sig" a) (privk "sig" ca))+ (uniq-orig serial-b serial-a n)+ (uniq-gen ra ra-0)+ (gen-st (cat "privkey" a ra-0 serial-a ca)+ (cat "privkey" b ra serial-b ca))+ (leads-to ((1 3) (0 0)) ((5 3) (4 0)))+ (operation channel-test (displaced 4 6 get-cert 4)+ (ch-msg static-key-0 (cat pt-1 "privkey" a ra-1 serial-a ca)) (5 0))+ (strand-map 0 1 2 3 5 4)+ (traces+ ((load static-key (cat pt "privkey" b ra serial-b ca))+ (recv+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (recv (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0))))+ (send n))+ ((send (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (load static-key (cat pt-0 ignore))+ (stor static-key (cat pt "privkey" b ra serial-b ca)))+ ((recv (sig (cert-req b (exp (gen) ra) ca) (privk "sig" b)))+ (send (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca))))+ ((recv (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)))+ (send+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca))))+ ((load static-key-0 (cat pt-1 "privkey" a ra-0 serial-a ca))+ (recv (sig (cert b (exp (gen) ra) ca serial-b) (privk "sig" ca)))+ (send (enc n a b serial-a serial-b (exp (gen) (mul ra ra-0)))))+ ((send (sig (cert-req a (exp (gen) ra-0) ca) (privk "sig" a)))+ (recv+ (sig (cert a (exp (gen) ra-0) ca serial-a) (privk "sig" ca)))+ (load static-key-0 (cat pt-2 ignore-0))+ (stor static-key-0 (cat pt-1 "privkey" a ra-0 serial-a ca))))+ (label 32)+ (parent 24)+ (realized)+ (shape)+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-0) (n n)+ (static-key static-key))))+ (origs (pt-1 (5 3)) (n (4 2)) (serial-a (3 1)) (serial-b (2 1))+ (pt (1 3)))+ (ugens (ra-0 (5 0)) (ra (1 0))))++(comment "Nothing left to do")
+ tst/defact-locn_envelope.tst view
@@ -0,0 +1,5135 @@+(herald "Envelope Protocol, location-based version" (bound 30)+ (limit 1200))++(comment "CPSA 4.4.5")+(comment "All input read from tst/locn_envelope.scm")+(comment "Step count limited to 1200")+(comment "Strand count bounded at 30")++(defprotocol envelope basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope+ (vars (v n data) (pcr-id text) (k aik akey) (tpm chan))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig v n)+ (conf tpm)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 0)+ (unrealized (0 0) (1 2))+ (preskeleton)+ (origs (v (1 3)) (n (1 0)))+ (comment "Not a skeleton"))++(defskeleton envelope+ (vars (v n data) (pcr-id text) (k aik akey) (tpm chan))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (precedes ((1 3) (0 0)))+ (non-orig aik)+ (uniq-orig v n)+ (conf tpm)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 1)+ (parent 0)+ (unrealized (1 2))+ (origs (v (1 3)) (n (1 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (v n data) (pcr-id text) (k aik akey) (tpm tpm-0 chan))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm-0))+ (precedes ((1 3) (0 0)) ((2 1) (1 2)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (conf tpm)+ (auth tpm-0)+ (operation encryption-test (added-strand tpm-create-key 2)+ (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik) (1 2))+ (strand-map 0 1)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-0 (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))))+ (label 2)+ (parent 1)+ (unrealized (0 0) (2 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (v n data) (pcr-id text) (k aik akey) (tpm chan))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (precedes ((1 1) (2 0)) ((1 3) (0 0)) ((2 1) (1 2)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (conf tpm)+ (auth tpm)+ (operation channel-test (displaced 3 1 alice 2)+ (ch-msg tpm-0+ (cat "create-req" pcr-id (hash (hash "0" n) "obtain"))) (2 0))+ (strand-map 0 1 2)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))))+ (label 3)+ (parent 2)+ (unrealized (0 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (current-value mesg) (v n data) (pcr-id pcr-id-0 text)+ (k aik aik-0 akey) (pt pval) (tpm tpm-0 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v) (current-value current-value)+ (pcr-id pcr-id-0) (k k) (aik aik-0) (tpm tpm-0) (pcr pcr))+ (precedes ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2)) ((3 3) (0 0)))+ (non-orig aik aik-0 (invk k))+ (uniq-orig v n k)+ (conf tpm)+ (auth tpm)+ (operation nonce-test (added-strand tpm-decrypt 4) v (0 0) (enc v k))+ (strand-map 0 1 2)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 current-value aik-0))+ (load pcr (cat pt current-value)) (send v)))+ (label 4)+ (parent 3)+ (unrealized (3 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (v n data) (pcr-id text) (k aik akey) (pt pval) (tpm tpm-0 chan)+ (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (precedes ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2)) ((3 3) (0 0)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (gen-st (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ + (operation encryption-test (displaced 4 2 tpm-create-key 2)+ (enc "created" k pcr-id-0 current-value aik-0) (3 1))+ (strand-map 0 1 2 3)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v)))+ (label 5)+ (parent 4)+ (unrealized (3 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (v n data) (pcr-id pcr-id-0 text) (k aik akey) (pt pt-0 pval)+ (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (tpm tpm-1)+ (pcr pcr))+ (precedes ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2)) ((3 3) (0 0))+ ((4 2) (3 2)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 2)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt (hash (hash "0" n) "obtain"))) (3 2))+ (strand-map 0 1 2 3)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-0 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain")))))+ (label 6)+ (parent 5)+ (unrealized (4 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (v n data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 tpm-2 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-1) (tpm tpm-2) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 3) (0 0)) ((4 2) (3 2)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 2)) ((5 2) (4 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt-0 (hash "0" n))) (4 1))+ (strand-map 0 1 2 3 4)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-0 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm-2 (cat "extend" pcr-id-1 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 7)+ (parent 6)+ (unrealized (5 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (v n data) (pcr-id pcr-id-0 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id) (tpm tpm) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 3) (0 0)) ((4 2) (3 2)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 2)) ((5 2) (4 1)))+ + (operation nonce-test (contracted (pcr-id-1 pcr-id) (tpm-2 tpm)) n+ (5 0) (ch-msg tpm (cat "extend" pcr-id n)))+ (strand-map 0 1 2 3 4 5)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-0 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 8)+ (parent 7)+ (realized)+ (shape)+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))))+ (origs (pt-0 (5 2)) (pt (4 2)) (k (2 1)) (n (1 0)) (v (1 3))))++(comment "Nothing left to do")++(defprotocol envelope basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 9)+ (unrealized (0 0) (1 2))+ (preskeleton)+ (origs (v (1 3)) (n (1 0)))+ (comment "Not a skeleton"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (precedes ((1 3) (0 0)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 10)+ (parent 9)+ (unrealized (0 0) (1 2))+ (origs (v (1 3)) (n (1 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm tpm-0 chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm-0))+ (precedes ((1 3) (0 0)) ((2 1) (1 2)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpm)+ (auth tpm-0)+ (operation encryption-test (added-strand tpm-create-key 2)+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik) (1 2))+ (strand-map 0 1)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 11)+ (parent 10)+ (unrealized (0 0) (2 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (precedes ((1 1) (2 0)) ((1 3) (0 0)) ((2 1) (1 2)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpm)+ (auth tpm)+ (operation channel-test (displaced 3 1 alice 2)+ (ch-msg tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain"))) (2 0))+ (strand-map 0 1 2)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 12)+ (parent 11)+ (unrealized (0 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (pt pval)+ (tpm tpm-0 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (precedes ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2)) ((3 2) (0 0)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ + (operation encryption-test (added-strand tpm-quote 3)+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik)+ (0 0))+ (strand-map 0 1 2)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))))+ (label 13)+ (parent 12)+ (unrealized (3 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (precedes ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2)) ((3 2) (0 0))+ ((4 2) (3 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt (hash (hash "0" n) "refuse"))) (3 1))+ (strand-map 0 1 2 3)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-1 (cat "extend" pcr-id-1 "refuse"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse")))))+ (label 14)+ (parent 13)+ (unrealized (4 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 tpm-2 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-2) (tpm tpm-2) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 2) (0 0)) ((4 2) (3 1)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 1)) ((5 2) (4 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt-0 (hash "0" n))) (4 1))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-1 (cat "extend" pcr-id-1 "refuse"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse"))))+ ((recv tpm-2 (cat "extend" pcr-id-2 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 15)+ (parent 14)+ (unrealized (5 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 2) (0 0)) ((4 2) (3 1)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 1)) ((5 2) (4 1)))+ + (operation nonce-test (contracted (pcr-id-2 pcr-id-0) (tpm-2 tpm)) n+ (5 0) (ch-msg tpm (cat "extend" pcr-id-0 n)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-1 (cat "extend" pcr-id-1 "refuse"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 16)+ (parent 15)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm))))+ (origs (pt-0 (5 2)) (pt (4 2)) (n (1 0)) (k (2 1)) (v (1 3))))++(comment "Nothing left to do")++(defprotocol envelope basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 17)+ (unrealized (0 0) (1 0) (2 2))+ (preskeleton)+ (origs (v (2 3)) (n (2 0)))+ (comment "Not a skeleton"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (precedes ((2 3) (0 0)) ((2 3) (1 0)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 18)+ (parent 17)+ (unrealized (0 0) (2 2))+ (origs (v (2 3)) (n (2 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm tpm-0 chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm-0))+ (precedes ((2 3) (0 0)) ((2 3) (1 0)) ((3 1) (2 2)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpm)+ (auth tpm-0)+ (operation encryption-test (added-strand tpm-create-key 2)+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik) (2 2))+ (strand-map 0 1 2)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 19)+ (parent 18)+ (unrealized (0 0) (1 0) (3 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (precedes ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (1 0)) ((3 1) (2 2)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpm)+ (auth tpm)+ (operation channel-test (displaced 4 2 alice 2)+ (ch-msg tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain"))) (3 0))+ (strand-map 0 1 2 3)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 20)+ (parent 19)+ (unrealized (0 0) (1 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (current-value mesg) (n v data) (pcr-id pcr-id-0 pcr-id-1 text)+ (k aik aik-0 akey) (pt pval) (tpm tpm-0 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v) (current-value current-value)+ (pcr-id pcr-id-1) (k k) (aik aik-0) (tpm tpm-0) (pcr pcr))+ (precedes ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (4 0)) ((3 1) (2 2))+ ((4 3) (1 0)))+ (non-orig aik aik-0 (invk k))+ (uniq-orig n v k)+ (conf tpm)+ (auth tpm)+ (operation nonce-test (added-strand tpm-decrypt 4) v (1 0) (enc v k))+ (strand-map 0 1 2 3)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-1 current-value aik-0))+ (load pcr (cat pt current-value)) (send v)))+ (label 21)+ (parent 20)+ (unrealized (0 0) (4 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (pt pval)+ (tpm tpm-0 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (precedes ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (4 0)) ((3 1) (2 2))+ ((4 3) (1 0)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ + (operation encryption-test (displaced 5 3 tpm-create-key 2)+ (enc "created" k pcr-id-1 current-value aik-0) (4 1))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v)))+ (label 22)+ (parent 21)+ (unrealized (0 0) (4 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (precedes ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (4 0)) ((3 1) (2 2))+ ((4 3) (1 0)) ((5 2) (4 2)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt (hash (hash "0" n) "obtain"))) (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain")))))+ (label 23)+ (parent 22)+ (unrealized (0 0) (5 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 tpm-2 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-2) (tpm tpm-2) (pcr pcr))+ (precedes ((2 0) (6 0)) ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (4 0))+ ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2)) ((6 2) (5 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt-0 (hash "0" n))) (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm-2 (cat "extend" pcr-id-2 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 24)+ (parent 23)+ (unrealized (0 0) (6 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (precedes ((2 0) (6 0)) ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (4 0))+ ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2)) ((6 2) (5 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)))+ + (operation nonce-test (contracted (pcr-id-2 pcr-id-0) (tpm-2 tpm)) n+ (6 0) (ch-msg tpm (cat "extend" pcr-id-0 n)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 25)+ (parent 24)+ (unrealized (0 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pt-1 pt-2 pval) (tpm tpm-0 tpm-1 tpm-2 chan)+ (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-2) (pcr pcr-0))+ (precedes ((2 0) (6 0)) ((2 1) (3 0)) ((2 3) (4 0)) ((2 3) (7 0))+ ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2)) ((6 2) (5 1))+ ((7 2) (0 0)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)))+ + (operation encryption-test (added-strand tpm-quote 3)+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik)+ (0 0))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-2 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))))+ (label 26)+ (parent 25)+ (unrealized (7 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 text) (k aik akey)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (tpm tpm-0 tpm-1 tpm-2 tpm-3 chan)+ (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-2) (pcr pcr-0))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-2) (tpm tpm-3)+ (pcr pcr-0))+ (precedes ((2 0) (6 0)) ((2 1) (3 0)) ((2 3) (4 0)) ((2 3) (7 0))+ ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2)) ((6 2) (5 1))+ ((7 2) (0 0)) ((8 2) (7 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)) ((8 2) (7 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr-0 (cat pt-2 (hash (hash "0" n) "refuse"))) (7 1))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-2 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-3 (cat "extend" pcr-id-2 "refuse"))+ (load pcr-0 (cat pt-3 (hash "0" n)))+ (stor pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))))+ (label 27)+ (parent 26)+ (unrealized (8 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 pcr-id-3 text)+ (k aik akey) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval)+ (tpm tpm-0 tpm-1 tpm-2 tpm-3 tpm-4 chan) (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-2) (pcr pcr-0))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-2) (tpm tpm-3)+ (pcr pcr-0))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-3) (tpm tpm-4) (pcr pcr-0))+ (precedes ((2 0) (6 0)) ((2 0) (9 0)) ((2 1) (3 0)) ((2 3) (4 0))+ ((2 3) (7 0)) ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2))+ ((6 2) (5 1)) ((7 2) (0 0)) ((8 2) (7 1)) ((9 2) (8 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)) ((8 2) (7 1)) ((9 2) (8 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr-0 (cat pt-3 (hash "0" n))) (8 1))+ (strand-map 0 1 2 3 4 5 6 7 8)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-2 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-3 (cat "extend" pcr-id-2 "refuse"))+ (load pcr-0 (cat pt-3 (hash "0" n)))+ (stor pcr-0 (cat pt-2 (hash (hash "0" n) "refuse"))))+ ((recv tpm-4 (cat "extend" pcr-id-3 n)) (load pcr-0 (cat pt-4 "0"))+ (stor pcr-0 (cat pt-3 (hash "0" n)))))+ (label 28)+ (parent 27)+ (unrealized (9 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 text) (k aik akey)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval)+ (tpm tpm-0 tpm-1 tpm-2 tpm-3 chan) (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-2) (pcr pcr-0))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-2) (tpm tpm-3)+ (pcr pcr-0))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr-0))+ (precedes ((2 0) (6 0)) ((2 0) (9 0)) ((2 1) (3 0)) ((2 3) (4 0))+ ((2 3) (7 0)) ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2))+ ((6 2) (5 1)) ((7 2) (0 0)) ((8 2) (7 1)) ((9 2) (8 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)) ((8 2) (7 1)) ((9 2) (8 1)))+ + (operation nonce-test (contracted (pcr-id-3 pcr-id-0) (tpm-4 tpm)) n+ (9 0) (ch-msg tpm (cat "extend" pcr-id-0 n)))+ (strand-map 0 1 2 3 4 5 6 7 8 9)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-2 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-3 (cat "extend" pcr-id-2 "refuse"))+ (load pcr-0 (cat pt-3 (hash "0" n)))+ (stor pcr-0 (cat pt-2 (hash (hash "0" n) "refuse"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr-0 (cat pt-4 "0"))+ (stor pcr-0 (cat pt-3 (hash "0" n)))))+ (label 29)+ (parent 28)+ (realized)+ (shape)+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm))))+ (origs (pt-3 (9 2)) (pt-2 (8 2)) (pt-0 (6 2)) (pt (5 2)) (k (3 1))+ (n (2 0)) (v (2 3))))++(comment "Nothing left to do")++(defprotocol envelope-plus basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule ordered-extends+ (forall ((y z strd) (pcr locn))+ (implies+ (and (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "pcr" y pcr)+ (p "tpm-extend-enc" "pcr" z pcr))+ (or+ (= y z)+ (prec y (idx 2) z (idx 1))+ (prec z (idx 2) y (idx 1))))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope-plus+ (vars (v n data) (pcr-id text) (k aik akey) (tpm chan))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig v n)+ (conf tpm)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 30)+ (unrealized (0 0) (1 2))+ (preskeleton)+ (origs (v (1 3)) (n (1 0)))+ (comment "Not a skeleton"))++(defskeleton envelope-plus+ (vars (v n data) (pcr-id text) (k aik akey) (tpm chan))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (precedes ((1 3) (0 0)))+ (non-orig aik)+ (uniq-orig v n)+ (conf tpm)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 31)+ (parent 30)+ (unrealized (1 2))+ (origs (v (1 3)) (n (1 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (v n data) (pcr-id text) (k aik akey) (tpm tpm-0 chan))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm-0))+ (precedes ((1 3) (0 0)) ((2 1) (1 2)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (conf tpm)+ (auth tpm-0)+ (operation encryption-test (added-strand tpm-create-key 2)+ (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik) (1 2))+ (strand-map 0 1)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-0 (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))))+ (label 32)+ (parent 31)+ (unrealized (0 0) (2 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (v n data) (pcr-id text) (k aik akey) (tpm chan))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (precedes ((1 1) (2 0)) ((1 3) (0 0)) ((2 1) (1 2)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (conf tpm)+ (auth tpm)+ (operation channel-test (displaced 3 1 alice 2)+ (ch-msg tpm-0+ (cat "create-req" pcr-id (hash (hash "0" n) "obtain"))) (2 0))+ (strand-map 0 1 2)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))))+ (label 33)+ (parent 32)+ (unrealized (0 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (current-value mesg) (v n data) (pcr-id pcr-id-0 text)+ (k aik aik-0 akey) (pt pval) (tpm tpm-0 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v) (current-value current-value)+ (pcr-id pcr-id-0) (k k) (aik aik-0) (tpm tpm-0) (pcr pcr))+ (precedes ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2)) ((3 3) (0 0)))+ (non-orig aik aik-0 (invk k))+ (uniq-orig v n k)+ (conf tpm)+ (auth tpm)+ (operation nonce-test (added-strand tpm-decrypt 4) v (0 0) (enc v k))+ (strand-map 0 1 2)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 current-value aik-0))+ (load pcr (cat pt current-value)) (send v)))+ (label 34)+ (parent 33)+ (unrealized (3 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (v n data) (pcr-id text) (k aik akey) (pt pval) (tpm tpm-0 chan)+ (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (precedes ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2)) ((3 3) (0 0)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (gen-st (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ + (operation encryption-test (displaced 4 2 tpm-create-key 2)+ (enc "created" k pcr-id-0 current-value aik-0) (3 1))+ (strand-map 0 1 2 3)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v)))+ (label 35)+ (parent 34)+ (unrealized (3 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (v n data) (pcr-id pcr-id-0 text) (k aik akey) (pt pt-0 pval)+ (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (tpm tpm-1)+ (pcr pcr))+ (precedes ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2)) ((3 3) (0 0))+ ((4 2) (3 2)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 2)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt (hash (hash "0" n) "obtain"))) (3 2))+ (strand-map 0 1 2 3)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-0 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain")))))+ (label 36)+ (parent 35)+ (unrealized (4 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (v n data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 tpm-2 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-1) (tpm tpm-2) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 3) (0 0)) ((4 2) (3 2)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 2)) ((5 2) (4 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt-0 (hash "0" n))) (4 1))+ (strand-map 0 1 2 3 4)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-0 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm-2 (cat "extend" pcr-id-1 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 37)+ (parent 36)+ (unrealized (5 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (v n data) (pcr-id pcr-id-0 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id) (tpm tpm) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 3) (0 0)) ((4 2) (3 2)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 2)) ((5 2) (4 1)))+ + (operation nonce-test (contracted (pcr-id-1 pcr-id) (tpm-2 tpm)) n+ (5 0) (ch-msg tpm (cat "extend" pcr-id n)))+ (strand-map 0 1 2 3 4 5)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-0 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 38)+ (parent 37)+ (realized)+ (shape)+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))))+ (origs (pt-0 (5 2)) (pt (4 2)) (k (2 1)) (n (1 0)) (v (1 3))))++(comment "Nothing left to do")++(defprotocol envelope-plus basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule ordered-extends+ (forall ((y z strd) (pcr locn))+ (implies+ (and (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "pcr" y pcr)+ (p "tpm-extend-enc" "pcr" z pcr))+ (or+ (= y z)+ (prec y (idx 2) z (idx 1))+ (prec z (idx 2) y (idx 1))))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 39)+ (unrealized (0 0) (1 2))+ (preskeleton)+ (origs (v (1 3)) (n (1 0)))+ (comment "Not a skeleton"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (precedes ((1 3) (0 0)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 40)+ (parent 39)+ (unrealized (0 0) (1 2))+ (origs (v (1 3)) (n (1 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm tpm-0 chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm-0))+ (precedes ((1 3) (0 0)) ((2 1) (1 2)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpm)+ (auth tpm-0)+ (operation encryption-test (added-strand tpm-create-key 2)+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik) (1 2))+ (strand-map 0 1)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 41)+ (parent 40)+ (unrealized (0 0) (2 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (precedes ((1 1) (2 0)) ((1 3) (0 0)) ((2 1) (1 2)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpm)+ (auth tpm)+ (operation channel-test (displaced 3 1 alice 2)+ (ch-msg tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain"))) (2 0))+ (strand-map 0 1 2)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 42)+ (parent 41)+ (unrealized (0 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (pt pval)+ (tpm tpm-0 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (precedes ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2)) ((3 2) (0 0)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ + (operation encryption-test (added-strand tpm-quote 3)+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik)+ (0 0))+ (strand-map 0 1 2)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))))+ (label 43)+ (parent 42)+ (unrealized (3 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (precedes ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2)) ((3 2) (0 0))+ ((4 2) (3 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt (hash (hash "0" n) "refuse"))) (3 1))+ (strand-map 0 1 2 3)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-1 (cat "extend" pcr-id-1 "refuse"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse")))))+ (label 44)+ (parent 43)+ (unrealized (4 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 tpm-2 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-2) (tpm tpm-2) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 2) (0 0)) ((4 2) (3 1)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 1)) ((5 2) (4 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt-0 (hash "0" n))) (4 1))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-1 (cat "extend" pcr-id-1 "refuse"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse"))))+ ((recv tpm-2 (cat "extend" pcr-id-2 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 45)+ (parent 44)+ (unrealized (5 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 2) (0 0)) ((4 2) (3 1)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 1)) ((5 2) (4 1)))+ + (operation nonce-test (contracted (pcr-id-2 pcr-id-0) (tpm-2 tpm)) n+ (5 0) (ch-msg tpm (cat "extend" pcr-id-0 n)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-1 (cat "extend" pcr-id-1 "refuse"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 46)+ (parent 45)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm))))+ (origs (pt-0 (5 2)) (pt (4 2)) (n (1 0)) (k (2 1)) (v (1 3))))++(comment "Nothing left to do")++(defprotocol envelope-plus basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule ordered-extends+ (forall ((y z strd) (pcr locn))+ (implies+ (and (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "pcr" y pcr)+ (p "tpm-extend-enc" "pcr" z pcr))+ (or+ (= y z)+ (prec y (idx 2) z (idx 1))+ (prec z (idx 2) y (idx 1))))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 47)+ (unrealized (0 0) (1 0) (2 2))+ (preskeleton)+ (origs (v (2 3)) (n (2 0)))+ (comment "Not a skeleton"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (precedes ((2 3) (0 0)) ((2 3) (1 0)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 48)+ (parent 47)+ (unrealized (0 0) (2 2))+ (origs (v (2 3)) (n (2 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm tpm-0 chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm-0))+ (precedes ((2 3) (0 0)) ((2 3) (1 0)) ((3 1) (2 2)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpm)+ (auth tpm-0)+ (operation encryption-test (added-strand tpm-create-key 2)+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik) (2 2))+ (strand-map 0 1 2)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 49)+ (parent 48)+ (unrealized (0 0) (1 0) (3 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (precedes ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (1 0)) ((3 1) (2 2)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpm)+ (auth tpm)+ (operation channel-test (displaced 4 2 alice 2)+ (ch-msg tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain"))) (3 0))+ (strand-map 0 1 2 3)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 50)+ (parent 49)+ (unrealized (0 0) (1 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (current-value mesg) (n v data) (pcr-id pcr-id-0 pcr-id-1 text)+ (k aik aik-0 akey) (pt pval) (tpm tpm-0 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v) (current-value current-value)+ (pcr-id pcr-id-1) (k k) (aik aik-0) (tpm tpm-0) (pcr pcr))+ (precedes ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (4 0)) ((3 1) (2 2))+ ((4 3) (1 0)))+ (non-orig aik aik-0 (invk k))+ (uniq-orig n v k)+ (conf tpm)+ (auth tpm)+ (operation nonce-test (added-strand tpm-decrypt 4) v (1 0) (enc v k))+ (strand-map 0 1 2 3)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-1 current-value aik-0))+ (load pcr (cat pt current-value)) (send v)))+ (label 51)+ (parent 50)+ (unrealized (0 0) (4 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (pt pval)+ (tpm tpm-0 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (precedes ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (4 0)) ((3 1) (2 2))+ ((4 3) (1 0)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ + (operation encryption-test (displaced 5 3 tpm-create-key 2)+ (enc "created" k pcr-id-1 current-value aik-0) (4 1))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v)))+ (label 52)+ (parent 51)+ (unrealized (0 0) (4 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (precedes ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (4 0)) ((3 1) (2 2))+ ((4 3) (1 0)) ((5 2) (4 2)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt (hash (hash "0" n) "obtain"))) (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain")))))+ (label 53)+ (parent 52)+ (unrealized (0 0) (5 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 tpm-2 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-2) (tpm tpm-2) (pcr pcr))+ (precedes ((2 0) (6 0)) ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (4 0))+ ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2)) ((6 2) (5 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt-0 (hash "0" n))) (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm-2 (cat "extend" pcr-id-2 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 54)+ (parent 53)+ (unrealized (0 0) (6 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (precedes ((2 0) (6 0)) ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (4 0))+ ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2)) ((6 2) (5 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)))+ + (operation nonce-test (contracted (pcr-id-2 pcr-id-0) (tpm-2 tpm)) n+ (6 0) (ch-msg tpm (cat "extend" pcr-id-0 n)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 55)+ (parent 54)+ (unrealized (0 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pt-1 pt-2 pval) (tpm tpm-0 tpm-1 tpm-2 chan)+ (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-2) (pcr pcr-0))+ (precedes ((2 0) (6 0)) ((2 1) (3 0)) ((2 3) (4 0)) ((2 3) (7 0))+ ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2)) ((6 2) (5 1))+ ((7 2) (0 0)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)))+ + (operation encryption-test (added-strand tpm-quote 3)+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik)+ (0 0))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-2 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))))+ (label 56)+ (parent 55)+ (unrealized (7 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 text) (k aik akey)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (tpm tpm-0 tpm-1 tpm-2 tpm-3 chan)+ (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-2) (pcr pcr-0))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-2) (tpm tpm-3)+ (pcr pcr-0))+ (precedes ((2 0) (6 0)) ((2 1) (3 0)) ((2 3) (4 0)) ((2 3) (7 0))+ ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2)) ((6 2) (5 1))+ ((7 2) (0 0)) ((8 2) (7 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)) ((8 2) (7 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr-0 (cat pt-2 (hash (hash "0" n) "refuse"))) (7 1))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-2 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-3 (cat "extend" pcr-id-2 "refuse"))+ (load pcr-0 (cat pt-3 (hash "0" n)))+ (stor pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))))+ (label 57)+ (parent 56)+ (unrealized (8 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 pcr-id-3 text)+ (k aik akey) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval)+ (tpm tpm-0 tpm-1 tpm-2 tpm-3 tpm-4 chan) (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-2) (pcr pcr-0))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-2) (tpm tpm-3)+ (pcr pcr-0))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-3) (tpm tpm-4) (pcr pcr-0))+ (precedes ((2 0) (6 0)) ((2 0) (9 0)) ((2 1) (3 0)) ((2 3) (4 0))+ ((2 3) (7 0)) ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2))+ ((6 2) (5 1)) ((7 2) (0 0)) ((8 2) (7 1)) ((9 2) (8 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)) ((8 2) (7 1)) ((9 2) (8 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr-0 (cat pt-3 (hash "0" n))) (8 1))+ (strand-map 0 1 2 3 4 5 6 7 8)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-2 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-3 (cat "extend" pcr-id-2 "refuse"))+ (load pcr-0 (cat pt-3 (hash "0" n)))+ (stor pcr-0 (cat pt-2 (hash (hash "0" n) "refuse"))))+ ((recv tpm-4 (cat "extend" pcr-id-3 n)) (load pcr-0 (cat pt-4 "0"))+ (stor pcr-0 (cat pt-3 (hash "0" n)))))+ (label 58)+ (parent 57)+ (unrealized (9 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 text) (k aik akey)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval)+ (tpm tpm-0 tpm-1 tpm-2 tpm-3 chan) (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-2) (pcr pcr-0))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-2) (tpm tpm-3)+ (pcr pcr-0))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr-0))+ (precedes ((2 0) (6 0)) ((2 0) (9 0)) ((2 1) (3 0)) ((2 3) (4 0))+ ((2 3) (7 0)) ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2))+ ((6 2) (5 1)) ((7 2) (0 0)) ((8 2) (7 1)) ((9 2) (8 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)) ((8 2) (7 1)) ((9 2) (8 1)))+ + (operation nonce-test (contracted (pcr-id-3 pcr-id-0) (tpm-4 tpm)) n+ (9 0) (ch-msg tpm (cat "extend" pcr-id-0 n)))+ (strand-map 0 1 2 3 4 5 6 7 8 9)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-2 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-3 (cat "extend" pcr-id-2 "refuse"))+ (load pcr-0 (cat pt-3 (hash "0" n)))+ (stor pcr-0 (cat pt-2 (hash (hash "0" n) "refuse"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr-0 (cat pt-4 "0"))+ (stor pcr-0 (cat pt-3 (hash "0" n)))))+ (label 59)+ (parent 58)+ (realized)+ (shape)+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm))))+ (origs (pt-3 (9 2)) (pt-2 (8 2)) (pt-0 (6 2)) (pt (5 2)) (k (3 1))+ (n (2 0)) (v (2 3))))++(comment "Nothing left to do")++(defprotocol envelope-plus-2 basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule pcr-id-identifies-pcr+ (forall ((y z strd) (pcr-id text) (pcr pcr-0 locn))+ (implies+ (and (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "pcr-id" y pcr-id)+ (p "tpm-extend-enc" "pcr-id" z pcr-id)+ (p "tpm-extend-enc" "pcr" y pcr)+ (p "tpm-extend-enc" "pcr" z pcr-0))+ (= pcr pcr-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope-plus-2+ (vars (v n data) (pcr-id text) (k aik akey) (tpm chan))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig v n)+ (conf tpm)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 60)+ (unrealized (0 0) (1 2))+ (preskeleton)+ (origs (v (1 3)) (n (1 0)))+ (comment "Not a skeleton"))++(defskeleton envelope-plus-2+ (vars (v n data) (pcr-id text) (k aik akey) (tpm chan))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (precedes ((1 3) (0 0)))+ (non-orig aik)+ (uniq-orig v n)+ (conf tpm)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 61)+ (parent 60)+ (unrealized (1 2))+ (origs (v (1 3)) (n (1 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (v n data) (pcr-id text) (k aik akey) (tpm tpm-0 chan))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm-0))+ (precedes ((1 3) (0 0)) ((2 1) (1 2)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (conf tpm)+ (auth tpm-0)+ (operation encryption-test (added-strand tpm-create-key 2)+ (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik) (1 2))+ (strand-map 0 1)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-0 (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))))+ (label 62)+ (parent 61)+ (unrealized (0 0) (2 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (v n data) (pcr-id text) (k aik akey) (tpm chan))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (precedes ((1 1) (2 0)) ((1 3) (0 0)) ((2 1) (1 2)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (conf tpm)+ (auth tpm)+ (operation channel-test (displaced 3 1 alice 2)+ (ch-msg tpm-0+ (cat "create-req" pcr-id (hash (hash "0" n) "obtain"))) (2 0))+ (strand-map 0 1 2)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))))+ (label 63)+ (parent 62)+ (unrealized (0 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (current-value mesg) (v n data) (pcr-id pcr-id-0 text)+ (k aik aik-0 akey) (pt pval) (tpm tpm-0 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v) (current-value current-value)+ (pcr-id pcr-id-0) (k k) (aik aik-0) (tpm tpm-0) (pcr pcr))+ (precedes ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2)) ((3 3) (0 0)))+ (non-orig aik aik-0 (invk k))+ (uniq-orig v n k)+ (conf tpm)+ (auth tpm)+ (operation nonce-test (added-strand tpm-decrypt 4) v (0 0) (enc v k))+ (strand-map 0 1 2)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 current-value aik-0))+ (load pcr (cat pt current-value)) (send v)))+ (label 64)+ (parent 63)+ (unrealized (3 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (v n data) (pcr-id text) (k aik akey) (pt pval) (tpm tpm-0 chan)+ (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (precedes ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2)) ((3 3) (0 0)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (gen-st (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ + (operation encryption-test (displaced 4 2 tpm-create-key 2)+ (enc "created" k pcr-id-0 current-value aik-0) (3 1))+ (strand-map 0 1 2 3)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v)))+ (label 65)+ (parent 64)+ (unrealized (3 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (v n data) (pcr-id pcr-id-0 text) (k aik akey) (pt pt-0 pval)+ (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (tpm tpm-1)+ (pcr pcr))+ (precedes ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2)) ((3 3) (0 0))+ ((4 2) (3 2)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 2)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt (hash (hash "0" n) "obtain"))) (3 2))+ (strand-map 0 1 2 3)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-0 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain")))))+ (label 66)+ (parent 65)+ (unrealized (4 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (v n data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 tpm-2 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-1) (tpm tpm-2) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 3) (0 0)) ((4 2) (3 2)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 2)) ((5 2) (4 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt-0 (hash "0" n))) (4 1))+ (strand-map 0 1 2 3 4)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-0 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm-2 (cat "extend" pcr-id-1 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 67)+ (parent 66)+ (unrealized (5 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (v n data) (pcr-id pcr-id-0 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id) (tpm tpm) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 3) (0 0)) ((4 2) (3 2)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 2)) ((5 2) (4 1)))+ + (operation nonce-test (contracted (pcr-id-1 pcr-id) (tpm-2 tpm)) n+ (5 0) (ch-msg tpm (cat "extend" pcr-id n)))+ (strand-map 0 1 2 3 4 5)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-0 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 68)+ (parent 67)+ (realized)+ (shape)+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))))+ (origs (pt-0 (5 2)) (pt (4 2)) (k (2 1)) (n (1 0)) (v (1 3))))++(comment "Nothing left to do")++(defprotocol envelope-plus-2 basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule pcr-id-identifies-pcr+ (forall ((y z strd) (pcr-id text) (pcr pcr-0 locn))+ (implies+ (and (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "pcr-id" y pcr-id)+ (p "tpm-extend-enc" "pcr-id" z pcr-id)+ (p "tpm-extend-enc" "pcr" y pcr)+ (p "tpm-extend-enc" "pcr" z pcr-0))+ (= pcr pcr-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 69)+ (unrealized (0 0) (1 2))+ (preskeleton)+ (origs (v (1 3)) (n (1 0)))+ (comment "Not a skeleton"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (precedes ((1 3) (0 0)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 70)+ (parent 69)+ (unrealized (0 0) (1 2))+ (origs (v (1 3)) (n (1 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm tpm-0 chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm-0))+ (precedes ((1 3) (0 0)) ((2 1) (1 2)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpm)+ (auth tpm-0)+ (operation encryption-test (added-strand tpm-create-key 2)+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik) (1 2))+ (strand-map 0 1)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 71)+ (parent 70)+ (unrealized (0 0) (2 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (precedes ((1 1) (2 0)) ((1 3) (0 0)) ((2 1) (1 2)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpm)+ (auth tpm)+ (operation channel-test (displaced 3 1 alice 2)+ (ch-msg tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain"))) (2 0))+ (strand-map 0 1 2)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 72)+ (parent 71)+ (unrealized (0 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (pt pval)+ (tpm tpm-0 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (precedes ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2)) ((3 2) (0 0)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ + (operation encryption-test (added-strand tpm-quote 3)+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik)+ (0 0))+ (strand-map 0 1 2)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))))+ (label 73)+ (parent 72)+ (unrealized (3 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (precedes ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2)) ((3 2) (0 0))+ ((4 2) (3 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt (hash (hash "0" n) "refuse"))) (3 1))+ (strand-map 0 1 2 3)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-1 (cat "extend" pcr-id-1 "refuse"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse")))))+ (label 74)+ (parent 73)+ (unrealized (4 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 tpm-2 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-2) (tpm tpm-2) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 2) (0 0)) ((4 2) (3 1)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 1)) ((5 2) (4 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt-0 (hash "0" n))) (4 1))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-1 (cat "extend" pcr-id-1 "refuse"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse"))))+ ((recv tpm-2 (cat "extend" pcr-id-2 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 75)+ (parent 74)+ (unrealized (5 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 2) (0 0)) ((4 2) (3 1)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 1)) ((5 2) (4 1)))+ + (operation nonce-test (contracted (pcr-id-2 pcr-id-0) (tpm-2 tpm)) n+ (5 0) (ch-msg tpm (cat "extend" pcr-id-0 n)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-1 (cat "extend" pcr-id-1 "refuse"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 76)+ (parent 75)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm))))+ (origs (pt-0 (5 2)) (pt (4 2)) (n (1 0)) (k (2 1)) (v (1 3))))++(comment "Nothing left to do")++(defprotocol envelope-plus-2 basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule pcr-id-identifies-pcr+ (forall ((y z strd) (pcr-id text) (pcr pcr-0 locn))+ (implies+ (and (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "pcr-id" y pcr-id)+ (p "tpm-extend-enc" "pcr-id" z pcr-id)+ (p "tpm-extend-enc" "pcr" y pcr)+ (p "tpm-extend-enc" "pcr" z pcr-0))+ (= pcr pcr-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 77)+ (unrealized (0 0) (1 0) (2 2))+ (preskeleton)+ (origs (v (2 3)) (n (2 0)))+ (comment "Not a skeleton"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (precedes ((2 3) (0 0)) ((2 3) (1 0)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 78)+ (parent 77)+ (unrealized (0 0) (2 2))+ (origs (v (2 3)) (n (2 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm tpm-0 chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm-0))+ (precedes ((2 3) (0 0)) ((2 3) (1 0)) ((3 1) (2 2)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpm)+ (auth tpm-0)+ (operation encryption-test (added-strand tpm-create-key 2)+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik) (2 2))+ (strand-map 0 1 2)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 79)+ (parent 78)+ (unrealized (0 0) (1 0) (3 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (precedes ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (1 0)) ((3 1) (2 2)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpm)+ (auth tpm)+ (operation channel-test (displaced 4 2 alice 2)+ (ch-msg tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain"))) (3 0))+ (strand-map 0 1 2 3)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 80)+ (parent 79)+ (unrealized (0 0) (1 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (current-value mesg) (n v data) (pcr-id pcr-id-0 pcr-id-1 text)+ (k aik aik-0 akey) (pt pval) (tpm tpm-0 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v) (current-value current-value)+ (pcr-id pcr-id-1) (k k) (aik aik-0) (tpm tpm-0) (pcr pcr))+ (precedes ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (4 0)) ((3 1) (2 2))+ ((4 3) (1 0)))+ (non-orig aik aik-0 (invk k))+ (uniq-orig n v k)+ (conf tpm)+ (auth tpm)+ (operation nonce-test (added-strand tpm-decrypt 4) v (1 0) (enc v k))+ (strand-map 0 1 2 3)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-1 current-value aik-0))+ (load pcr (cat pt current-value)) (send v)))+ (label 81)+ (parent 80)+ (unrealized (0 0) (4 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (pt pval)+ (tpm tpm-0 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (precedes ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (4 0)) ((3 1) (2 2))+ ((4 3) (1 0)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ + (operation encryption-test (displaced 5 3 tpm-create-key 2)+ (enc "created" k pcr-id-1 current-value aik-0) (4 1))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v)))+ (label 82)+ (parent 81)+ (unrealized (0 0) (4 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (precedes ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (4 0)) ((3 1) (2 2))+ ((4 3) (1 0)) ((5 2) (4 2)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt (hash (hash "0" n) "obtain"))) (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain")))))+ (label 83)+ (parent 82)+ (unrealized (0 0) (5 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 tpm-2 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-2) (tpm tpm-2) (pcr pcr))+ (precedes ((2 0) (6 0)) ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (4 0))+ ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2)) ((6 2) (5 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr (cat pt-0 (hash "0" n))) (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm-2 (cat "extend" pcr-id-2 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 84)+ (parent 83)+ (unrealized (0 0) (6 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (precedes ((2 0) (6 0)) ((2 1) (3 0)) ((2 3) (0 0)) ((2 3) (4 0))+ ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2)) ((6 2) (5 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)))+ + (operation nonce-test (contracted (pcr-id-2 pcr-id-0) (tpm-2 tpm)) n+ (6 0) (ch-msg tpm (cat "extend" pcr-id-0 n)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 85)+ (parent 84)+ (unrealized (0 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pt-1 pt-2 pval) (tpm tpm-0 tpm-1 tpm-2 chan)+ (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-2) (pcr pcr-0))+ (precedes ((2 0) (6 0)) ((2 1) (3 0)) ((2 3) (4 0)) ((2 3) (7 0))+ ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2)) ((6 2) (5 1))+ ((7 2) (0 0)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)))+ + (operation encryption-test (added-strand tpm-quote 3)+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik)+ (0 0))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-2 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))))+ (label 86)+ (parent 85)+ (unrealized (7 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 text) (k aik akey)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (tpm tpm-0 tpm-1 tpm-2 tpm-3 chan)+ (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-2) (pcr pcr-0))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-2) (tpm tpm-3)+ (pcr pcr-0))+ (precedes ((2 0) (6 0)) ((2 1) (3 0)) ((2 3) (4 0)) ((2 3) (7 0))+ ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2)) ((6 2) (5 1))+ ((7 2) (0 0)) ((8 2) (7 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)) ((8 2) (7 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr-0 (cat pt-2 (hash (hash "0" n) "refuse"))) (7 1))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-2 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-3 (cat "extend" pcr-id-2 "refuse"))+ (load pcr-0 (cat pt-3 (hash "0" n)))+ (stor pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))))+ (label 87)+ (parent 86)+ (unrealized (8 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 pcr-id-3 text)+ (k aik akey) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval)+ (tpm tpm-0 tpm-1 tpm-2 tpm-3 tpm-4 chan) (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-2) (pcr pcr-0))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-2) (tpm tpm-3)+ (pcr pcr-0))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-3) (tpm tpm-4) (pcr pcr-0))+ (precedes ((2 0) (6 0)) ((2 0) (9 0)) ((2 1) (3 0)) ((2 3) (4 0))+ ((2 3) (7 0)) ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2))+ ((6 2) (5 1)) ((7 2) (0 0)) ((8 2) (7 1)) ((9 2) (8 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)) ((8 2) (7 1)) ((9 2) (8 1)))+ + (operation channel-test (added-strand tpm-extend-enc 3)+ (ch-msg pcr-0 (cat pt-3 (hash "0" n))) (8 1))+ (strand-map 0 1 2 3 4 5 6 7 8)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-2 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-3 (cat "extend" pcr-id-2 "refuse"))+ (load pcr-0 (cat pt-3 (hash "0" n)))+ (stor pcr-0 (cat pt-2 (hash (hash "0" n) "refuse"))))+ ((recv tpm-4 (cat "extend" pcr-id-3 n)) (load pcr-0 (cat pt-4 "0"))+ (stor pcr-0 (cat pt-3 (hash "0" n)))))+ (label 88)+ (parent 87)+ (unrealized (9 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 text) (k aik akey)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval)+ (tpm tpm-0 tpm-1 tpm-2 tpm-3 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-2) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-2) (tpm tpm-3)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (precedes ((2 0) (6 0)) ((2 0) (9 0)) ((2 1) (3 0)) ((2 3) (4 0))+ ((2 3) (7 0)) ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2))+ ((6 2) (5 1)) ((7 2) (0 0)) ((8 2) (7 1)) ((9 2) (8 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)) ((8 2) (7 1)) ((9 2) (8 1)))+ + (operation nonce-test+ (contracted (pcr-0 pcr) (pcr-id-3 pcr-id-0) (tpm-4 tpm)) n (9 0)+ (ch-msg tpm (cat "extend" pcr-id-0 n)))+ (strand-map 0 1 2 3 4 5 6 7 8 9)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-2 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-3 (cat "extend" pcr-id-2 "refuse"))+ (load pcr (cat pt-3 (hash "0" n)))+ (stor pcr (cat pt-2 (hash (hash "0" n) "refuse"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-4 "0"))+ (stor pcr (cat pt-3 (hash "0" n)))))+ (label 89)+ (parent 88)+ (realized)+ (shape)+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm))))+ (origs (pt-3 (9 2)) (pt-2 (8 2)) (pt-0 (6 2)) (pt (5 2)) (k (3 1))+ (n (2 0)) (v (2 3))))++(comment "Nothing left to do")
+ tst/defact-locn_envelope_shapes.tst view
@@ -0,0 +1,1919 @@+(comment "CPSA 4.4.5")+(comment "Extracted shapes")++(herald "Envelope Protocol, location-based version" (bound 30)+ (limit 1200))++(comment "CPSA 4.4.5")++(comment "All input read from tst/locn_envelope.scm")++(comment "Step count limited to 1200")++(comment "Strand count bounded at 30")++(defprotocol envelope basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope+ (vars (v n data) (pcr-id text) (k aik akey) (tpm chan))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig v n)+ (conf tpm)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 0)+ (unrealized (0 0) (1 2))+ (preskeleton)+ (origs (v (1 3)) (n (1 0)))+ (comment "Not a skeleton"))++(defskeleton envelope+ (vars (v n data) (pcr-id pcr-id-0 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id) (tpm tpm) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 3) (0 0)) ((4 2) (3 2)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 2)) ((5 2) (4 1)))+ (operation nonce-test (contracted (pcr-id-1 pcr-id) (tpm-2 tpm)) n+ (5 0) (ch-msg tpm (cat "extend" pcr-id n)))+ (strand-map 0 1 2 3 4 5)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-0 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 8)+ (parent 0)+ (realized)+ (shape)+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))))+ (origs (pt-0 (5 2)) (pt (4 2)) (k (2 1)) (n (1 0)) (v (1 3))))++(comment "Nothing left to do")++(defprotocol envelope basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 9)+ (unrealized (0 0) (1 2))+ (preskeleton)+ (origs (v (1 3)) (n (1 0)))+ (comment "Not a skeleton"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 2) (0 0)) ((4 2) (3 1)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 1)) ((5 2) (4 1)))+ (operation nonce-test (contracted (pcr-id-2 pcr-id-0) (tpm-2 tpm)) n+ (5 0) (ch-msg tpm (cat "extend" pcr-id-0 n)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-1 (cat "extend" pcr-id-1 "refuse"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 16)+ (parent 9)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm))))+ (origs (pt-0 (5 2)) (pt (4 2)) (n (1 0)) (k (2 1)) (v (1 3))))++(comment "Nothing left to do")++(defprotocol envelope basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 17)+ (unrealized (0 0) (1 0) (2 2))+ (preskeleton)+ (origs (v (2 3)) (n (2 0)))+ (comment "Not a skeleton"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 text) (k aik akey)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval)+ (tpm tpm-0 tpm-1 tpm-2 tpm-3 chan) (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-2) (pcr pcr-0))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-2) (tpm tpm-3)+ (pcr pcr-0))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr-0))+ (precedes ((2 0) (6 0)) ((2 0) (9 0)) ((2 1) (3 0)) ((2 3) (4 0))+ ((2 3) (7 0)) ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2))+ ((6 2) (5 1)) ((7 2) (0 0)) ((8 2) (7 1)) ((9 2) (8 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)) ((8 2) (7 1)) ((9 2) (8 1)))+ (operation nonce-test (contracted (pcr-id-3 pcr-id-0) (tpm-4 tpm)) n+ (9 0) (ch-msg tpm (cat "extend" pcr-id-0 n)))+ (strand-map 0 1 2 3 4 5 6 7 8 9)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-2 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-3 (cat "extend" pcr-id-2 "refuse"))+ (load pcr-0 (cat pt-3 (hash "0" n)))+ (stor pcr-0 (cat pt-2 (hash (hash "0" n) "refuse"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr-0 (cat pt-4 "0"))+ (stor pcr-0 (cat pt-3 (hash "0" n)))))+ (label 29)+ (parent 17)+ (realized)+ (shape)+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm))))+ (origs (pt-3 (9 2)) (pt-2 (8 2)) (pt-0 (6 2)) (pt (5 2)) (k (3 1))+ (n (2 0)) (v (2 3))))++(comment "Nothing left to do")++(defprotocol envelope-plus basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule ordered-extends+ (forall ((y z strd) (pcr locn))+ (implies+ (and (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "pcr" y pcr)+ (p "tpm-extend-enc" "pcr" z pcr))+ (or+ (= y z)+ (prec y (idx 2) z (idx 1))+ (prec z (idx 2) y (idx 1))))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope-plus+ (vars (v n data) (pcr-id text) (k aik akey) (tpm chan))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig v n)+ (conf tpm)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 30)+ (unrealized (0 0) (1 2))+ (preskeleton)+ (origs (v (1 3)) (n (1 0)))+ (comment "Not a skeleton"))++(defskeleton envelope-plus+ (vars (v n data) (pcr-id pcr-id-0 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id) (tpm tpm) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 3) (0 0)) ((4 2) (3 2)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 2)) ((5 2) (4 1)))+ (operation nonce-test (contracted (pcr-id-1 pcr-id) (tpm-2 tpm)) n+ (5 0) (ch-msg tpm (cat "extend" pcr-id n)))+ (strand-map 0 1 2 3 4 5)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-0 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 38)+ (parent 30)+ (realized)+ (shape)+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))))+ (origs (pt-0 (5 2)) (pt (4 2)) (k (2 1)) (n (1 0)) (v (1 3))))++(comment "Nothing left to do")++(defprotocol envelope-plus basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule ordered-extends+ (forall ((y z strd) (pcr locn))+ (implies+ (and (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "pcr" y pcr)+ (p "tpm-extend-enc" "pcr" z pcr))+ (or+ (= y z)+ (prec y (idx 2) z (idx 1))+ (prec z (idx 2) y (idx 1))))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 39)+ (unrealized (0 0) (1 2))+ (preskeleton)+ (origs (v (1 3)) (n (1 0)))+ (comment "Not a skeleton"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 2) (0 0)) ((4 2) (3 1)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 1)) ((5 2) (4 1)))+ (operation nonce-test (contracted (pcr-id-2 pcr-id-0) (tpm-2 tpm)) n+ (5 0) (ch-msg tpm (cat "extend" pcr-id-0 n)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-1 (cat "extend" pcr-id-1 "refuse"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 46)+ (parent 39)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm))))+ (origs (pt-0 (5 2)) (pt (4 2)) (n (1 0)) (k (2 1)) (v (1 3))))++(comment "Nothing left to do")++(defprotocol envelope-plus basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule ordered-extends+ (forall ((y z strd) (pcr locn))+ (implies+ (and (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "pcr" y pcr)+ (p "tpm-extend-enc" "pcr" z pcr))+ (or+ (= y z)+ (prec y (idx 2) z (idx 1))+ (prec z (idx 2) y (idx 1))))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 47)+ (unrealized (0 0) (1 0) (2 2))+ (preskeleton)+ (origs (v (2 3)) (n (2 0)))+ (comment "Not a skeleton"))++(defskeleton envelope-plus+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 text) (k aik akey)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval)+ (tpm tpm-0 tpm-1 tpm-2 tpm-3 chan) (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-2) (pcr pcr-0))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-2) (tpm tpm-3)+ (pcr pcr-0))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr-0))+ (precedes ((2 0) (6 0)) ((2 0) (9 0)) ((2 1) (3 0)) ((2 3) (4 0))+ ((2 3) (7 0)) ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2))+ ((6 2) (5 1)) ((7 2) (0 0)) ((8 2) (7 1)) ((9 2) (8 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)) ((8 2) (7 1)) ((9 2) (8 1)))+ (operation nonce-test (contracted (pcr-id-3 pcr-id-0) (tpm-4 tpm)) n+ (9 0) (ch-msg tpm (cat "extend" pcr-id-0 n)))+ (strand-map 0 1 2 3 4 5 6 7 8 9)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-2 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-3 (cat "extend" pcr-id-2 "refuse"))+ (load pcr-0 (cat pt-3 (hash "0" n)))+ (stor pcr-0 (cat pt-2 (hash (hash "0" n) "refuse"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr-0 (cat pt-4 "0"))+ (stor pcr-0 (cat pt-3 (hash "0" n)))))+ (label 59)+ (parent 47)+ (realized)+ (shape)+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm))))+ (origs (pt-3 (9 2)) (pt-2 (8 2)) (pt-0 (6 2)) (pt (5 2)) (k (3 1))+ (n (2 0)) (v (2 3))))++(comment "Nothing left to do")++(defprotocol envelope-plus-2 basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule pcr-id-identifies-pcr+ (forall ((y z strd) (pcr-id text) (pcr pcr-0 locn))+ (implies+ (and (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "pcr-id" y pcr-id)+ (p "tpm-extend-enc" "pcr-id" z pcr-id)+ (p "tpm-extend-enc" "pcr" y pcr)+ (p "tpm-extend-enc" "pcr" z pcr-0))+ (= pcr pcr-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope-plus-2+ (vars (v n data) (pcr-id text) (k aik akey) (tpm chan))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig v n)+ (conf tpm)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 60)+ (unrealized (0 0) (1 2))+ (preskeleton)+ (origs (v (1 3)) (n (1 0)))+ (comment "Not a skeleton"))++(defskeleton envelope-plus-2+ (vars (v n data) (pcr-id pcr-id-0 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id) (tpm tpm) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 3) (0 0)) ((4 2) (3 2)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 2)) ((5 2) (4 1)))+ (operation nonce-test (contracted (pcr-id-1 pcr-id) (tpm-2 tpm)) n+ (5 0) (ch-msg tpm (cat "extend" pcr-id n)))+ (strand-map 0 1 2 3 4 5)+ (traces ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-0 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 68)+ (parent 60)+ (realized)+ (shape)+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))))+ (origs (pt-0 (5 2)) (pt (4 2)) (k (2 1)) (n (1 0)) (v (1 3))))++(comment "Nothing left to do")++(defprotocol envelope-plus-2 basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule pcr-id-identifies-pcr+ (forall ((y z strd) (pcr-id text) (pcr pcr-0 locn))+ (implies+ (and (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "pcr-id" y pcr-id)+ (p "tpm-extend-enc" "pcr-id" z pcr-id)+ (p "tpm-extend-enc" "pcr" y pcr)+ (p "tpm-extend-enc" "pcr" z pcr-0))+ (= pcr pcr-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 69)+ (unrealized (0 0) (1 2))+ (preskeleton)+ (origs (v (1 3)) (n (1 0)))+ (comment "Not a skeleton"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (precedes ((1 0) (5 0)) ((1 1) (2 0)) ((1 3) (3 0)) ((2 1) (1 2))+ ((3 2) (0 0)) ((4 2) (3 1)) ((5 2) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((4 2) (3 1)) ((5 2) (4 1)))+ (operation nonce-test (contracted (pcr-id-2 pcr-id-0) (tpm-2 tpm)) n+ (5 0) (ch-msg tpm (cat "extend" pcr-id-0 n)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-1 (cat "extend" pcr-id-1 "refuse"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n)))))+ (label 76)+ (parent 69)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm))))+ (origs (pt-0 (5 2)) (pt (4 2)) (n (1 0)) (k (2 1)) (v (1 3))))++(comment "Nothing left to do")++(defprotocol envelope-plus-2 basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id text) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "extend" pcr-id value))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok")))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id text) (k aik akey) (tpm chan))+ (trace (send tpm (cat "extend" pcr-id n))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 2))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule pcr-id-identifies-pcr+ (forall ((y z strd) (pcr-id text) (pcr pcr-0 locn))+ (implies+ (and (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "pcr-id" y pcr-id)+ (p "tpm-extend-enc" "pcr-id" z pcr-id)+ (p "tpm-extend-enc" "pcr" y pcr)+ (p "tpm-extend-enc" "pcr" z pcr-0))+ (= pcr pcr-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-extend-enc-at-1+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 3)) (trans z (idx 1))))))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 text) (k aik akey) (tpm chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpm)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 77)+ (unrealized (0 0) (1 0) (2 2))+ (preskeleton)+ (origs (v (2 3)) (n (2 0)))+ (comment "Not a skeleton"))++(defskeleton envelope-plus-2+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 pcr-id-2 text) (k aik akey)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval)+ (tpm tpm-0 tpm-1 tpm-2 tpm-3 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 4 (n n) (v v) (pcr-id pcr-id-0) (k k) (aik aik)+ (tpm tpm))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (tpm tpm-1)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-2) (pcr pcr))+ (defstrand tpm-extend-enc 3 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-2) (tpm tpm-3)+ (pcr pcr))+ (defstrand tpm-extend-enc 3 (value n) (current-value "0")+ (pcr-id pcr-id-0) (tpm tpm) (pcr pcr))+ (precedes ((2 0) (6 0)) ((2 0) (9 0)) ((2 1) (3 0)) ((2 3) (4 0))+ ((2 3) (7 0)) ((3 1) (2 2)) ((4 3) (1 0)) ((5 2) (4 2))+ ((6 2) (5 1)) ((7 2) (0 0)) ((8 2) (7 1)) ((9 2) (8 1)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpm)+ (auth tpm)+ (leads-to ((5 2) (4 2)) ((6 2) (5 1)) ((8 2) (7 1)) ((9 2) (8 1)))+ (operation nonce-test+ (contracted (pcr-0 pcr) (pcr-id-3 pcr-id-0) (tpm-4 tpm)) n (9 0)+ (ch-msg tpm (cat "extend" pcr-id-0 n)))+ (strand-map 0 1 2 3 4 5 6 7 8 9)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((send tpm (cat "extend" pcr-id-0 n))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((recv tpm-1 (cat "extend" pcr-id-1 "obtain"))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-1 "0"))+ (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-2 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-3 (cat "extend" pcr-id-2 "refuse"))+ (load pcr (cat pt-3 (hash "0" n)))+ (stor pcr (cat pt-2 (hash (hash "0" n) "refuse"))))+ ((recv tpm (cat "extend" pcr-id-0 n)) (load pcr (cat pt-4 "0"))+ (stor pcr (cat pt-3 (hash "0" n)))))+ (label 89)+ (parent 77)+ (realized)+ (shape)+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm))))+ (origs (pt-3 (9 2)) (pt-2 (8 2)) (pt-0 (6 2)) (pt (5 2)) (k (3 1))+ (n (2 0)) (v (2 3))))++(comment "Nothing left to do")
+ tst/defact-open-closed-multiloc.tst view
@@ -0,0 +1,857 @@+(herald open-closed (bound 44))++(comment "CPSA 4.4.5")+(comment "All input read from tst/open-closed-multiloc.scm")+(comment "Strand count bounded at 44")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor ls (cat "st" d o))+ (stor lk (cat "st-k" d o k)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule eff-dev-up-3+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 4)) (prec z (idx 3) z1 i))+ (or (= z z1)+ (and (p "dev-up" z (idx 5)) (prec z (idx 4) z1 i))))))+ (defgenrule cau-dev-up-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1)))))))++(defskeleton open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (uniq-orig k)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 0)+ (unrealized (0 1) (1 0))+ (preskeleton)+ (origs (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (precedes ((0 0) (1 0)))+ (uniq-orig k)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 1)+ (parent 0)+ (unrealized (0 1) (1 0))+ (origs (k (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old old1 mesg) (k skey) (d o name) (pt pt-0 pt-1 pt-2 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (precedes ((0 0) (2 0)) ((2 4) (1 0)))+ (uniq-orig k)+ (conf start-ch)+ (auth start-ch)+ + (operation nonce-test (added-strand dev-up 5) k (1 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt old))+ (load ls (cat pt-0 old1)) (stor ls (cat pt-1 "st" d o))+ (stor lk (cat pt-2 "st-k" d o k))))+ (label 2)+ (parent 1)+ (unrealized (0 1) (1 0))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor ls (cat "st" d o))+ (stor lk (cat "st-k" d o k)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule eff-dev-up-3+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 4)) (prec z (idx 3) z1 i))+ (or (= z z1)+ (and (p "dev-up" z (idx 5)) (prec z (idx 4) z1 i))))))+ (defgenrule cau-dev-up-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1)))))))++(defskeleton open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ (traces+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d o o)) (send (enc "you may pass" n k))))+ (label 3)+ (realized)+ (origs (n (0 3)))+ (comment "Not closed under rules"))++(defskeleton open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ (gen-st (cat "st" d o o))+ + (traces+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d o o)) (send (enc "you may pass" n k))))+ (label 4)+ (parent 3)+ (unrealized (0 2))+ (origs (n (0 3)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pval) (lk ls lk-0 locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (ls ls))+ (precedes ((1 3) (0 2)))+ (uniq-orig n)+ (gen-st (cat "st" d o o))+ (leads-to ((1 3) (0 2)))+ + (operation channel-test (added-strand dev-open 4)+ (ch-msg ls (cat pt-0 "st" d o o)) (0 2))+ (strand-map 0)+ (traces+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d o o)) (send (enc "you may pass" n k)))+ ((load lk-0 (cat pt-1 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-2 "st" d any))+ (stor ls (cat pt-0 "st" d o o))))+ (label 5)+ (parent 4)+ (realized)+ (shape)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls))))+ (origs (pt-0 (1 3)) (n (0 3))))++(comment "Nothing left to do")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor ls (cat "st" d o))+ (stor lk (cat "st-k" d o k)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule eff-dev-up-3+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 4)) (prec z (idx 3) z1 i))+ (or (= z z1)+ (and (p "dev-up" z (idx 5)) (prec z (idx 4) z1 i))))))+ (defgenrule cau-dev-up-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1)))))))++(defskeleton open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (uniq-orig k n)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0))+ (send (enc "you may pass" n k))))+ (label 6)+ (unrealized (0 1) (1 0) (1 1))+ (preskeleton)+ (origs (n (1 3)) (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (precedes ((0 0) (1 0)))+ (uniq-orig k n)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0))+ (send (enc "you may pass" n k))))+ (label 7)+ (parent 6)+ (unrealized (0 1) (1 0) (1 1))+ (origs (n (1 3)) (k (0 0)))+ (comment "Not closed under rules"))++(defskeleton open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (precedes ((0 0) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d-0 o-0 o-0))+ (conf start-ch)+ + (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0))+ (send (enc "you may pass" n k))))+ (label 8)+ (parent 7)+ (unrealized (0 1) (1 0) (1 1) (1 2))+ (origs (n (1 3)) (k (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o d-0 o-0 name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan)+ (lk ls lk-0 ls-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk-0) (ls ls-0))+ (precedes ((0 0) (2 0)) ((2 4) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d-0 o-0 o-0))+ (conf start-ch)+ (auth start-ch)+ + (operation nonce-test (added-strand dev-up 5) k (1 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk-0 (cat pt-1 old))+ (load ls-0 (cat pt-2 old1)) (stor ls-0 (cat pt-3 "st" d o))+ (stor lk-0 (cat pt-4 "st-k" d o k))))+ (label 9)+ (parent 8)+ (unrealized (0 1) (1 0) (1 1) (1 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk ls-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls-0))+ (precedes ((0 0) (2 0)) ((2 4) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 4) (1 0)))+ + (operation nonce-test+ (contracted (d-0 d) (o-0 o) (lk-0 lk) (pt-4 pt-3)) k (1 0)+ (ch-msg start-ch (cat "power-up" d o k))+ (ch-msg lk (cat pt-3 "st-k" d o k)))+ (strand-map 0 1 2)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-3 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls-0 (cat pt-1 old1)) (stor ls-0 (cat pt-2 "st" d o))+ (stor lk (cat pt-3 "st-k" d o k))))+ (label 10)+ (parent 9)+ (unrealized (0 1) (1 1) (1 2))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk ls-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls-0))+ (defstrand user-pass 1 (k k))+ (precedes ((0 0) (2 0)) ((2 4) (1 0)) ((3 0) (1 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 4) (1 0)))+ + (operation encryption-test (added-strand user-pass 1)+ (enc "may I pass" k) (1 1))+ (strand-map 0 1 2)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-3 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls-0 (cat pt-1 old1)) (stor ls-0 (cat pt-2 "st" d o))+ (stor lk (cat pt-3 "st-k" d o k))) ((send (enc "may I pass" k))))+ (label 11)+ (parent 10)+ (unrealized (0 1) (1 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk ls-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls-0))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((2 4) (1 0)) ((3 1) (1 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 4) (1 0)))+ + (operation encryption-test (added-listener k) (enc "may I pass" k)+ (1 1))+ (strand-map 0 1 2)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-3 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls-0 (cat pt-1 old1)) (stor ls-0 (cat pt-2 "st" d o))+ (stor lk (cat pt-3 "st-k" d o k))) ((recv k) (send k)))+ (label 12)+ (parent 10)+ (seen 14)+ (seen-ops+ (14+ (operation nonce-test (added-strand dev-up 5) k (3 0)+ (ch-msg start-ch (cat "power-up" d o k))) (strand-map 0 1 2 3)))+ (unrealized (0 1) (1 2) (3 0))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)+ (ls lk ls-0 lk-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls-0))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (ls ls))+ (precedes ((0 0) (2 0)) ((2 4) (1 0)) ((3 0) (1 1)) ((4 3) (1 2)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 4) (1 0)) ((4 3) (1 2)))+ + (operation channel-test (added-strand dev-open 4)+ (ch-msg ls (cat pt "st" d o o)) (1 2))+ (strand-map 0 1 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-3 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls-0 (cat pt-1 old1)) (stor ls-0 (cat pt-2 "st" d o))+ (stor lk (cat pt-3 "st-k" d o k))) ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-4 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-5 "st" d any))+ (stor ls (cat pt "st" d o o))))+ (label 13)+ (parent 11)+ (seen 15)+ (seen-ops+ (15+ (operation encryption-test (added-strand dev-up 6) (enc "up" k)+ (0 1)) (strand-map 0 1 4 2 3)))+ (unrealized (0 1))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk ls-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls-0))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((2 4) (1 0)) ((2 4) (3 0)) ((3 1) (1 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 4) (1 0)))+ + (operation nonce-test (displaced 4 2 dev-up 5) k (3 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-3 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls-0 (cat pt-1 old1)) (stor ls-0 (cat pt-2 "st" d o))+ (stor lk (cat pt-3 "st-k" d o k))) ((recv k) (send k)))+ (label 14)+ (parent 12)+ (unrealized (0 1) (1 2) (3 0))+ (dead)+ (comment "empty cohort"))++(defskeleton open-closed+ (vars (any old old1 mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)+ (ls lk lk-0 ls-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk-0) (ls ls))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk-0) (ls ls-0))+ (precedes ((0 0) (4 0)) ((2 0) (1 1)) ((3 3) (1 2)) ((4 4) (1 0))+ ((4 5) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((3 3) (1 2)) ((4 4) (1 0)))+ + (operation encryption-test (displaced 2 5 dev-up 6) (enc "up" k)+ (0 1))+ (strand-map 0 1 4 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk-0 (cat pt-5 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((send (enc "may I pass" k)))+ ((load lk (cat pt-0 "st-k" d o k-0)) (recv (enc "open" d o n-0 k-0))+ (load ls (cat pt-1 "st" d any)) (stor ls (cat pt "st" d o o)))+ ((recv start-ch (cat "power-up" d o k)) (load lk-0 (cat pt-2 old))+ (load ls-0 (cat pt-3 old1)) (stor ls-0 (cat pt-4 "st" d o))+ (stor lk-0 (cat pt-5 "st-k" d o k)) (send (enc "up" k))))+ (label 15)+ (parent 13)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk-0) (ls ls))))+ (origs (pt-4 (4 3)) (pt-5 (4 4)) (pt (3 3)) (n (1 3)) (k (0 0))))++(defskeleton open-closed+ (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)+ (ls lk ls-0 lk-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls-0))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (ls ls))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((0 0) (5 0)) ((2 4) (1 0)) ((3 0) (1 1))+ ((4 3) (1 2)) ((5 1) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 4) (1 0)) ((4 3) (1 2)))+ + (operation encryption-test (added-listener k) (enc "up" k) (0 1))+ (strand-map 0 1 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-3 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls-0 (cat pt-1 old1)) (stor ls-0 (cat pt-2 "st" d o))+ (stor lk (cat pt-3 "st-k" d o k))) ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-4 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-5 "st" d any))+ (stor ls (cat pt "st" d o o))) ((recv k) (send k)))+ (label 16)+ (parent 13)+ (seen 17)+ (seen-ops+ (17+ (operation nonce-test (added-strand dev-up 5) k (5 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (5 0))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)+ (ls lk ls-0 lk-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls-0))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (ls ls))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((2 4) (1 0)) ((2 4) (5 0)) ((3 0) (1 1))+ ((4 3) (1 2)) ((5 1) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 4) (1 0)) ((4 3) (1 2)))+ + (operation nonce-test (displaced 6 2 dev-up 5) k (5 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-3 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls-0 (cat pt-1 old1)) (stor ls-0 (cat pt-2 "st" d o))+ (stor lk (cat pt-3 "st-k" d o k))) ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-4 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-5 "st" d any))+ (stor ls (cat pt "st" d o o))) ((recv k) (send k)))+ (label 17)+ (parent 16)+ (unrealized (5 0))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")
+ tst/defact-open-closed-multiloc_shapes.tst view
@@ -0,0 +1,494 @@+(comment "CPSA 4.4.5")+(comment "Extracted shapes")++(herald open-closed (bound 44))++(comment "CPSA 4.4.5")++(comment "All input read from tst/open-closed-multiloc.scm")++(comment "Strand count bounded at 44")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor ls (cat "st" d o))+ (stor lk (cat "st-k" d o k)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule eff-dev-up-3+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 4)) (prec z (idx 3) z1 i))+ (or (= z z1)+ (and (p "dev-up" z (idx 5)) (prec z (idx 4) z1 i))))))+ (defgenrule cau-dev-up-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1)))))))++(defskeleton open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (uniq-orig k)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 0)+ (unrealized (0 1) (1 0))+ (preskeleton)+ (origs (k (0 0)))+ (comment "Not a skeleton"))++(comment "Nothing left to do")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor ls (cat "st" d o))+ (stor lk (cat "st-k" d o k)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule eff-dev-up-3+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 4)) (prec z (idx 3) z1 i))+ (or (= z z1)+ (and (p "dev-up" z (idx 5)) (prec z (idx 4) z1 i))))))+ (defgenrule cau-dev-up-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1)))))))++(defskeleton open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ (traces+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d o o)) (send (enc "you may pass" n k))))+ (label 3)+ (realized)+ (origs (n (0 3)))+ (comment "Not closed under rules"))++(defskeleton open-closed+ (vars (any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pval) (lk ls lk-0 locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (ls ls))+ (precedes ((1 3) (0 2)))+ (uniq-orig n)+ (gen-st (cat "st" d o o))+ (leads-to ((1 3) (0 2)))+ (operation channel-test (added-strand dev-open 4)+ (ch-msg ls (cat pt-0 "st" d o o)) (0 2))+ (strand-map 0)+ (traces+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d o o)) (send (enc "you may pass" n k)))+ ((load lk-0 (cat pt-1 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-2 "st" d any))+ (stor ls (cat pt-0 "st" d o o))))+ (label 5)+ (parent 3)+ (realized)+ (shape)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls))))+ (origs (pt-0 (1 3)) (n (0 3))))++(comment "Nothing left to do")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor ls (cat "st" d o))+ (stor lk (cat "st-k" d o k)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule eff-dev-up-3+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 4)) (prec z (idx 3) z1 i))+ (or (= z z1)+ (and (p "dev-up" z (idx 5)) (prec z (idx 4) z1 i))))))+ (defgenrule cau-dev-up-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1)))))))++(defskeleton open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (uniq-orig k n)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0))+ (send (enc "you may pass" n k))))+ (label 6)+ (unrealized (0 1) (1 0) (1 1))+ (preskeleton)+ (origs (n (1 3)) (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton open-closed+ (vars (any old old1 mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)+ (ls lk lk-0 ls-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk-0) (ls ls))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk-0) (ls ls-0))+ (precedes ((0 0) (4 0)) ((2 0) (1 1)) ((3 3) (1 2)) ((4 4) (1 0))+ ((4 5) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((3 3) (1 2)) ((4 4) (1 0)))+ (operation encryption-test (displaced 2 5 dev-up 6) (enc "up" k)+ (0 1))+ (strand-map 0 1 4 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk-0 (cat pt-5 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((send (enc "may I pass" k)))+ ((load lk (cat pt-0 "st-k" d o k-0)) (recv (enc "open" d o n-0 k-0))+ (load ls (cat pt-1 "st" d any)) (stor ls (cat pt "st" d o o)))+ ((recv start-ch (cat "power-up" d o k)) (load lk-0 (cat pt-2 old))+ (load ls-0 (cat pt-3 old1)) (stor ls-0 (cat pt-4 "st" d o))+ (stor lk-0 (cat pt-5 "st-k" d o k)) (send (enc "up" k))))+ (label 15)+ (parent 6)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk-0) (ls ls))))+ (origs (pt-4 (4 3)) (pt-5 (4 4)) (pt (3 3)) (n (1 3)) (k (0 0))))++(comment "Nothing left to do")
+ tst/defact-open-closed-tag.tst view
@@ -0,0 +1,1158 @@+(herald open-closed (bound 44))++(comment "CPSA 4.4.5")+(comment "All input read from tst/open-closed-tag.scm")+(comment "Strand count bounded at 44")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d "closed")) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d "opened"))+ (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d "closed"))+ (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d "opened")) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z "opened"))+ (gen-st (cat "st" d "opened")))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d "opened")))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2))))))++(defskeleton open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (uniq-orig k)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 0)+ (unrealized (0 1) (1 0))+ (preskeleton)+ (origs (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (precedes ((0 0) (1 0)))+ (uniq-orig k)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 1)+ (parent 0)+ (unrealized (0 1) (1 0))+ (origs (k (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old mesg) (k skey) (d o name) (pt pt-0 pval) (start-ch chan)+ (lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)))+ (uniq-orig k)+ (conf start-ch)+ (auth start-ch)+ + (operation nonce-test (added-strand dev-up 3) k (1 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt old))+ (stor lk (cat pt-0 "st-k" d o k))))+ (label 2)+ (parent 1)+ (unrealized (0 1) (1 0))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d "closed")) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d "opened"))+ (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d "closed"))+ (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d "opened")) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z "opened"))+ (gen-st (cat "st" d "opened")))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d "opened")))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2))))))++(defskeleton open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ (traces+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d "opened"))+ (send (enc "you may pass" n k))))+ (label 3)+ (realized)+ (origs (n (0 3)))+ (comment "Not closed under rules"))++(defskeleton open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ (gen-st (cat "st" d "opened"))+ + (traces+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d "opened"))+ (send (enc "you may pass" n k))))+ (label 4)+ (parent 3)+ (unrealized (0 2))+ (origs (n (0 3)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (any mesg) (k k-0 skey) (n n-0 text) (d o o-0 name)+ (pt pt-0 pt-1 pt-2 pval) (lk ls lk-0 locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o-0)+ (lk lk-0) (ls ls))+ (precedes ((1 3) (0 2)))+ (uniq-orig n)+ (gen-st (cat "st" d "opened"))+ (leads-to ((1 3) (0 2)))+ + (operation channel-test (added-strand dev-open 4)+ (ch-msg ls (cat pt-0 "st" d "opened")) (0 2))+ (strand-map 0)+ (traces+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d "opened"))+ (send (enc "you may pass" n k)))+ ((load lk-0 (cat pt-1 "st-k" d o-0 k-0))+ (recv (enc "open" d o-0 n-0 k-0)) (load ls (cat pt-2 "st" d any))+ (stor ls (cat pt-0 "st" d "opened"))))+ (label 5)+ (parent 4)+ (realized)+ (shape)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls))))+ (origs (pt-0 (1 3)) (n (0 3))))++(comment "Nothing left to do")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d "closed")) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d "opened"))+ (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d "closed"))+ (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d "opened")) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z "opened"))+ (gen-st (cat "st" d "opened")))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d "opened")))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2))))))++(defskeleton open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (uniq-orig k n)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d-0 "opened"))+ (send (enc "you may pass" n k))))+ (label 6)+ (unrealized (0 1) (1 0) (1 1))+ (preskeleton)+ (origs (n (1 3)) (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (precedes ((0 0) (1 0)))+ (uniq-orig k n)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d-0 "opened"))+ (send (enc "you may pass" n k))))+ (label 7)+ (parent 6)+ (unrealized (0 1) (1 0) (1 1))+ (origs (n (1 3)) (k (0 0)))+ (comment "Not closed under rules"))++(defskeleton open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (precedes ((0 0) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d-0 "opened"))+ (conf start-ch)+ + (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d-0 "opened"))+ (send (enc "you may pass" n k))))+ (label 8)+ (parent 7)+ (unrealized (0 1) (1 0) (1 1) (1 2))+ (origs (n (1 3)) (k (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old mesg) (k skey) (n text) (d o d-0 o-0 name)+ (pt pt-0 pt-1 pt-2 pval) (start-ch chan) (lk ls lk-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk-0))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d-0 "opened"))+ (conf start-ch)+ (auth start-ch)+ + (operation nonce-test (added-strand dev-up 3) k (1 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d-0 "opened"))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk-0 (cat pt-1 old))+ (stor lk-0 (cat pt-2 "st-k" d o k))))+ (label 9)+ (parent 8)+ (unrealized (0 1) (1 0) (1 1) (1 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old mesg) (k skey) (n text) (d o name) (pt pt-0 pt-1 pval)+ (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d "opened"))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 2) (1 0)))+ + (operation nonce-test+ (contracted (d-0 d) (o-0 o) (lk-0 lk) (pt-2 pt-1)) k (1 0)+ (ch-msg start-ch (cat "power-up" d o k))+ (ch-msg lk (cat pt-1 "st-k" d o k)))+ (strand-map 0 1 2)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d "opened"))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k))))+ (label 10)+ (parent 9)+ (unrealized (0 1) (1 1) (1 2))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton open-closed+ (vars (old mesg) (k skey) (n text) (d o name) (pt pt-0 pt-1 pval)+ (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk))+ (defstrand user-pass 1 (k k))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((3 0) (1 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d "opened"))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 2) (1 0)))+ + (operation encryption-test (added-strand user-pass 1)+ (enc "may I pass" k) (1 1))+ (strand-map 0 1 2)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d "opened"))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k))) ((send (enc "may I pass" k))))+ (label 11)+ (parent 10)+ (unrealized (0 1) (1 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old mesg) (k skey) (n text) (d o name) (pt pt-0 pt-1 pval)+ (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((2 2) (1 0)) ((3 1) (1 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d "opened"))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 2) (1 0)))+ + (operation encryption-test (added-listener k) (enc "may I pass" k)+ (1 1))+ (strand-map 0 1 2)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d "opened"))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k))) ((recv k) (send k)))+ (label 12)+ (parent 10)+ (seen 14)+ (seen-ops+ (14+ (operation nonce-test (added-strand dev-up 3) k (3 0)+ (ch-msg start-ch (cat "power-up" d o k))) (strand-map 0 1 2 3)))+ (unrealized (0 1) (1 2) (3 0))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old any mesg) (k k-0 skey) (n n-0 text) (d o o-0 name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk lk-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o-0)+ (lk lk-0) (ls ls))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((3 0) (1 1)) ((4 3) (1 2)))+ (uniq-orig k n)+ (gen-st (cat "st" d "opened"))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 2) (1 0)) ((4 3) (1 2)))+ + (operation channel-test (added-strand dev-open 4)+ (ch-msg ls (cat pt "st" d "opened")) (1 2))+ (strand-map 0 1 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d "opened"))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k))) ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-2 "st-k" d o-0 k-0))+ (recv (enc "open" d o-0 n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (stor ls (cat pt "st" d "opened"))))+ (label 13)+ (parent 11)+ (seen 15)+ (seen-ops+ (15+ (operation encryption-test (added-strand dev-up 6) (enc "up" k)+ (0 1)) (strand-map 0 1 4 2 3)))+ (unrealized (0 1))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton open-closed+ (vars (old mesg) (k skey) (n text) (d o name) (pt pt-0 pt-1 pval)+ (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((2 2) (3 0)) ((3 1) (1 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d "opened"))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 2) (1 0)))+ + (operation nonce-test (displaced 4 2 dev-up 3) k (3 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d "opened"))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k))) ((recv k) (send k)))+ (label 14)+ (parent 12)+ (unrealized (0 1) (1 2) (3 0))+ (dead)+ (comment "empty cohort"))++(defskeleton open-closed+ (vars (any old old1 mesg) (k k-0 skey) (n n-0 text) (o d o-0 name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)+ (ls lk lk-0 ls-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o-0) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o-0) (lk lk-0) (ls ls))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o-0)+ (start-ch start-ch) (lk lk-0) (ls ls-0))+ (precedes ((0 0) (4 0)) ((2 0) (1 1)) ((3 3) (1 2)) ((4 2) (1 0))+ ((4 5) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d "opened"))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((3 3) (1 2)) ((4 2) (1 0)))+ + (operation encryption-test (displaced 2 5 dev-up 6) (enc "up" k)+ (0 1))+ (strand-map 0 1 4 2 3)+ (traces ((send start-ch (cat "power-up" d o-0 k)) (recv (enc "up" k)))+ ((load lk-0 (cat pt-3 "st-k" d o-0 k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d "opened"))+ (send (enc "you may pass" n k))) ((send (enc "may I pass" k)))+ ((load lk (cat pt-0 "st-k" d o k-0)) (recv (enc "open" d o n-0 k-0))+ (load ls (cat pt-1 "st" d any))+ (stor ls (cat pt "st" d "opened")))+ ((recv start-ch (cat "power-up" d o-0 k)) (load lk-0 (cat pt-2 old))+ (stor lk-0 (cat pt-3 "st-k" d o-0 k)) (load ls-0 (cat pt-4 old1))+ (stor ls-0 (cat pt-5 "st" d "closed")) (send (enc "up" k))))+ (label 15)+ (parent 13)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((k k) (d d) (o o-0) (start-ch start-ch) (n n) (d-0 d) (o-0 o-0)+ (lk lk-0) (ls ls))))+ (origs (pt-3 (4 2)) (pt-5 (4 4)) (pt (3 3)) (n (1 3)) (k (0 0))))++(defskeleton open-closed+ (vars (old any mesg) (k k-0 skey) (n n-0 text) (d o o-0 name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk lk-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o-0)+ (lk lk-0) (ls ls))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((0 0) (5 0)) ((2 2) (1 0)) ((3 0) (1 1))+ ((4 3) (1 2)) ((5 1) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d "opened"))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 2) (1 0)) ((4 3) (1 2)))+ + (operation encryption-test (added-listener k) (enc "up" k) (0 1))+ (strand-map 0 1 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d "opened"))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k))) ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-2 "st-k" d o-0 k-0))+ (recv (enc "open" d o-0 n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (stor ls (cat pt "st" d "opened"))) ((recv k) (send k)))+ (label 16)+ (parent 13)+ (seen 17)+ (seen-ops+ (17+ (operation nonce-test (added-strand dev-up 3) k (5 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (5 0))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old any mesg) (k k-0 skey) (n n-0 text) (d o o-0 name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk lk-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o-0)+ (lk lk-0) (ls ls))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((2 2) (5 0)) ((3 0) (1 1))+ ((4 3) (1 2)) ((5 1) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d "opened"))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 2) (1 0)) ((4 3) (1 2)))+ + (operation nonce-test (displaced 6 2 dev-up 3) k (5 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d "opened"))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k))) ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-2 "st-k" d o-0 k-0))+ (recv (enc "open" d o-0 n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (stor ls (cat pt "st" d "opened"))) ((recv k) (send k)))+ (label 17)+ (parent 16)+ (unrealized (5 0))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d "closed")) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d "opened"))+ (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d "closed"))+ (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d "opened")) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z "opened"))+ (gen-st (cat "st" d "opened")))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d "opened")))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2))))))++(defskeleton open-closed+ (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pt-6 pt-7 pval) (start-ch chan)+ (ls lk ls-0 lk-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls-0))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (ls ls))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((2 5) (0 1)) ((3 0) (1 1))+ ((4 3) (1 2)))+ (uniq-orig k n)+ (conf start-ch)+ (auth start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d "opened"))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (stor lk (cat pt-2 "st-k" d o k)) (load ls-0 (cat pt-3 old1))+ (stor ls-0 (cat pt-4 "st" d "closed")) (send (enc "up" k)))+ ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-5 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-6 "st" d any))+ (stor ls (cat pt-7 "st" d "opened"))))+ (label 18)+ (unrealized (1 0))+ (origs (pt-7 (4 3)) (pt-4 (2 4)) (pt-2 (2 2)) (n (1 3)) (k (0 0)))+ (comment "Not closed under rules"))++(defskeleton open-closed+ (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pt-6 pt-7 pval) (start-ch chan)+ (ls lk ls-0 lk-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls-0))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (ls ls))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((2 5) (0 1)) ((3 0) (1 1))+ ((4 3) (1 2)))+ (uniq-orig k n)+ (gen-st (cat "st" d "opened"))+ (conf start-ch)+ (auth start-ch)+ + (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d "opened"))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (stor lk (cat pt-2 "st-k" d o k)) (load ls-0 (cat pt-3 old1))+ (stor ls-0 (cat pt-4 "st" d "closed")) (send (enc "up" k)))+ ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-5 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-6 "st" d any))+ (stor ls (cat pt-7 "st" d "opened"))))+ (label 19)+ (parent 18)+ (unrealized (1 0) (1 2))+ (origs (pt-7 (4 3)) (pt-4 (2 4)) (pt-2 (2 2)) (n (1 3)) (k (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pt-6 pval) (start-ch chan)+ (ls lk ls-0 lk-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls-0))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (ls ls))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((2 5) (0 1)) ((3 0) (1 1))+ ((4 3) (1 2)))+ (uniq-orig k n)+ (gen-st (cat "st" d "opened"))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 2) (1 0)))+ + (operation nonce-test (contracted (pt-7 pt-1)) k (1 0)+ (ch-msg start-ch (cat "power-up" d o k))+ (ch-msg lk (cat pt-1 "st-k" d o k)))+ (strand-map 0 1 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d "opened"))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k)) (load ls-0 (cat pt-2 old1))+ (stor ls-0 (cat pt-3 "st" d "closed")) (send (enc "up" k)))+ ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-4 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-5 "st" d any))+ (stor ls (cat pt-6 "st" d "opened"))))+ (label 20)+ (parent 19)+ (seen 21)+ (seen-ops+ (21+ (operation channel-test (added-strand dev-open 4)+ (ch-msg ls (cat pt "st" d "opened")) (1 2))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 2))+ (origs (pt-6 (4 3)) (pt-3 (2 4)) (pt-1 (2 2)) (n (1 3)) (k (0 0)))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton open-closed+ (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)+ (ls lk ls-0 lk-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls-0))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (ls ls))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((2 5) (0 1)) ((3 0) (1 1))+ ((4 3) (1 2)))+ (uniq-orig k n)+ (gen-st (cat "st" d "opened"))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 2) (1 0)) ((4 3) (1 2)))+ + (operation channel-test (displaced 5 4 dev-open 4)+ (ch-msg ls (cat pt-6 "st" d "opened")) (1 2))+ (strand-map 0 1 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-0 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-5 "st" d "opened"))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt old))+ (stor lk (cat pt-0 "st-k" d o k)) (load ls-0 (cat pt-1 old1))+ (stor ls-0 (cat pt-2 "st" d "closed")) (send (enc "up" k)))+ ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-3 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-4 "st" d any))+ (stor ls (cat pt-5 "st" d "opened"))))+ (label 21)+ (parent 20)+ (realized)+ (shape)+ (maps+ ((0 1 2 3 4)+ ((old old) (old1 old1) (any any) (n n) (n-0 n-0) (d d) (o o) (k k)+ (k-0 k-0) (start-ch start-ch) (ls ls) (lk lk) (ls-0 ls-0)+ (lk-0 lk-0))))+ (origs (pt-5 (4 3)) (pt-2 (2 4)) (pt-0 (2 2)) (n (1 3)) (k (0 0))))++(defskeleton open-closed+ (vars (old old1 any any-0 mesg) (k k-0 k-1 skey) (n n-0 n-1 text)+ (d o o-0 name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pt-6 pt-7 pt-8 pval)+ (start-ch chan) (ls lk ls-0 lk-0 lk-1 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls-0))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (ls ls))+ (defstrand dev-open 4 (any any-0) (k k-1) (n n-1) (d d) (o o-0)+ (lk lk-1) (ls ls))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((2 5) (0 1)) ((3 0) (1 1))+ ((4 3) (5 2)) ((5 3) (1 2)))+ (uniq-orig k n)+ (gen-st (cat "st" d "opened"))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 2) (1 0)) ((5 3) (1 2)))+ + (operation channel-test (added-strand dev-open 4)+ (ch-msg ls (cat pt "st" d "opened")) (1 2))+ (strand-map 0 1 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d "opened"))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k)) (load ls-0 (cat pt-2 old1))+ (stor ls-0 (cat pt-3 "st" d "closed")) (send (enc "up" k)))+ ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-4 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-5 "st" d any))+ (stor ls (cat pt-6 "st" d "opened")))+ ((load lk-1 (cat pt-7 "st-k" d o-0 k-1))+ (recv (enc "open" d o-0 n-1 k-1))+ (load ls (cat pt-8 "st" d any-0))+ (stor ls (cat pt "st" d "opened"))))+ (label 22)+ (parent 20)+ (seen 21)+ (seen-ops+ (21 (operation generalization weakened ((4 3) (5 2)))+ (strand-map 0 1 2 3 4)))+ (realized)+ (comment "1 in cohort - 0 not yet seen"))++(comment "Nothing left to do")
+ tst/defact-open-closed-tag_shapes.tst view
@@ -0,0 +1,669 @@+(comment "CPSA 4.4.5")+(comment "Extracted shapes")++(herald open-closed (bound 44))++(comment "CPSA 4.4.5")++(comment "All input read from tst/open-closed-tag.scm")++(comment "Strand count bounded at 44")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d "closed")) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d "opened"))+ (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d "closed"))+ (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d "opened")) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z "opened"))+ (gen-st (cat "st" d "opened")))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d "opened")))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2))))))++(defskeleton open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (uniq-orig k)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 0)+ (unrealized (0 1) (1 0))+ (preskeleton)+ (origs (k (0 0)))+ (comment "Not a skeleton"))++(comment "Nothing left to do")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d "closed")) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d "opened"))+ (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d "closed"))+ (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d "opened")) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z "opened"))+ (gen-st (cat "st" d "opened")))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d "opened")))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2))))))++(defskeleton open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ (traces+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d "opened"))+ (send (enc "you may pass" n k))))+ (label 3)+ (realized)+ (origs (n (0 3)))+ (comment "Not closed under rules"))++(defskeleton open-closed+ (vars (any mesg) (k k-0 skey) (n n-0 text) (d o o-0 name)+ (pt pt-0 pt-1 pt-2 pval) (lk ls lk-0 locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o-0)+ (lk lk-0) (ls ls))+ (precedes ((1 3) (0 2)))+ (uniq-orig n)+ (gen-st (cat "st" d "opened"))+ (leads-to ((1 3) (0 2)))+ (operation channel-test (added-strand dev-open 4)+ (ch-msg ls (cat pt-0 "st" d "opened")) (0 2))+ (strand-map 0)+ (traces+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d "opened"))+ (send (enc "you may pass" n k)))+ ((load lk-0 (cat pt-1 "st-k" d o-0 k-0))+ (recv (enc "open" d o-0 n-0 k-0)) (load ls (cat pt-2 "st" d any))+ (stor ls (cat pt-0 "st" d "opened"))))+ (label 5)+ (parent 3)+ (realized)+ (shape)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls))))+ (origs (pt-0 (1 3)) (n (0 3))))++(comment "Nothing left to do")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d "closed")) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d "opened"))+ (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d "closed"))+ (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d "opened")) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z "opened"))+ (gen-st (cat "st" d "opened")))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d "opened")))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2))))))++(defskeleton open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (uniq-orig k n)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d-0 "opened"))+ (send (enc "you may pass" n k))))+ (label 6)+ (unrealized (0 1) (1 0) (1 1))+ (preskeleton)+ (origs (n (1 3)) (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton open-closed+ (vars (any old old1 mesg) (k k-0 skey) (n n-0 text) (o d o-0 name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)+ (ls lk lk-0 ls-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o-0) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o-0) (lk lk-0) (ls ls))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o-0)+ (start-ch start-ch) (lk lk-0) (ls ls-0))+ (precedes ((0 0) (4 0)) ((2 0) (1 1)) ((3 3) (1 2)) ((4 2) (1 0))+ ((4 5) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d "opened"))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((3 3) (1 2)) ((4 2) (1 0)))+ (operation encryption-test (displaced 2 5 dev-up 6) (enc "up" k)+ (0 1))+ (strand-map 0 1 4 2 3)+ (traces ((send start-ch (cat "power-up" d o-0 k)) (recv (enc "up" k)))+ ((load lk-0 (cat pt-3 "st-k" d o-0 k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d "opened"))+ (send (enc "you may pass" n k))) ((send (enc "may I pass" k)))+ ((load lk (cat pt-0 "st-k" d o k-0)) (recv (enc "open" d o n-0 k-0))+ (load ls (cat pt-1 "st" d any))+ (stor ls (cat pt "st" d "opened")))+ ((recv start-ch (cat "power-up" d o-0 k)) (load lk-0 (cat pt-2 old))+ (stor lk-0 (cat pt-3 "st-k" d o-0 k)) (load ls-0 (cat pt-4 old1))+ (stor ls-0 (cat pt-5 "st" d "closed")) (send (enc "up" k))))+ (label 15)+ (parent 6)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((k k) (d d) (o o-0) (start-ch start-ch) (n n) (d-0 d) (o-0 o-0)+ (lk lk-0) (ls ls))))+ (origs (pt-3 (4 2)) (pt-5 (4 4)) (pt (3 3)) (n (1 3)) (k (0 0))))++(comment "Nothing left to do")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d "closed")) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d "opened"))+ (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d "closed"))+ (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d "opened")) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z "opened"))+ (gen-st (cat "st" d "opened")))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d "opened")))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2))))))++(defskeleton open-closed+ (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pt-6 pt-7 pval) (start-ch chan)+ (ls lk ls-0 lk-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls-0))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (ls ls))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((2 5) (0 1)) ((3 0) (1 1))+ ((4 3) (1 2)))+ (uniq-orig k n)+ (conf start-ch)+ (auth start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d "opened"))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (stor lk (cat pt-2 "st-k" d o k)) (load ls-0 (cat pt-3 old1))+ (stor ls-0 (cat pt-4 "st" d "closed")) (send (enc "up" k)))+ ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-5 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-6 "st" d any))+ (stor ls (cat pt-7 "st" d "opened"))))+ (label 18)+ (unrealized (1 0))+ (origs (pt-7 (4 3)) (pt-4 (2 4)) (pt-2 (2 2)) (n (1 3)) (k (0 0)))+ (comment "Not closed under rules"))++(defskeleton open-closed+ (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)+ (ls lk ls-0 lk-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls-0))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (ls ls))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((2 5) (0 1)) ((3 0) (1 1))+ ((4 3) (1 2)))+ (uniq-orig k n)+ (gen-st (cat "st" d "opened"))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 2) (1 0)) ((4 3) (1 2)))+ (operation channel-test (displaced 5 4 dev-open 4)+ (ch-msg ls (cat pt-6 "st" d "opened")) (1 2))+ (strand-map 0 1 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-0 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-5 "st" d "opened"))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt old))+ (stor lk (cat pt-0 "st-k" d o k)) (load ls-0 (cat pt-1 old1))+ (stor ls-0 (cat pt-2 "st" d "closed")) (send (enc "up" k)))+ ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-3 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-4 "st" d any))+ (stor ls (cat pt-5 "st" d "opened"))))+ (label 21)+ (parent 18)+ (realized)+ (shape)+ (maps+ ((0 1 2 3 4)+ ((old old) (old1 old1) (any any) (n n) (n-0 n-0) (d d) (o o) (k k)+ (k-0 k-0) (start-ch start-ch) (ls ls) (lk lk) (ls-0 ls-0)+ (lk-0 lk-0))))+ (origs (pt-5 (4 3)) (pt-2 (2 4)) (pt-0 (2 2)) (n (1 3)) (k (0 0))))++(comment "Nothing left to do")
+ tst/defact-open-closed.tst view
@@ -0,0 +1,926 @@+(herald open-closed (bound 44))++(comment "CPSA 4.4.5")+(comment "All input read from tst/open-closed.scm")+(comment "Strand count bounded at 44")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z2 z1))))+ (defrule same-locn+ (forall ((z1 z2 strd) (i1 i2 indx))+ (implies (same-locn z1 i1 z2 i2) (fact ha z1 i1 z2 i2)))+ (comment this is a rule comment))+ (defrule leadsto-la+ (forall ((z1 z2 strd) (i1 i2 indx))+ (implies (leads-to z1 i1 z2 i2) (fact la z1 i1 z2 i2)))+ (comment this is a rule comment))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule causeRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z1 i1 z j))+ (or (= z z1) (prec z1 i1 z i)))))+ (defgenrule effectRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z i z1 i1))+ (or (= z z1) (prec z j z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule st-sg-dev-up-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-up-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5))+ (fact st-sg-str z (idx 3) (idx 4)))))+ (defgenrule st-sg-dev-open-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4))+ (fact st-sg-str z (idx 2) (idx 3)))))+ (defgenrule st-sg-dev-close-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4))+ (fact st-sg-str z (idx 2) (idx 3))))))++(defskeleton open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (uniq-orig k)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 0)+ (unrealized (0 1) (1 0))+ (preskeleton)+ (origs (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (precedes ((0 0) (1 0)))+ (uniq-orig k)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 1)+ (parent 0)+ (unrealized (0 1) (1 0))+ (origs (k (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old mesg) (k skey) (d o name) (pt pt-0 pval) (start-ch chan)+ (lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)))+ (uniq-orig k)+ (conf start-ch)+ (auth start-ch)+ + + (operation nonce-test (added-strand dev-up 3) k (1 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt old))+ (stor lk (cat pt-0 "st-k" d o k))))+ (label 2)+ (parent 1)+ (unrealized (0 1) (1 0))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z2 z1))))+ (defrule same-locn+ (forall ((z1 z2 strd) (i1 i2 indx))+ (implies (same-locn z1 i1 z2 i2) (fact ha z1 i1 z2 i2)))+ (comment this is a rule comment))+ (defrule leadsto-la+ (forall ((z1 z2 strd) (i1 i2 indx))+ (implies (leads-to z1 i1 z2 i2) (fact la z1 i1 z2 i2)))+ (comment this is a rule comment))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule causeRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z1 i1 z j))+ (or (= z z1) (prec z1 i1 z i)))))+ (defgenrule effectRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z i z1 i1))+ (or (= z z1) (prec z j z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule st-sg-dev-up-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-up-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5))+ (fact st-sg-str z (idx 3) (idx 4)))))+ (defgenrule st-sg-dev-open-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4))+ (fact st-sg-str z (idx 2) (idx 3)))))+ (defgenrule st-sg-dev-close-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4))+ (fact st-sg-str z (idx 2) (idx 3))))))++(defskeleton open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ (traces+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d o o)) (send (enc "you may pass" n k))))+ (label 3)+ (realized)+ (origs (n (0 3)))+ (comment "Not closed under rules"))++(defskeleton open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ (gen-st (cat "st" d o o))+ + + (traces+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d o o)) (send (enc "you may pass" n k))))+ (label 4)+ (parent 3)+ (unrealized (0 2))+ (origs (n (0 3)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pval) (lk ls lk-0 locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (ls ls))+ (precedes ((1 3) (0 2)))+ (uniq-orig n)+ (gen-st (cat "st" d o o))+ + (leads-to ((1 3) (0 2)))+ + (operation channel-test (added-strand dev-open 4)+ (ch-msg ls (cat pt-0 "st" d o o)) (0 2))+ (strand-map 0)+ (traces+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d o o)) (send (enc "you may pass" n k)))+ ((load lk-0 (cat pt-1 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-2 "st" d any))+ (stor ls (cat pt-0 "st" d o o))))+ (label 5)+ (parent 4)+ (realized)+ (shape)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls))))+ (origs (pt-0 (1 3)) (n (0 3))))++(comment "Nothing left to do")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z2 z1))))+ (defrule same-locn+ (forall ((z1 z2 strd) (i1 i2 indx))+ (implies (same-locn z1 i1 z2 i2) (fact ha z1 i1 z2 i2)))+ (comment this is a rule comment))+ (defrule leadsto-la+ (forall ((z1 z2 strd) (i1 i2 indx))+ (implies (leads-to z1 i1 z2 i2) (fact la z1 i1 z2 i2)))+ (comment this is a rule comment))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule causeRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z1 i1 z j))+ (or (= z z1) (prec z1 i1 z i)))))+ (defgenrule effectRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z i z1 i1))+ (or (= z z1) (prec z j z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule st-sg-dev-up-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-up-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5))+ (fact st-sg-str z (idx 3) (idx 4)))))+ (defgenrule st-sg-dev-open-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4))+ (fact st-sg-str z (idx 2) (idx 3)))))+ (defgenrule st-sg-dev-close-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4))+ (fact st-sg-str z (idx 2) (idx 3))))))++(defskeleton open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (uniq-orig k n)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0))+ (send (enc "you may pass" n k))))+ (label 6)+ (unrealized (0 1) (1 0) (1 1))+ (preskeleton)+ (origs (n (1 3)) (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (precedes ((0 0) (1 0)))+ (uniq-orig k n)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0))+ (send (enc "you may pass" n k))))+ (label 7)+ (parent 6)+ (unrealized (0 1) (1 0) (1 1))+ (origs (n (1 3)) (k (0 0)))+ (comment "Not closed under rules"))++(defskeleton open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (precedes ((0 0) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d-0 o-0 o-0))+ (conf start-ch)+ + + (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0))+ (send (enc "you may pass" n k))))+ (label 8)+ (parent 7)+ (unrealized (0 1) (1 0) (1 1) (1 2))+ (origs (n (1 3)) (k (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old mesg) (k skey) (n text) (d o d-0 o-0 name)+ (pt pt-0 pt-1 pt-2 pval) (start-ch chan) (lk ls lk-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk-0))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d-0 o-0 o-0))+ (conf start-ch)+ (auth start-ch)+ + + (operation nonce-test (added-strand dev-up 3) k (1 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk-0 (cat pt-1 old))+ (stor lk-0 (cat pt-2 "st-k" d o k))))+ (label 9)+ (parent 8)+ (unrealized (0 1) (1 0) (1 1) (1 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old mesg) (k skey) (n text) (d o name) (pt pt-0 pt-1 pval)+ (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 2) (1 0)))+ + (operation nonce-test+ (contracted (d-0 d) (o-0 o) (lk-0 lk) (pt-2 pt-1)) k (1 0)+ (ch-msg start-ch (cat "power-up" d o k))+ (ch-msg lk (cat pt-1 "st-k" d o k)))+ (strand-map 0 1 2)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k))))+ (label 10)+ (parent 9)+ (unrealized (0 1) (1 1) (1 2))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton open-closed+ (vars (old mesg) (k skey) (n text) (d o name) (pt pt-0 pt-1 pval)+ (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk))+ (defstrand user-pass 1 (k k))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((3 0) (1 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 2) (1 0)))+ + (operation encryption-test (added-strand user-pass 1)+ (enc "may I pass" k) (1 1))+ (strand-map 0 1 2)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k))) ((send (enc "may I pass" k))))+ (label 11)+ (parent 10)+ (unrealized (0 1) (1 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old mesg) (k skey) (n text) (d o name) (pt pt-0 pt-1 pval)+ (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((2 2) (1 0)) ((3 1) (1 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 2) (1 0)))+ + (operation encryption-test (added-listener k) (enc "may I pass" k)+ (1 1))+ (strand-map 0 1 2)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k))) ((recv k) (send k)))+ (label 12)+ (parent 10)+ (seen 14)+ (seen-ops+ (14+ (operation nonce-test (added-strand dev-up 3) k (3 0)+ (ch-msg start-ch (cat "power-up" d o k))) (strand-map 0 1 2 3)))+ (unrealized (0 1) (1 2) (3 0))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk lk-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (ls ls))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((3 0) (1 1)) ((4 3) (1 2)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 2) (1 0)) ((4 3) (1 2)))+ + (operation channel-test (added-strand dev-open 4)+ (ch-msg ls (cat pt "st" d o o)) (1 2))+ (strand-map 0 1 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k))) ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-2 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (stor ls (cat pt "st" d o o))))+ (label 13)+ (parent 11)+ (seen 15)+ (seen-ops+ (15+ (operation encryption-test (added-strand dev-up 6) (enc "up" k)+ (0 1)) (strand-map 0 1 4 2 3)))+ (unrealized (0 1))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton open-closed+ (vars (old mesg) (k skey) (n text) (d o name) (pt pt-0 pt-1 pval)+ (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((2 2) (3 0)) ((3 1) (1 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 2) (1 0)))+ + (operation nonce-test (displaced 4 2 dev-up 3) k (3 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k))) ((recv k) (send k)))+ (label 14)+ (parent 12)+ (unrealized (0 1) (1 2) (3 0))+ (dead)+ (comment "empty cohort"))++(defskeleton open-closed+ (vars (any old old1 mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)+ (ls lk lk-0 ls-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk-0) (ls ls))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk-0) (ls ls-0))+ (precedes ((0 0) (4 0)) ((2 0) (1 1)) ((3 3) (1 2)) ((4 2) (1 0))+ ((4 5) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((3 3) (1 2)) ((4 2) (1 0)))+ + (operation encryption-test (displaced 2 5 dev-up 6) (enc "up" k)+ (0 1))+ (strand-map 0 1 4 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk-0 (cat pt-3 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((send (enc "may I pass" k)))+ ((load lk (cat pt-0 "st-k" d o k-0)) (recv (enc "open" d o n-0 k-0))+ (load ls (cat pt-1 "st" d any)) (stor ls (cat pt "st" d o o)))+ ((recv start-ch (cat "power-up" d o k)) (load lk-0 (cat pt-2 old))+ (stor lk-0 (cat pt-3 "st-k" d o k)) (load ls-0 (cat pt-4 old1))+ (stor ls-0 (cat pt-5 "st" d o)) (send (enc "up" k))))+ (label 15)+ (parent 13)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk-0) (ls ls))))+ (origs (pt-3 (4 2)) (pt-5 (4 4)) (pt (3 3)) (n (1 3)) (k (0 0))))++(defskeleton open-closed+ (vars (old any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk lk-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (ls ls))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((0 0) (5 0)) ((2 2) (1 0)) ((3 0) (1 1))+ ((4 3) (1 2)) ((5 1) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 2) (1 0)) ((4 3) (1 2)))+ + (operation encryption-test (added-listener k) (enc "up" k) (0 1))+ (strand-map 0 1 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k))) ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-2 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (stor ls (cat pt "st" d o o))) ((recv k) (send k)))+ (label 16)+ (parent 13)+ (seen 17)+ (seen-ops+ (17+ (operation nonce-test (added-strand dev-up 3) k (5 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (5 0))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton open-closed+ (vars (old any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk lk-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (ls ls))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((2 2) (5 0)) ((3 0) (1 1))+ ((4 3) (1 2)) ((5 1) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 2) (1 0)) ((4 3) (1 2)))+ + (operation nonce-test (displaced 6 2 dev-up 3) k (5 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k))) ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-2 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (stor ls (cat pt "st" d o o))) ((recv k) (send k)))+ (label 17)+ (parent 16)+ (unrealized (5 0))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")
+ tst/defact-open-closed_shapes.tst view
@@ -0,0 +1,491 @@+(comment "CPSA 4.4.5")+(comment "Extracted shapes")++(herald open-closed (bound 44))++(comment "CPSA 4.4.5")++(comment "All input read from tst/open-closed.scm")++(comment "Strand count bounded at 44")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z2 z1))))+ (defrule same-locn+ (forall ((z1 z2 strd) (i1 i2 indx))+ (implies (same-locn z1 i1 z2 i2) (fact ha z1 i1 z2 i2)))+ (comment this is a rule comment))+ (defrule leadsto-la+ (forall ((z1 z2 strd) (i1 i2 indx))+ (implies (leads-to z1 i1 z2 i2) (fact la z1 i1 z2 i2)))+ (comment this is a rule comment))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2))))))++(defskeleton open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (uniq-orig k)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 0)+ (unrealized (0 1) (1 0))+ (preskeleton)+ (origs (k (0 0)))+ (comment "Not a skeleton"))++(comment "Nothing left to do")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z2 z1))))+ (defrule same-locn+ (forall ((z1 z2 strd) (i1 i2 indx))+ (implies (same-locn z1 i1 z2 i2) (fact ha z1 i1 z2 i2)))+ (comment this is a rule comment))+ (defrule leadsto-la+ (forall ((z1 z2 strd) (i1 i2 indx))+ (implies (leads-to z1 i1 z2 i2) (fact la z1 i1 z2 i2)))+ (comment this is a rule comment))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2))))))++(defskeleton open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ (traces+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d o o)) (send (enc "you may pass" n k))))+ (label 3)+ (realized)+ (origs (n (0 3)))+ (comment "Not closed under rules"))++(defskeleton open-closed+ (vars (any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pval) (lk ls lk-0 locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (ls ls))+ (precedes ((1 3) (0 2)))+ (uniq-orig n)+ (gen-st (cat "st" d o o))+ (leads-to ((1 3) (0 2)))+ (operation channel-test (added-strand dev-open 4)+ (ch-msg ls (cat pt-0 "st" d o o)) (0 2))+ (strand-map 0)+ (traces+ ((load lk (cat pt "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d o o)) (send (enc "you may pass" n k)))+ ((load lk-0 (cat pt-1 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-2 "st" d any))+ (stor ls (cat pt-0 "st" d o o))))+ (label 5)+ (parent 3)+ (realized)+ (shape)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls))))+ (origs (pt-0 (1 3)) (n (0 3))))++(comment "Nothing left to do")++(defprotocol open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (stor lk (cat "st-k" d o k)) (load ls old1)+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "open" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o o)) (send n)))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "close" d o n k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat "st" d o o)) (send (enc "you may pass" n k)))+ (uniq-orig n))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule gen-state-close+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)+ (p "dev-close" "o" z o) (p "dev-close" "k" z k)+ (p "dev-close" "any" z (cat o o)))+ (gen-st (cat "st" d o o)))))+ (defrule gen-state-pass+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)+ (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (gen-st (cat "st" d o o)))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z2 z1))))+ (defrule same-locn+ (forall ((z1 z2 strd) (i1 i2 indx))+ (implies (same-locn z1 i1 z2 i2) (fact ha z1 i1 z2 i2)))+ (comment this is a rule comment))+ (defrule leadsto-la+ (forall ((z1 z2 strd) (i1 i2 indx))+ (implies (leads-to z1 i1 z2 i2) (fact la z1 i1 z2 i2)))+ (comment this is a rule comment))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 2)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2))))))++(defskeleton open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (uniq-orig k n)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k)) (recv (enc "may I pass" k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0))+ (send (enc "you may pass" n k))))+ (label 6)+ (unrealized (0 1) (1 0) (1 1))+ (preskeleton)+ (origs (n (1 3)) (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton open-closed+ (vars (any old old1 mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)+ (ls lk lk-0 ls-0 locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk-0) (ls ls))+ (defstrand user-pass 1 (k k))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk-0) (ls ls-0))+ (precedes ((0 0) (4 0)) ((2 0) (1 1)) ((3 3) (1 2)) ((4 2) (1 0))+ ((4 5) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((3 3) (1 2)) ((4 2) (1 0)))+ (operation encryption-test (displaced 2 5 dev-up 6) (enc "up" k)+ (0 1))+ (strand-map 0 1 4 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk-0 (cat pt-3 "st-k" d o k)) (recv (enc "may I pass" k))+ (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((send (enc "may I pass" k)))+ ((load lk (cat pt-0 "st-k" d o k-0)) (recv (enc "open" d o n-0 k-0))+ (load ls (cat pt-1 "st" d any)) (stor ls (cat pt "st" d o o)))+ ((recv start-ch (cat "power-up" d o k)) (load lk-0 (cat pt-2 old))+ (stor lk-0 (cat pt-3 "st-k" d o k)) (load ls-0 (cat pt-4 old1))+ (stor ls-0 (cat pt-5 "st" d o)) (send (enc "up" k))))+ (label 15)+ (parent 6)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk-0) (ls ls))))+ (origs (pt-3 (4 2)) (pt-5 (4 4)) (pt (3 3)) (n (1 3)) (k (0 0))))++(comment "Nothing left to do")
+ tst/defact-subatomic-open-closed-test-genrule.tst view
@@ -0,0 +1,1722 @@+(herald subatomic-open-closed-test-genrule (bound 40))++(comment "CPSA 4.4.5")+(comment+ "All input read from tst/subatomic-open-closed-test-genrule.scm")+(comment "Strand count bounded at 40")++(defprotocol subatomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor lk (cat "st-k" d o k))+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch)+ (critical-sections (1 4))+ )+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load ls (cat "st" d any))+ (load lk (cat "st-k" d o k)) (stor ls (cat "st" d o o)) (send n))+ (critical-sections (1 3))+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ )+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n))+ (gen-st (cat "st-k" d o k))+ (critical-sections (1 3))+ )+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (load ls (cat "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ (uniq-orig n)+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ (critical-sections (0 1))+ )+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" z (idx 3)) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" z (idx 3)) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" z (idx 3)) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" z (idx 2)) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule eff-dev-up-3+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 4)) (prec z (idx 3) z1 i))+ (or (= z z1)+ (and (p "dev-up" z (idx 5)) (prec z (idx 4) z1 i))))))+ (defgenrule cau-dev-up-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-open-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-open" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-close-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-close" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-pass-1+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-pass" z (idx 2)) (prec z1 i z (idx 1)))+ (or (= z z1) (prec z1 i z (idx 0))))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (o d name))+ (implies+ (and (p "dev-pass" z 1) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-pass" z 1) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-pass" z 2) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd)) (implies (p "dev-close" z 3) (trans z 2))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd)) (implies (p "dev-close" z 4) (trans z 3))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-close" z 1) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-close" z 3) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd)) (implies (p "dev-open" z 2) (trans z 1))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd)) (implies (p "dev-open" z 4) (trans z 3))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (o d name))+ (implies+ (and (p "dev-open" z 1) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-open" z 1) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-open" z 3) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd)) (implies (p "dev-up" z 2) (trans z 1))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd)) (implies (p "dev-up" z 3) (trans z 2))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd)) (implies (p "dev-up" z 4) (trans z 3))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd)) (implies (p "dev-up" z 5) (trans z 4))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-up" z 3) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cau-dev-pass-1+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-pass" z 2) (prec z1 i z 1))+ (or (= z z1) (prec z1 i z 0)))))+ (defgenrule cau-dev-close-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-close" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule cau-dev-open-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-open" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule cau-dev-up-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-up" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule eff-dev-up-3+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-up" z 4) (prec z 3 z1 i))+ (or (= z z1) (and (p "dev-up" z 5) (prec z 4 z1 i))))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))))++(defskeleton subatomic-open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (uniq-orig k)+ (conf start-ch)+ + (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 0)+ (unrealized (0 1) (1 0))+ (preskeleton)+ (origs (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton subatomic-open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (precedes ((0 0) (1 0)))+ (uniq-orig k)+ (conf start-ch)+ + (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 1)+ (parent 0)+ (unrealized (0 1) (1 0))+ (origs (k (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 mesg) (k skey) (d o name) (pt pt-0 pt-1 pt-2 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (precedes ((0 0) (2 0)) ((2 4) (1 0)))+ (uniq-orig k)+ (conf start-ch)+ (auth start-ch)+ + + (operation nonce-test (added-strand dev-up 4) k (1 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt old))+ (load ls (cat pt-0 old1)) (stor lk (cat pt-1 "st-k" d o k))+ (stor ls (cat pt-2 "st" d o))))+ (label 2)+ (parent 1)+ (unrealized (0 1) (1 0))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol subatomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor lk (cat "st-k" d o k))+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch)+ (critical-sections (1 4))+ )+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load ls (cat "st" d any))+ (load lk (cat "st-k" d o k)) (stor ls (cat "st" d o o)) (send n))+ (critical-sections (1 3))+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ )+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n))+ (gen-st (cat "st-k" d o k))+ (critical-sections (1 3))+ )+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (load ls (cat "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ (uniq-orig n)+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ (critical-sections (0 1))+ )+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" z (idx 3)) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" z (idx 3)) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" z (idx 3)) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" z (idx 2)) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule eff-dev-up-3+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 4)) (prec z (idx 3) z1 i))+ (or (= z z1)+ (and (p "dev-up" z (idx 5)) (prec z (idx 4) z1 i))))))+ (defgenrule cau-dev-up-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-open-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-open" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-close-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-close" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-pass-1+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-pass" z (idx 2)) (prec z1 i z (idx 1)))+ (or (= z z1) (prec z1 i z (idx 0))))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (o d name))+ (implies+ (and (p "dev-pass" z 1) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-pass" z 1) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-pass" z 2) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd)) (implies (p "dev-close" z 3) (trans z 2))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd)) (implies (p "dev-close" z 4) (trans z 3))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-close" z 1) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-close" z 3) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd)) (implies (p "dev-open" z 2) (trans z 1))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd)) (implies (p "dev-open" z 4) (trans z 3))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (o d name))+ (implies+ (and (p "dev-open" z 1) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-open" z 1) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-open" z 3) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd)) (implies (p "dev-up" z 2) (trans z 1))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd)) (implies (p "dev-up" z 3) (trans z 2))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd)) (implies (p "dev-up" z 4) (trans z 3))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd)) (implies (p "dev-up" z 5) (trans z 4))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-up" z 3) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cau-dev-pass-1+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-pass" z 2) (prec z1 i z 1))+ (or (= z z1) (prec z1 i z 0)))))+ (defgenrule cau-dev-close-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-close" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule cau-dev-open-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-open" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule cau-dev-up-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-up" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule eff-dev-up-3+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-up" z 4) (prec z 3 z1 i))+ (or (= z z1) (and (p "dev-up" z 5) (prec z 4 z1 i))))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))))++(defskeleton subatomic-open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ + (traces+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k))))+ (label 3)+ (realized)+ (origs (n (0 3)))+ (comment "Not closed under rules"))++(defskeleton subatomic-open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ + + (traces+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k))))+ (label 4)+ (parent 3)+ (unrealized (0 0) (0 1))+ (origs (n (0 3)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (precedes ((1 4) (0 0)))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (auth start-ch)+ + (leads-to ((1 3) (0 0)))+ + (operation channel-test (added-strand dev-up 4)+ (ch-msg lk (cat pt-2 "st-k" d o k)) (0 0))+ (strand-map 0)+ (traces+ ((load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls (cat pt-1 old1)) (stor lk (cat pt-2 "st-k" d o k))+ (stor ls (cat pt-3 "st" d o))))+ (label 5)+ (parent 4)+ (unrealized (0 1) (1 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k) (d d) (o o) (start-ch start-ch))+ (precedes ((1 4) (0 0)) ((2 0) (1 0)))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((1 3) (0 0)))+ + (operation channel-test (added-strand owner-power-dev 1)+ (ch-msg start-ch (cat "power-up" d o k)) (1 0))+ (strand-map 0 1)+ (traces+ ((load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls (cat pt-1 old1)) (stor lk (cat pt-2 "st-k" d o k))+ (stor ls (cat pt-3 "st" d o)))+ ((send start-ch (cat "power-up" d o k))))+ (label 6)+ (parent 5)+ (unrealized (0 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)+ (ls lk locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (precedes ((1 4) (3 1)) ((2 0) (1 0)) ((3 3) (0 0)))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k) (cat "st-k" d o k-0))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((1 3) (0 0)) ((3 3) (0 1)))+ + (operation channel-test (added-strand dev-open 4)+ (ch-msg ls (cat pt "st" d o o)) (0 1))+ (strand-map 0 1 2)+ (traces+ ((load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls (cat pt-1 old1)) (stor lk (cat pt-2 "st-k" d o k))+ (stor ls (cat pt-3 "st" d o)))+ ((send start-ch (cat "power-up" d o k)))+ ((recv (enc "open" d o n-0 k-0)) (load ls (cat pt-4 "st" d any))+ (load lk (cat pt-5 "st-k" d o k-0))+ (stor ls (cat pt "st" d o o))))+ (label 7)+ (parent 6)+ (seen 8)+ (seen-ops+ (8+ (operation channel-test (added-strand dev-up 4)+ (ch-msg lk (cat pt-3 "st-k" d o k)) (3 2))+ (strand-map 0 1 2 3)))+ (unrealized (3 2))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (precedes ((1 4) (3 1)) ((2 0) (1 0)) ((3 3) (0 0)))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((1 3) (0 0)) ((1 3) (3 2)) ((3 3) (0 1)))+ + (operation channel-test (displaced 4 1 dev-up 4)+ (ch-msg lk (cat pt-5 "st-k" d o k-0)) (3 2))+ (strand-map 0 1 2 3)+ (traces+ ((load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls (cat pt-1 old1)) (stor lk (cat pt-2 "st-k" d o k))+ (stor ls (cat pt-3 "st" d o)))+ ((send start-ch (cat "power-up" d o k)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-4 "st" d any))+ (load lk (cat pt-2 "st-k" d o k)) (stor ls (cat pt "st" d o o))))+ (label 8)+ (parent 7)+ (realized)+ (shape)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls))))+ (origs (pt-2 (1 3)) (pt-3 (1 4)) (pt (3 3)) (n (0 3))))++(comment "Nothing left to do")++(defprotocol subatomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor lk (cat "st-k" d o k))+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch)+ (critical-sections (1 4))+ )+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load ls (cat "st" d any))+ (load lk (cat "st-k" d o k)) (stor ls (cat "st" d o o)) (send n))+ (critical-sections (1 3))+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ )+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n))+ (gen-st (cat "st-k" d o k))+ (critical-sections (1 3))+ )+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (load ls (cat "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ (uniq-orig n)+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ (critical-sections (0 1))+ )+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" z (idx 3)) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" z (idx 3)) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" z (idx 3)) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" z (idx 2)) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule eff-dev-up-3+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 4)) (prec z (idx 3) z1 i))+ (or (= z z1)+ (and (p "dev-up" z (idx 5)) (prec z (idx 4) z1 i))))))+ (defgenrule cau-dev-up-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-open-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-open" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-close-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-close" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-pass-1+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-pass" z (idx 2)) (prec z1 i z (idx 1)))+ (or (= z z1) (prec z1 i z (idx 0))))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (o d name))+ (implies+ (and (p "dev-pass" z 1) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-pass" z 1) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-pass" z 2) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd)) (implies (p "dev-close" z 3) (trans z 2))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd)) (implies (p "dev-close" z 4) (trans z 3))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-close" z 1) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-close" z 3) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd)) (implies (p "dev-open" z 2) (trans z 1))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd)) (implies (p "dev-open" z 4) (trans z 3))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (o d name))+ (implies+ (and (p "dev-open" z 1) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-open" z 1) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-open" z 3) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd)) (implies (p "dev-up" z 2) (trans z 1))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd)) (implies (p "dev-up" z 3) (trans z 2))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd)) (implies (p "dev-up" z 4) (trans z 3))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd)) (implies (p "dev-up" z 5) (trans z 4))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-up" z 3) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cau-dev-pass-1+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-pass" z 2) (prec z1 i z 1))+ (or (= z z1) (prec z1 i z 0)))))+ (defgenrule cau-dev-close-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-close" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule cau-dev-open-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-open" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule cau-dev-up-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-up" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule eff-dev-up-3+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-up" z 4) (prec z 3 z1 i))+ (or (= z z1) (and (p "dev-up" z 5) (prec z 4 z1 i))))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))))++(defskeleton subatomic-open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (uniq-orig k n)+ (conf start-ch)+ + (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0)) (recv (enc "may I pass" k))+ (send (enc "you may pass" n k))))+ (label 9)+ (unrealized (0 1) (1 0) (1 2))+ (preskeleton)+ (origs (n (1 3)) (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton subatomic-open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (precedes ((0 0) (1 0)))+ (uniq-orig k n)+ (conf start-ch)+ + (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0)) (recv (enc "may I pass" k))+ (send (enc "you may pass" n k))))+ (label 10)+ (parent 9)+ (unrealized (0 1) (1 0) (1 2))+ (origs (n (1 3)) (k (0 0)))+ (comment "Not closed under rules"))++(defskeleton subatomic-open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (precedes ((0 0) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d-0 o-0 o-0) (cat "st-k" d-0 o-0 k))+ (conf start-ch)+ + + (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0)) (recv (enc "may I pass" k))+ (send (enc "you may pass" n k))))+ (label 11)+ (parent 10)+ (unrealized (0 1) (1 0) (1 1) (1 2))+ (origs (n (1 3)) (k (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o d-0 o-0 name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch start-ch-0 chan)+ (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d-0) (o o-0)+ (start-ch start-ch-0) (lk lk) (ls ls))+ (precedes ((0 0) (2 0)) ((2 4) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d-0 o-0 o-0) (cat "st-k" d-0 o-0 k))+ (conf start-ch)+ (auth start-ch-0)+ + (leads-to ((2 3) (1 0)))+ + (operation channel-test (added-strand dev-up 4)+ (ch-msg lk (cat pt-2 "st-k" d-0 o-0 k)) (1 0))+ (strand-map 0 1)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-2 "st-k" d-0 o-0 k))+ (load ls (cat pt "st" d-0 o-0 o-0)) (recv (enc "may I pass" k))+ (send (enc "you may pass" n k)))+ ((recv start-ch-0 (cat "power-up" d-0 o-0 k))+ (load lk (cat pt-0 old)) (load ls (cat pt-1 old1))+ (stor lk (cat pt-2 "st-k" d-0 o-0 k))+ (stor ls (cat pt-3 "st" d-0 o-0))))+ (label 12)+ (parent 11)+ (unrealized (0 1) (1 1) (1 2) (2 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (precedes ((0 0) (2 0)) ((2 4) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)))+ + (operation channel-test (displaced 3 0 owner-power-dev 1)+ (ch-msg start-ch-0 (cat "power-up" d-0 o-0 k)) (2 0))+ (strand-map 0 1 2)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls (cat pt-1 old1)) (stor lk (cat pt-2 "st-k" d o k))+ (stor ls (cat pt-3 "st" d o))))+ (label 13)+ (parent 12)+ (unrealized (0 1) (1 1) (1 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)+ (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (precedes ((0 0) (2 0)) ((2 4) (3 1)) ((3 3) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k) (cat "st-k" d o k-0))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((3 3) (1 1)))+ + (operation channel-test (added-strand dev-open 4)+ (ch-msg ls (cat pt "st" d o o)) (1 1))+ (strand-map 0 1 2)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls (cat pt-1 old1)) (stor lk (cat pt-2 "st-k" d o k))+ (stor ls (cat pt-3 "st" d o)))+ ((recv (enc "open" d o n-0 k-0)) (load ls (cat pt-4 "st" d any))+ (load lk (cat pt-5 "st-k" d o k-0))+ (stor ls (cat pt "st" d o o))))+ (label 14)+ (parent 13)+ (seen 15)+ (seen-ops+ (15+ (operation channel-test (added-strand dev-up 4)+ (ch-msg lk (cat pt-3 "st-k" d o k)) (3 2))+ (strand-map 0 1 2 3)))+ (unrealized (0 1) (1 2) (3 2))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (precedes ((0 0) (2 0)) ((2 4) (3 1)) ((3 3) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation channel-test (displaced 4 2 dev-up 4)+ (ch-msg lk (cat pt-5 "st-k" d o k-0)) (3 2))+ (strand-map 0 1 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls (cat pt-1 old1)) (stor lk (cat pt-2 "st-k" d o k))+ (stor ls (cat pt-3 "st" d o)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-4 "st" d any))+ (load lk (cat pt-2 "st-k" d o k)) (stor ls (cat pt "st" d o o))))+ (label 15)+ (parent 14)+ (unrealized (0 1) (1 2) (3 0))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (precedes ((0 0) (2 0)) ((2 4) (3 1)) ((3 3) (1 0)) ((4 0) (3 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation encryption-test (added-strand owner-open 1)+ (enc "open" d o n-0 k) (3 0))+ (strand-map 0 1 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls (cat pt-1 old1)) (stor lk (cat pt-2 "st-k" d o k))+ (stor ls (cat pt-3 "st" d o)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-4 "st" d any))+ (load lk (cat pt-2 "st-k" d o k)) (stor ls (cat pt "st" d o o)))+ ((send (enc "open" d o n-0 k))))+ (label 16)+ (parent 15)+ (unrealized (0 1) (1 2))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((0 0) (4 0)) ((2 4) (3 1)) ((3 3) (1 0))+ ((4 1) (3 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation encryption-test (added-listener k) (enc "open" d o n-0 k)+ (3 0))+ (strand-map 0 1 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls (cat pt-1 old1)) (stor lk (cat pt-2 "st-k" d o k))+ (stor ls (cat pt-3 "st" d o)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-4 "st" d any))+ (load lk (cat pt-2 "st-k" d o k)) (stor ls (cat pt "st" d o o)))+ ((recv k) (send k)))+ (label 17)+ (parent 15)+ (seen 20)+ (seen-ops+ (20+ (operation nonce-test (added-strand dev-up 4) k (4 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4)))+ (unrealized (0 1) (4 0))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (defstrand user-pass 1 (k k))+ (precedes ((0 0) (2 0)) ((2 4) (3 1)) ((3 3) (1 0)) ((4 0) (3 0))+ ((5 0) (1 2)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation encryption-test (added-strand user-pass 1)+ (enc "may I pass" k) (1 2))+ (strand-map 0 1 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls (cat pt-1 old1)) (stor lk (cat pt-2 "st-k" d o k))+ (stor ls (cat pt-3 "st" d o)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-4 "st" d any))+ (load lk (cat pt-2 "st-k" d o k)) (stor ls (cat pt "st" d o o)))+ ((send (enc "open" d o n-0 k))) ((send (enc "may I pass" k))))+ (label 18)+ (parent 16)+ (seen 21)+ (seen-ops+ (21+ (operation encryption-test (added-strand dev-up 6) (enc "up" k)+ (0 1)) (strand-map 0 1 5 2 3 4)))+ (unrealized (0 1))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((0 0) (5 0)) ((2 4) (3 1)) ((3 3) (1 0))+ ((4 0) (3 0)) ((5 1) (1 2)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation encryption-test (added-listener k) (enc "may I pass" k)+ (1 2))+ (strand-map 0 1 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls (cat pt-1 old1)) (stor lk (cat pt-2 "st-k" d o k))+ (stor ls (cat pt-3 "st" d o)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-4 "st" d any))+ (load lk (cat pt-2 "st-k" d o k)) (stor ls (cat pt "st" d o o)))+ ((send (enc "open" d o n-0 k))) ((recv k) (send k)))+ (label 19)+ (parent 16)+ (seen 23)+ (seen-ops+ (23+ (operation nonce-test (added-strand dev-up 4) k (5 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (0 1) (5 0))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((2 4) (4 0)) ((3 3) (1 0)) ((4 1) (3 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation nonce-test (displaced 5 2 dev-up 4) k (4 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls (cat pt-1 old1)) (stor lk (cat pt-2 "st-k" d o k))+ (stor ls (cat pt-3 "st" d o)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-4 "st" d any))+ (load lk (cat pt-2 "st-k" d o k)) (stor ls (cat pt "st" d o o)))+ ((recv k) (send k)))+ (label 20)+ (parent 17)+ (unrealized (0 1) (4 0))+ (dead)+ (comment "empty cohort"))++(defskeleton subatomic-open-closed+ (vars (any old old1 mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (defstrand user-pass 1 (k k))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (precedes ((0 0) (5 0)) ((2 3) (1 0)) ((3 0) (2 0)) ((4 0) (1 2))+ ((5 4) (2 1)) ((5 5) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 1)) ((5 3) (1 0)) ((5 3) (2 2)))+ + (operation encryption-test (displaced 2 6 dev-up 6) (enc "up" k)+ (0 1))+ (strand-map 0 1 5 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-3 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-0 "st" d any))+ (load lk (cat pt-3 "st-k" d o k)) (stor ls (cat pt "st" d o o)))+ ((send (enc "open" d o n-0 k))) ((send (enc "may I pass" k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt-3 "st-k" d o k))+ (stor ls (cat pt-4 "st" d o)) (send (enc "up" k))))+ (label 21)+ (parent 18)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls))))+ (origs (pt-3 (5 3)) (pt-4 (5 4)) (pt (2 3)) (n (1 3)) (k (0 0))))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (defstrand user-pass 1 (k k))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((0 0) (6 0)) ((2 4) (3 1)) ((3 3) (1 0))+ ((4 0) (3 0)) ((5 0) (1 2)) ((6 1) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation encryption-test (added-listener k) (enc "up" k) (0 1))+ (strand-map 0 1 2 3 4 5)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls (cat pt-1 old1)) (stor lk (cat pt-2 "st-k" d o k))+ (stor ls (cat pt-3 "st" d o)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-4 "st" d any))+ (load lk (cat pt-2 "st-k" d o k)) (stor ls (cat pt "st" d o o)))+ ((send (enc "open" d o n-0 k))) ((send (enc "may I pass" k)))+ ((recv k) (send k)))+ (label 22)+ (parent 18)+ (seen 24)+ (seen-ops+ (24+ (operation nonce-test (added-strand dev-up 4) k (6 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5 6)))+ (unrealized (6 0))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((2 4) (3 1)) ((2 4) (5 0)) ((3 3) (1 0))+ ((4 0) (3 0)) ((5 1) (1 2)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation nonce-test (displaced 6 2 dev-up 4) k (5 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls (cat pt-1 old1)) (stor lk (cat pt-2 "st-k" d o k))+ (stor ls (cat pt-3 "st" d o)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-4 "st" d any))+ (load lk (cat pt-2 "st-k" d o k)) (stor ls (cat pt "st" d o o)))+ ((send (enc "open" d o n-0 k))) ((recv k) (send k)))+ (label 23)+ (parent 19)+ (unrealized (0 1) (5 0))+ (dead)+ (comment "empty cohort"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (defstrand user-pass 1 (k k))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((2 4) (3 1)) ((2 4) (6 0)) ((3 3) (1 0))+ ((4 0) (3 0)) ((5 0) (1 2)) ((6 1) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation nonce-test (displaced 7 2 dev-up 4) k (6 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5 6)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls (cat pt-1 old1)) (stor lk (cat pt-2 "st-k" d o k))+ (stor ls (cat pt-3 "st" d o)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-4 "st" d any))+ (load lk (cat pt-2 "st-k" d o k)) (stor ls (cat pt "st" d o o)))+ ((send (enc "open" d o n-0 k))) ((send (enc "may I pass" k)))+ ((recv k) (send k)))+ (label 24)+ (parent 22)+ (unrealized (6 0))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")
+ tst/defact-subatomic-open-closed-test-genrule_shapes.tst view
@@ -0,0 +1,1055 @@+(comment "CPSA 4.4.5")+(comment "Extracted shapes")++(herald subatomic-open-closed-test-genrule (bound 40))++(comment "CPSA 4.4.5")++(comment+ "All input read from tst/subatomic-open-closed-test-genrule.scm")++(comment "Strand count bounded at 40")++(defprotocol subatomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor lk (cat "st-k" d o k))+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch)+ (critical-sections (1 4)))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load ls (cat "st" d any))+ (load lk (cat "st-k" d o k)) (stor ls (cat "st" d o o)) (send n))+ (critical-sections (1 3))+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o))))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n))+ (gen-st (cat "st-k" d o k))+ (critical-sections (1 3)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (load ls (cat "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ (uniq-orig n)+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ (critical-sections (0 1)))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" z (idx 3)) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" z (idx 3)) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" z (idx 3)) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" z (idx 2)) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule eff-dev-up-3+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 4)) (prec z (idx 3) z1 i))+ (or (= z z1)+ (and (p "dev-up" z (idx 5)) (prec z (idx 4) z1 i))))))+ (defgenrule cau-dev-up-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-open-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-open" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-close-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-close" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-pass-1+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-pass" z (idx 2)) (prec z1 i z (idx 1)))+ (or (= z z1) (prec z1 i z (idx 0))))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (o d name))+ (implies+ (and (p "dev-pass" z 1) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-pass" z 1) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-pass" z 2) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd)) (implies (p "dev-close" z 3) (trans z 2))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd)) (implies (p "dev-close" z 4) (trans z 3))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-close" z 1) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-close" z 3) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd)) (implies (p "dev-open" z 2) (trans z 1))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd)) (implies (p "dev-open" z 4) (trans z 3))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (o d name))+ (implies+ (and (p "dev-open" z 1) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-open" z 1) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-open" z 3) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd)) (implies (p "dev-up" z 2) (trans z 1))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd)) (implies (p "dev-up" z 3) (trans z 2))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd)) (implies (p "dev-up" z 4) (trans z 3))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd)) (implies (p "dev-up" z 5) (trans z 4))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-up" z 3) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cau-dev-pass-1+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-pass" z 2) (prec z1 i z 1))+ (or (= z z1) (prec z1 i z 0)))))+ (defgenrule cau-dev-close-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-close" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule cau-dev-open-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-open" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule cau-dev-up-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-up" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule eff-dev-up-3+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-up" z 4) (prec z 3 z1 i))+ (or (= z z1) (and (p "dev-up" z 5) (prec z 4 z1 i))))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))))++(defskeleton subatomic-open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (uniq-orig k)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 0)+ (unrealized (0 1) (1 0))+ (preskeleton)+ (origs (k (0 0)))+ (comment "Not a skeleton"))++(comment "Nothing left to do")++(defprotocol subatomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor lk (cat "st-k" d o k))+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch)+ (critical-sections (1 4)))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load ls (cat "st" d any))+ (load lk (cat "st-k" d o k)) (stor ls (cat "st" d o o)) (send n))+ (critical-sections (1 3))+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o))))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n))+ (gen-st (cat "st-k" d o k))+ (critical-sections (1 3)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (load ls (cat "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ (uniq-orig n)+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ (critical-sections (0 1)))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" z (idx 3)) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" z (idx 3)) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" z (idx 3)) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" z (idx 2)) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule eff-dev-up-3+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 4)) (prec z (idx 3) z1 i))+ (or (= z z1)+ (and (p "dev-up" z (idx 5)) (prec z (idx 4) z1 i))))))+ (defgenrule cau-dev-up-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-open-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-open" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-close-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-close" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-pass-1+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-pass" z (idx 2)) (prec z1 i z (idx 1)))+ (or (= z z1) (prec z1 i z (idx 0))))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (o d name))+ (implies+ (and (p "dev-pass" z 1) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-pass" z 1) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-pass" z 2) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd)) (implies (p "dev-close" z 3) (trans z 2))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd)) (implies (p "dev-close" z 4) (trans z 3))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-close" z 1) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-close" z 3) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd)) (implies (p "dev-open" z 2) (trans z 1))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd)) (implies (p "dev-open" z 4) (trans z 3))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (o d name))+ (implies+ (and (p "dev-open" z 1) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-open" z 1) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-open" z 3) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd)) (implies (p "dev-up" z 2) (trans z 1))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd)) (implies (p "dev-up" z 3) (trans z 2))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd)) (implies (p "dev-up" z 4) (trans z 3))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd)) (implies (p "dev-up" z 5) (trans z 4))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-up" z 3) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cau-dev-pass-1+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-pass" z 2) (prec z1 i z 1))+ (or (= z z1) (prec z1 i z 0)))))+ (defgenrule cau-dev-close-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-close" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule cau-dev-open-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-open" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule cau-dev-up-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-up" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule eff-dev-up-3+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-up" z 4) (prec z 3 z1 i))+ (or (= z z1) (and (p "dev-up" z 5) (prec z 4 z1 i))))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))))++(defskeleton subatomic-open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ (traces+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k))))+ (label 3)+ (realized)+ (origs (n (0 3)))+ (comment "Not closed under rules"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (precedes ((1 4) (3 1)) ((2 0) (1 0)) ((3 3) (0 0)))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((1 3) (0 0)) ((1 3) (3 2)) ((3 3) (0 1)))+ (operation channel-test (displaced 4 1 dev-up 4)+ (ch-msg lk (cat pt-5 "st-k" d o k-0)) (3 2))+ (strand-map 0 1 2 3)+ (traces+ ((load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls (cat pt-1 old1)) (stor lk (cat pt-2 "st-k" d o k))+ (stor ls (cat pt-3 "st" d o)))+ ((send start-ch (cat "power-up" d o k)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-4 "st" d any))+ (load lk (cat pt-2 "st-k" d o k)) (stor ls (cat pt "st" d o o))))+ (label 8)+ (parent 3)+ (realized)+ (shape)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls))))+ (origs (pt-2 (1 3)) (pt-3 (1 4)) (pt (3 3)) (n (0 3))))++(comment "Nothing left to do")++(defprotocol subatomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor lk (cat "st-k" d o k))+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch)+ (critical-sections (1 4)))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load ls (cat "st" d any))+ (load lk (cat "st-k" d o k)) (stor ls (cat "st" d o o)) (send n))+ (critical-sections (1 3))+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o))))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n))+ (gen-st (cat "st-k" d o k))+ (critical-sections (1 3)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (load ls (cat "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ (uniq-orig n)+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ (critical-sections (0 1)))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" z (idx 3)) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" z (idx 3)) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" z (idx 3)) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" z (idx 2)) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule eff-dev-up-3+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 4)) (prec z (idx 3) z1 i))+ (or (= z z1)+ (and (p "dev-up" z (idx 5)) (prec z (idx 4) z1 i))))))+ (defgenrule cau-dev-up-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-open-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-open" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-close-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-close" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-pass-1+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-pass" z (idx 2)) (prec z1 i z (idx 1)))+ (or (= z z1) (prec z1 i z (idx 0))))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (o d name))+ (implies+ (and (p "dev-pass" z 1) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-pass" z 1) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-pass" z 2) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd)) (implies (p "dev-close" z 3) (trans z 2))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd)) (implies (p "dev-close" z 4) (trans z 3))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-close" z 1) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-close" z 3) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd)) (implies (p "dev-open" z 2) (trans z 1))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd)) (implies (p "dev-open" z 4) (trans z 3))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (o d name))+ (implies+ (and (p "dev-open" z 1) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (k skey) (o d name))+ (implies+ (and (p "dev-open" z 1) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-open" z 3) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd)) (implies (p "dev-up" z 2) (trans z 1))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd)) (implies (p "dev-up" z 3) (trans z 2))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd)) (implies (p "dev-up" z 4) (trans z 3))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd)) (implies (p "dev-up" z 5) (trans z 4))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (ls lk locn))+ (implies+ (and (p "dev-up" z 3) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cau-dev-pass-1+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-pass" z 2) (prec z1 i z 1))+ (or (= z z1) (prec z1 i z 0)))))+ (defgenrule cau-dev-close-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-close" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule cau-dev-open-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-open" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule cau-dev-up-2+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-up" z 3) (prec z1 i z 2))+ (or (= z z1) (prec z1 i z 1)))))+ (defgenrule eff-dev-up-3+ (forall ((z z1 strd) (i indx))+ (implies (and (p "dev-up" z 4) (prec z 3 z1 i))+ (or (= z z1) (and (p "dev-up" z 5) (prec z 4 z1 i))))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))))++(defskeleton subatomic-open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (uniq-orig k n)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0)) (recv (enc "may I pass" k))+ (send (enc "you may pass" n k))))+ (label 9)+ (unrealized (0 1) (1 0) (1 2))+ (preskeleton)+ (origs (n (1 3)) (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton subatomic-open-closed+ (vars (any old old1 mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (defstrand user-pass 1 (k k))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (precedes ((0 0) (5 0)) ((2 3) (1 0)) ((3 0) (2 0)) ((4 0) (1 2))+ ((5 4) (2 1)) ((5 5) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 3) (1 1)) ((5 3) (1 0)) ((5 3) (2 2)))+ (operation encryption-test (displaced 2 6 dev-up 6) (enc "up" k)+ (0 1))+ (strand-map 0 1 5 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-3 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-0 "st" d any))+ (load lk (cat pt-3 "st-k" d o k)) (stor ls (cat pt "st" d o o)))+ ((send (enc "open" d o n-0 k))) ((send (enc "may I pass" k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt-3 "st-k" d o k))+ (stor ls (cat pt-4 "st" d o)) (send (enc "up" k))))+ (label 21)+ (parent 9)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls))))+ (origs (pt-3 (5 3)) (pt-4 (5 4)) (pt (2 3)) (n (1 3)) (k (0 0))))++(comment "Nothing left to do")
+ tst/defact-subatomic-open-closed.tst view
@@ -0,0 +1,1794 @@+(herald subatomic-open-closed (bound 40))++(comment "CPSA 4.4.5")+(comment "All input read from tst/subatomic-open-closed.scm")+(comment "Strand count bounded at 40")++(defprotocol subatomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor lk (cat "st-k" d o k))+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch)+ )+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load ls (cat "st" d any))+ (load lk (cat "st-k" d o k)) (stor ls (cat "st" d o o)) (send n))+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ )+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n))+ (gen-st (cat "st-k" d o k))+ )+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (load ls (cat "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ (uniq-orig n)+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ )+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule causeRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z1 i1 z j))+ (or (= z z1) (prec z1 i1 z i)))))+ (defgenrule effectRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z i z1 i1))+ (or (= z z1) (prec z j z1 i1)))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" z (idx 3)) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" z (idx 3)) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" z (idx 3)) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" z (idx 2)) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule st-sg-dev-up-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-up-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4))+ (fact st-sg-str z (idx 1) (idx 3)))))+ (defgenrule st-sg-dev-up-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5))+ (fact st-sg-str z (idx 1) (idx 4)))))+ (defgenrule st-sg-dev-open-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-open-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4))+ (fact st-sg-str z (idx 1) (idx 3)))))+ (defgenrule st-sg-dev-close-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-close-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4))+ (fact st-sg-str z (idx 1) (idx 3)))))+ (defgenrule st-sg-dev-pass-1+ (forall ((z strd))+ (implies (p "dev-pass" z (idx 2))+ (fact st-sg-str z (idx 0) (idx 1)))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o))))))++(defskeleton subatomic-open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (uniq-orig k)+ (conf start-ch)+ + (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 0)+ (unrealized (0 1) (1 0))+ (preskeleton)+ (origs (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton subatomic-open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (precedes ((0 0) (1 0)))+ (uniq-orig k)+ (conf start-ch)+ + (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 1)+ (parent 0)+ (unrealized (0 1) (1 0))+ (origs (k (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 mesg) (k skey) (d o name) (pt pt-0 pt-1 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (precedes ((0 0) (2 0)) ((2 3) (1 0)))+ (uniq-orig k)+ (conf start-ch)+ (auth start-ch)+ + + (operation nonce-test (added-strand dev-up 4) k (1 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt old))+ (load ls (cat pt-0 old1)) (stor lk (cat pt-1 "st-k" d o k))))+ (label 2)+ (parent 1)+ (unrealized (0 1) (1 0))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol subatomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor lk (cat "st-k" d o k))+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch)+ )+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load ls (cat "st" d any))+ (load lk (cat "st-k" d o k)) (stor ls (cat "st" d o o)) (send n))+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ )+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n))+ (gen-st (cat "st-k" d o k))+ )+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (load ls (cat "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ (uniq-orig n)+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ )+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule causeRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z1 i1 z j))+ (or (= z z1) (prec z1 i1 z i)))))+ (defgenrule effectRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z i z1 i1))+ (or (= z z1) (prec z j z1 i1)))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" z (idx 3)) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" z (idx 3)) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" z (idx 3)) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" z (idx 2)) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule st-sg-dev-up-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-up-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4))+ (fact st-sg-str z (idx 1) (idx 3)))))+ (defgenrule st-sg-dev-up-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5))+ (fact st-sg-str z (idx 1) (idx 4)))))+ (defgenrule st-sg-dev-open-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-open-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4))+ (fact st-sg-str z (idx 1) (idx 3)))))+ (defgenrule st-sg-dev-close-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-close-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4))+ (fact st-sg-str z (idx 1) (idx 3)))))+ (defgenrule st-sg-dev-pass-1+ (forall ((z strd))+ (implies (p "dev-pass" z (idx 2))+ (fact st-sg-str z (idx 0) (idx 1)))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o))))))++(defskeleton subatomic-open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ + (traces+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k))))+ (label 3)+ (realized)+ (origs (n (0 3)))+ (comment "Not closed under rules"))++(defskeleton subatomic-open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ + + (traces+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k))))+ (label 4)+ (parent 3)+ (unrealized (0 0) (0 1))+ (origs (n (0 3)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o name)+ (pt pt-0 pt-1 pt-2 pval) (start-ch chan) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (precedes ((1 3) (0 0)))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (auth start-ch)+ + (leads-to ((1 3) (0 0)))+ + (operation channel-test (added-strand dev-up 4)+ (ch-msg lk (cat pt "st-k" d o k)) (0 0))+ (strand-map 0)+ (traces+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k))))+ (label 5)+ (parent 4)+ (unrealized (0 1) (1 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o name)+ (pt pt-0 pt-1 pt-2 pval) (start-ch chan) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k) (d d) (o o) (start-ch start-ch))+ (precedes ((1 3) (0 0)) ((2 0) (1 0)))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((1 3) (0 0)))+ + (operation channel-test (added-strand owner-power-dev 1)+ (ch-msg start-ch (cat "power-up" d o k)) (1 0))+ (strand-map 0 1)+ (traces+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((send start-ch (cat "power-up" d o k))))+ (label 6)+ (parent 5)+ (unrealized (0 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (precedes ((1 3) (0 0)) ((2 0) (1 0)) ((3 3) (0 0)))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k) (cat "st-k" d o k-0))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((1 3) (0 0)) ((3 3) (0 1)))+ + (operation channel-test (added-strand dev-open 4)+ (ch-msg ls (cat pt-0 "st" d o o)) (0 1))+ (strand-map 0 1 2)+ (traces+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((send start-ch (cat "power-up" d o k)))+ ((recv (enc "open" d o n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt-4 "st-k" d o k-0))+ (stor ls (cat pt-0 "st" d o o))))+ (label 7)+ (parent 6)+ (seen 8)+ (seen-ops+ (8+ (operation channel-test (added-strand dev-up 4)+ (ch-msg lk (cat pt "st-k" d o k)) (3 2)) (strand-map 0 1 2 3)))+ (unrealized (3 2))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (precedes ((1 3) (3 1)) ((2 0) (1 0)) ((3 3) (0 0)))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((1 3) (0 0)) ((1 3) (3 2)) ((3 3) (0 1)))+ + (operation channel-test (displaced 4 1 dev-up 4)+ (ch-msg lk (cat pt-4 "st-k" d o k-0)) (3 2))+ (strand-map 0 1 2 3)+ (traces+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((send start-ch (cat "power-up" d o k)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt "st-k" d o k)) (stor ls (cat pt-0 "st" d o o))))+ (label 8)+ (parent 7)+ (realized)+ (shape)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls))))+ (origs (pt (1 3)) (pt-0 (3 3)) (n (0 3))))++(defskeleton subatomic-open-closed+ (vars (old old1 any old-0 old1-0 mesg) (k k-0 skey) (n n-0 text)+ (d o name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pt-6 pval)+ (start-ch start-ch-0 chan) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand dev-up 4 (old old-0) (old1 old1-0) (k k-0) (d d) (o o)+ (start-ch start-ch-0) (lk lk) (ls ls))+ (precedes ((1 3) (0 0)) ((2 0) (1 0)) ((3 3) (0 0)) ((4 3) (1 1))+ ((4 3) (3 1)))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k) (cat "st-k" d o k-0))+ (conf start-ch)+ (auth start-ch start-ch-0)+ + (leads-to ((1 3) (0 0)) ((3 3) (0 1)) ((4 3) (3 2)))+ + (operation channel-test (added-strand dev-up 4)+ (ch-msg lk (cat pt-4 "st-k" d o k-0)) (3 2))+ (strand-map 0 1 2 3)+ (traces+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((send start-ch (cat "power-up" d o k)))+ ((recv (enc "open" d o n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt-4 "st-k" d o k-0))+ (stor ls (cat pt-0 "st" d o o)))+ ((recv start-ch-0 (cat "power-up" d o k-0))+ (load lk (cat pt-5 old-0)) (load ls (cat pt-6 old1-0))+ (stor lk (cat pt-4 "st-k" d o k-0))))+ (label 9)+ (parent 7)+ (unrealized (4 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any old-0 old1-0 mesg) (k k-0 skey) (n n-0 text)+ (d o name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pt-6 pval)+ (start-ch start-ch-0 chan) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand dev-up 4 (old old-0) (old1 old1-0) (k k-0) (d d) (o o)+ (start-ch start-ch-0) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k-0) (d d) (o o)+ (start-ch start-ch-0))+ (precedes ((1 3) (0 0)) ((2 0) (1 0)) ((3 3) (0 0)) ((4 3) (1 1))+ ((4 3) (3 1)) ((5 0) (4 0)))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k) (cat "st-k" d o k-0))+ (conf start-ch start-ch-0)+ (auth start-ch start-ch-0)+ + (leads-to ((1 3) (0 0)) ((3 3) (0 1)) ((4 3) (3 2)))+ + (operation channel-test (added-strand owner-power-dev 1)+ (ch-msg start-ch-0 (cat "power-up" d o k-0)) (4 0))+ (strand-map 0 1 2 3 4)+ (traces+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((send start-ch (cat "power-up" d o k)))+ ((recv (enc "open" d o n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt-4 "st-k" d o k-0))+ (stor ls (cat pt-0 "st" d o o)))+ ((recv start-ch-0 (cat "power-up" d o k-0))+ (load lk (cat pt-5 old-0)) (load ls (cat pt-6 old1-0))+ (stor lk (cat pt-4 "st-k" d o k-0)))+ ((send start-ch-0 (cat "power-up" d o k-0))))+ (label 10)+ (parent 9)+ (realized)+ (shape)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls))))+ (origs (pt-4 (4 3)) (pt-0 (3 3)) (pt (1 3)) (n (0 3))))++(comment "Nothing left to do")++(defprotocol subatomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor lk (cat "st-k" d o k))+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch)+ )+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load ls (cat "st" d any))+ (load lk (cat "st-k" d o k)) (stor ls (cat "st" d o o)) (send n))+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ )+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n))+ (gen-st (cat "st-k" d o k))+ )+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (load ls (cat "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ (uniq-orig n)+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ )+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule causeRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z1 i1 z j))+ (or (= z z1) (prec z1 i1 z i)))))+ (defgenrule effectRule+ (forall ((z z1 strd) (i j i1 indx))+ (implies (and (fact st-sg-str z i j) (prec z i z1 i1))+ (or (= z z1) (prec z j z1 i1)))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" z (idx 3)) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" z (idx 3)) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" z (idx 3)) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" z (idx 2)) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule st-sg-dev-up-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-up-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4))+ (fact st-sg-str z (idx 1) (idx 3)))))+ (defgenrule st-sg-dev-up-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5))+ (fact st-sg-str z (idx 1) (idx 4)))))+ (defgenrule st-sg-dev-open-2+ (forall ((z strd))+ (implies (p "dev-open" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-open-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4))+ (fact st-sg-str z (idx 1) (idx 3)))))+ (defgenrule st-sg-dev-close-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 3))+ (fact st-sg-str z (idx 1) (idx 2)))))+ (defgenrule st-sg-dev-close-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4))+ (fact st-sg-str z (idx 1) (idx 3)))))+ (defgenrule st-sg-dev-pass-1+ (forall ((z strd))+ (implies (p "dev-pass" z (idx 2))+ (fact st-sg-str z (idx 0) (idx 1)))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o))))))++(defskeleton subatomic-open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (uniq-orig k n)+ (conf start-ch)+ + (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0)) (recv (enc "may I pass" k))+ (send (enc "you may pass" n k))))+ (label 11)+ (unrealized (0 1) (1 0) (1 2))+ (preskeleton)+ (origs (n (1 3)) (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton subatomic-open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (precedes ((0 0) (1 0)))+ (uniq-orig k n)+ (conf start-ch)+ + (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0)) (recv (enc "may I pass" k))+ (send (enc "you may pass" n k))))+ (label 12)+ (parent 11)+ (unrealized (0 1) (1 0) (1 2))+ (origs (n (1 3)) (k (0 0)))+ (comment "Not closed under rules"))++(defskeleton subatomic-open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (precedes ((0 0) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d-0 o-0 o-0) (cat "st-k" d-0 o-0 k))+ (conf start-ch)+ + + (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0)) (recv (enc "may I pass" k))+ (send (enc "you may pass" n k))))+ (label 13)+ (parent 12)+ (unrealized (0 1) (1 0) (1 1) (1 2))+ (origs (n (1 3)) (k (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o d-0 o-0 name)+ (pt pt-0 pt-1 pt-2 pval) (start-ch start-ch-0 chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d-0) (o o-0)+ (start-ch start-ch-0) (lk lk) (ls ls))+ (precedes ((0 0) (2 0)) ((2 3) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d-0 o-0 o-0) (cat "st-k" d-0 o-0 k))+ (conf start-ch)+ (auth start-ch-0)+ + (leads-to ((2 3) (1 0)))+ + (operation channel-test (added-strand dev-up 4)+ (ch-msg lk (cat pt "st-k" d-0 o-0 k)) (1 0))+ (strand-map 0 1)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0)) (recv (enc "may I pass" k))+ (send (enc "you may pass" n k)))+ ((recv start-ch-0 (cat "power-up" d-0 o-0 k))+ (load lk (cat pt-1 old)) (load ls (cat pt-2 old1))+ (stor lk (cat pt "st-k" d-0 o-0 k))))+ (label 14)+ (parent 13)+ (unrealized (0 1) (1 1) (1 2) (2 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 mesg) (k skey) (n text) (d o name)+ (pt pt-0 pt-1 pt-2 pval) (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (precedes ((0 0) (2 0)) ((2 3) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)))+ + (operation channel-test (displaced 3 0 owner-power-dev 1)+ (ch-msg start-ch-0 (cat "power-up" d-0 o-0 k)) (2 0))+ (strand-map 0 1 2)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k))))+ (label 15)+ (parent 14)+ (unrealized (0 1) (1 1) (1 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (precedes ((0 0) (2 0)) ((2 3) (1 0)) ((3 3) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k) (cat "st-k" d o k-0))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((3 3) (1 1)))+ + (operation channel-test (added-strand dev-open 4)+ (ch-msg ls (cat pt-0 "st" d o o)) (1 1))+ (strand-map 0 1 2)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((recv (enc "open" d o n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt-4 "st-k" d o k-0))+ (stor ls (cat pt-0 "st" d o o))))+ (label 16)+ (parent 15)+ (seen 17)+ (seen-ops+ (17+ (operation channel-test (added-strand dev-up 4)+ (ch-msg lk (cat pt "st-k" d o k)) (3 2)) (strand-map 0 1 2 3)))+ (unrealized (0 1) (1 2) (3 2))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (precedes ((0 0) (2 0)) ((2 3) (3 1)) ((3 3) (1 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation channel-test (displaced 4 2 dev-up 4)+ (ch-msg lk (cat pt-4 "st-k" d o k-0)) (3 2))+ (strand-map 0 1 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt "st-k" d o k)) (stor ls (cat pt-0 "st" d o o))))+ (label 17)+ (parent 16)+ (unrealized (0 1) (1 2) (3 0))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any old-0 old1-0 mesg) (k k-0 skey) (n n-0 text)+ (d o name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pt-6 pval)+ (start-ch start-ch-0 chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand dev-up 4 (old old-0) (old1 old1-0) (k k-0) (d d) (o o)+ (start-ch start-ch-0) (lk lk) (ls ls))+ (precedes ((0 0) (2 0)) ((2 3) (1 0)) ((3 3) (1 0)) ((4 3) (2 1))+ ((4 3) (3 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k) (cat "st-k" d o k-0))+ (conf start-ch)+ (auth start-ch start-ch-0)+ + (leads-to ((2 3) (1 0)) ((3 3) (1 1)) ((4 3) (3 2)))+ + (operation channel-test (added-strand dev-up 4)+ (ch-msg lk (cat pt-4 "st-k" d o k-0)) (3 2))+ (strand-map 0 1 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((recv (enc "open" d o n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt-4 "st-k" d o k-0))+ (stor ls (cat pt-0 "st" d o o)))+ ((recv start-ch-0 (cat "power-up" d o k-0))+ (load lk (cat pt-5 old-0)) (load ls (cat pt-6 old1-0))+ (stor lk (cat pt-4 "st-k" d o k-0))))+ (label 18)+ (parent 16)+ (unrealized (0 1) (1 2) (4 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (precedes ((0 0) (2 0)) ((2 3) (3 1)) ((3 3) (1 0)) ((4 0) (3 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation encryption-test (added-strand owner-open 1)+ (enc "open" d o n-0 k) (3 0))+ (strand-map 0 1 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt "st-k" d o k)) (stor ls (cat pt-0 "st" d o o)))+ ((send (enc "open" d o n-0 k))))+ (label 19)+ (parent 17)+ (unrealized (0 1) (1 2))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((0 0) (4 0)) ((2 3) (3 1)) ((3 3) (1 0))+ ((4 1) (3 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation encryption-test (added-listener k) (enc "open" d o n-0 k)+ (3 0))+ (strand-map 0 1 2 3)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt "st-k" d o k)) (stor ls (cat pt-0 "st" d o o)))+ ((recv k) (send k)))+ (label 20)+ (parent 17)+ (seen 24)+ (seen-ops+ (24+ (operation nonce-test (added-strand dev-up 4) k (4 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4)))+ (unrealized (0 1) (4 0))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any old-0 old1-0 mesg) (k k-0 skey) (n n-0 text)+ (d o name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pt-6 pval)+ (start-ch start-ch-0 chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand dev-up 4 (old old-0) (old1 old1-0) (k k-0) (d d) (o o)+ (start-ch start-ch-0) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k-0) (d d) (o o)+ (start-ch start-ch-0))+ (precedes ((0 0) (2 0)) ((2 3) (1 0)) ((3 3) (1 0)) ((4 3) (2 1))+ ((4 3) (3 1)) ((5 0) (4 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k) (cat "st-k" d o k-0))+ (conf start-ch start-ch-0)+ (auth start-ch start-ch-0)+ + (leads-to ((2 3) (1 0)) ((3 3) (1 1)) ((4 3) (3 2)))+ + (operation channel-test (added-strand owner-power-dev 1)+ (ch-msg start-ch-0 (cat "power-up" d o k-0)) (4 0))+ (strand-map 0 1 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((recv (enc "open" d o n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt-4 "st-k" d o k-0))+ (stor ls (cat pt-0 "st" d o o)))+ ((recv start-ch-0 (cat "power-up" d o k-0))+ (load lk (cat pt-5 old-0)) (load ls (cat pt-6 old1-0))+ (stor lk (cat pt-4 "st-k" d o k-0)))+ ((send start-ch-0 (cat "power-up" d o k-0))))+ (label 21)+ (parent 18)+ (unrealized (0 1) (1 2))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (defstrand user-pass 1 (k k))+ (precedes ((0 0) (2 0)) ((2 3) (3 1)) ((3 3) (1 0)) ((4 0) (3 0))+ ((5 0) (1 2)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation encryption-test (added-strand user-pass 1)+ (enc "may I pass" k) (1 2))+ (strand-map 0 1 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt "st-k" d o k)) (stor ls (cat pt-0 "st" d o o)))+ ((send (enc "open" d o n-0 k))) ((send (enc "may I pass" k))))+ (label 22)+ (parent 19)+ (seen 27)+ (seen-ops+ (27+ (operation encryption-test (added-strand dev-up 6) (enc "up" k)+ (0 1)) (strand-map 0 1 5 2 3 4)))+ (unrealized (0 1))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((0 0) (5 0)) ((2 3) (3 1)) ((3 3) (1 0))+ ((4 0) (3 0)) ((5 1) (1 2)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation encryption-test (added-listener k) (enc "may I pass" k)+ (1 2))+ (strand-map 0 1 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt "st-k" d o k)) (stor ls (cat pt-0 "st" d o o)))+ ((send (enc "open" d o n-0 k))) ((recv k) (send k)))+ (label 23)+ (parent 19)+ (seen 29)+ (seen-ops+ (29+ (operation nonce-test (added-strand dev-up 4) k (5 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (0 1) (5 0))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((2 3) (4 0)) ((3 3) (1 0)) ((4 1) (3 0)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation nonce-test (displaced 5 2 dev-up 4) k (4 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt "st-k" d o k)) (stor ls (cat pt-0 "st" d o o)))+ ((recv k) (send k)))+ (label 24)+ (parent 20)+ (unrealized (0 1) (4 0))+ (dead)+ (comment "empty cohort"))++(defskeleton subatomic-open-closed+ (vars (old old1 any old-0 old1-0 mesg) (k k-0 skey) (n n-0 text)+ (d o name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pt-6 pval)+ (start-ch start-ch-0 chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand dev-up 4 (old old-0) (old1 old1-0) (k k-0) (d d) (o o)+ (start-ch start-ch-0) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k-0) (d d) (o o)+ (start-ch start-ch-0))+ (defstrand user-pass 1 (k k))+ (precedes ((0 0) (2 0)) ((2 3) (1 0)) ((3 3) (1 0)) ((4 3) (2 1))+ ((4 3) (3 1)) ((5 0) (4 0)) ((6 0) (1 2)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k) (cat "st-k" d o k-0))+ (conf start-ch start-ch-0)+ (auth start-ch start-ch-0)+ + (leads-to ((2 3) (1 0)) ((3 3) (1 1)) ((4 3) (3 2)))+ + (operation encryption-test (added-strand user-pass 1)+ (enc "may I pass" k) (1 2))+ (strand-map 0 1 2 3 4 5)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((recv (enc "open" d o n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt-4 "st-k" d o k-0))+ (stor ls (cat pt-0 "st" d o o)))+ ((recv start-ch-0 (cat "power-up" d o k-0))+ (load lk (cat pt-5 old-0)) (load ls (cat pt-6 old1-0))+ (stor lk (cat pt-4 "st-k" d o k-0)))+ ((send start-ch-0 (cat "power-up" d o k-0)))+ ((send (enc "may I pass" k))))+ (label 25)+ (parent 21)+ (unrealized (0 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any old-0 old1-0 mesg) (k k-0 skey) (n n-0 text)+ (d o name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pt-6 pval)+ (start-ch start-ch-0 chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand dev-up 4 (old old-0) (old1 old1-0) (k k-0) (d d) (o o)+ (start-ch start-ch-0) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k-0) (d d) (o o)+ (start-ch start-ch-0))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((0 0) (6 0)) ((2 3) (1 0)) ((3 3) (1 0))+ ((4 3) (2 1)) ((4 3) (3 1)) ((5 0) (4 0)) ((6 1) (1 2)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k) (cat "st-k" d o k-0))+ (conf start-ch start-ch-0)+ (auth start-ch start-ch-0)+ + (leads-to ((2 3) (1 0)) ((3 3) (1 1)) ((4 3) (3 2)))+ + (operation encryption-test (added-listener k) (enc "may I pass" k)+ (1 2))+ (strand-map 0 1 2 3 4 5)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((recv (enc "open" d o n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt-4 "st-k" d o k-0))+ (stor ls (cat pt-0 "st" d o o)))+ ((recv start-ch-0 (cat "power-up" d o k-0))+ (load lk (cat pt-5 old-0)) (load ls (cat pt-6 old1-0))+ (stor lk (cat pt-4 "st-k" d o k-0)))+ ((send start-ch-0 (cat "power-up" d o k-0))) ((recv k) (send k)))+ (label 26)+ (parent 21)+ (seen 31)+ (seen-ops+ (31+ (operation nonce-test (added-strand dev-up 4) k (6 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5 6)))+ (unrealized (0 1) (6 0))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (any old old1 mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (defstrand user-pass 1 (k k))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (precedes ((0 0) (5 0)) ((2 3) (1 0)) ((3 0) (2 0)) ((4 0) (1 2))+ ((5 4) (2 1)) ((5 5) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 1)) ((5 3) (1 0)) ((5 3) (2 2)))+ + (operation encryption-test (displaced 2 6 dev-up 6) (enc "up" k)+ (0 1))+ (strand-map 0 1 5 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-3 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-0 "st" d any))+ (load lk (cat pt-3 "st-k" d o k)) (stor ls (cat pt "st" d o o)))+ ((send (enc "open" d o n-0 k))) ((send (enc "may I pass" k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt-3 "st-k" d o k))+ (stor ls (cat pt-4 "st" d o)) (send (enc "up" k))))+ (label 27)+ (parent 22)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls))))+ (origs (pt-3 (5 3)) (pt-4 (5 4)) (pt (2 3)) (n (1 3)) (k (0 0))))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (defstrand user-pass 1 (k k))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((0 0) (6 0)) ((2 3) (3 1)) ((3 3) (1 0))+ ((4 0) (3 0)) ((5 0) (1 2)) ((6 1) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation encryption-test (added-listener k) (enc "up" k) (0 1))+ (strand-map 0 1 2 3 4 5)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt "st-k" d o k)) (stor ls (cat pt-0 "st" d o o)))+ ((send (enc "open" d o n-0 k))) ((send (enc "may I pass" k)))+ ((recv k) (send k)))+ (label 28)+ (parent 22)+ (seen 32)+ (seen-ops+ (32+ (operation nonce-test (added-strand dev-up 4) k (6 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5 6)))+ (unrealized (6 0))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((2 3) (3 1)) ((2 3) (5 0)) ((3 3) (1 0))+ ((4 0) (3 0)) ((5 1) (1 2)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation nonce-test (displaced 6 2 dev-up 4) k (5 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt "st-k" d o k)) (stor ls (cat pt-0 "st" d o o)))+ ((send (enc "open" d o n-0 k))) ((recv k) (send k)))+ (label 29)+ (parent 23)+ (unrealized (0 1) (5 0))+ (dead)+ (comment "empty cohort"))++(defskeleton subatomic-open-closed+ (vars (old old1 any old-0 old1-0 mesg) (k k-0 skey) (n n-0 text)+ (d o name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pt-6 pval)+ (start-ch start-ch-0 chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand dev-up 4 (old old-0) (old1 old1-0) (k k-0) (d d) (o o)+ (start-ch start-ch-0) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k-0) (d d) (o o)+ (start-ch start-ch-0))+ (defstrand user-pass 1 (k k))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((0 0) (7 0)) ((2 3) (1 0)) ((3 3) (1 0))+ ((4 3) (2 1)) ((4 3) (3 1)) ((5 0) (4 0)) ((6 0) (1 2))+ ((7 1) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k) (cat "st-k" d o k-0))+ (conf start-ch start-ch-0)+ (auth start-ch start-ch-0)+ + (leads-to ((2 3) (1 0)) ((3 3) (1 1)) ((4 3) (3 2)))+ + (operation encryption-test (added-listener k) (enc "up" k) (0 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((recv (enc "open" d o n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt-4 "st-k" d o k-0))+ (stor ls (cat pt-0 "st" d o o)))+ ((recv start-ch-0 (cat "power-up" d o k-0))+ (load lk (cat pt-5 old-0)) (load ls (cat pt-6 old1-0))+ (stor lk (cat pt-4 "st-k" d o k-0)))+ ((send start-ch-0 (cat "power-up" d o k-0)))+ ((send (enc "may I pass" k))) ((recv k) (send k)))+ (label 30)+ (parent 25)+ (seen 33)+ (seen-ops+ (33+ (operation nonce-test (added-strand dev-up 4) k (7 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5 6 7)))+ (unrealized (7 0))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton subatomic-open-closed+ (vars (old old1 any old-0 old1-0 mesg) (k k-0 skey) (n n-0 text)+ (d o name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pt-6 pval)+ (start-ch start-ch-0 chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand dev-up 4 (old old-0) (old1 old1-0) (k k-0) (d d) (o o)+ (start-ch start-ch-0) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k-0) (d d) (o o)+ (start-ch start-ch-0))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((2 3) (1 0)) ((2 3) (6 0)) ((3 3) (1 0))+ ((4 3) (2 1)) ((4 3) (3 1)) ((5 0) (4 0)) ((6 1) (1 2)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k) (cat "st-k" d o k-0))+ (conf start-ch start-ch-0)+ (auth start-ch start-ch-0)+ + (leads-to ((2 3) (1 0)) ((3 3) (1 1)) ((4 3) (3 2)))+ + (operation nonce-test (displaced 7 2 dev-up 4) k (6 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5 6)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((recv (enc "open" d o n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt-4 "st-k" d o k-0))+ (stor ls (cat pt-0 "st" d o o)))+ ((recv start-ch-0 (cat "power-up" d o k-0))+ (load lk (cat pt-5 old-0)) (load ls (cat pt-6 old1-0))+ (stor lk (cat pt-4 "st-k" d o k-0)))+ ((send start-ch-0 (cat "power-up" d o k-0))) ((recv k) (send k)))+ (label 31)+ (parent 26)+ (unrealized (0 1) (6 0))+ (dead)+ (comment "empty cohort"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (defstrand user-pass 1 (k k))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((2 3) (3 1)) ((2 3) (6 0)) ((3 3) (1 0))+ ((4 0) (3 0)) ((5 0) (1 2)) ((6 1) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ + (leads-to ((2 3) (1 0)) ((2 3) (3 2)) ((3 3) (1 1)))+ + (operation nonce-test (displaced 7 2 dev-up 4) k (6 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5 6)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt "st-k" d o k)) (stor ls (cat pt-0 "st" d o o)))+ ((send (enc "open" d o n-0 k))) ((send (enc "may I pass" k)))+ ((recv k) (send k)))+ (label 32)+ (parent 28)+ (unrealized (6 0))+ (dead)+ (comment "empty cohort"))++(defskeleton subatomic-open-closed+ (vars (old old1 any old-0 old1-0 mesg) (k k-0 skey) (n n-0 text)+ (d o name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pt-6 pval)+ (start-ch start-ch-0 chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 4 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand dev-up 4 (old old-0) (old1 old1-0) (k k-0) (d d) (o o)+ (start-ch start-ch-0) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k-0) (d d) (o o)+ (start-ch start-ch-0))+ (defstrand user-pass 1 (k k))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((2 3) (1 0)) ((2 3) (7 0)) ((3 3) (1 0))+ ((4 3) (2 1)) ((4 3) (3 1)) ((5 0) (4 0)) ((6 0) (1 2))+ ((7 1) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k) (cat "st-k" d o k-0))+ (conf start-ch start-ch-0)+ (auth start-ch start-ch-0)+ + (leads-to ((2 3) (1 0)) ((3 3) (1 1)) ((4 3) (3 2)))+ + (operation nonce-test (displaced 8 2 dev-up 4) k (7 0)+ (ch-msg start-ch (cat "power-up" d o k)))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt "st-k" d o k)))+ ((recv (enc "open" d o n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (load lk (cat pt-4 "st-k" d o k-0))+ (stor ls (cat pt-0 "st" d o o)))+ ((recv start-ch-0 (cat "power-up" d o k-0))+ (load lk (cat pt-5 old-0)) (load ls (cat pt-6 old1-0))+ (stor lk (cat pt-4 "st-k" d o k-0)))+ ((send start-ch-0 (cat "power-up" d o k-0)))+ ((send (enc "may I pass" k))) ((recv k) (send k)))+ (label 33)+ (parent 30)+ (unrealized (7 0))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")
+ tst/defact-subatomic-open-closed_shapes.tst view
@@ -0,0 +1,694 @@+(comment "CPSA 4.4.5")+(comment "Extracted shapes")++(herald subatomic-open-closed (bound 40))++(comment "CPSA 4.4.5")++(comment "All input read from tst/subatomic-open-closed.scm")++(comment "Strand count bounded at 40")++(defprotocol subatomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor lk (cat "st-k" d o k))+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch)+ (critical-sections (1 4)))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load ls (cat "st" d any))+ (load lk (cat "st-k" d o k)) (stor ls (cat "st" d o o)) (send n))+ (critical-sections (1 3))+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o))))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n))+ (gen-st (cat "st-k" d o k))+ (critical-sections (1 3)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (load ls (cat "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ (uniq-orig n)+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ (critical-sections (0 1)))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" z (idx 3)) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" z (idx 3)) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" z (idx 3)) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" z (idx 2)) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule eff-dev-up-3+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 4)) (prec z (idx 3) z1 i))+ (or (= z z1)+ (and (p "dev-up" z (idx 5)) (prec z (idx 4) z1 i))))))+ (defgenrule cau-dev-up-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-open-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-open" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-close-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-close" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-pass-1+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-pass" z (idx 2)) (prec z1 i z (idx 1)))+ (or (= z z1) (prec z1 i z (idx 0))))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o))))))++(defskeleton subatomic-open-closed+ (vars (k skey) (d o name) (start-ch chan))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (deflistener k)+ (uniq-orig k)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((recv k) (send k)))+ (label 0)+ (unrealized (0 1) (1 0))+ (preskeleton)+ (origs (k (0 0)))+ (comment "Not a skeleton"))++(comment "Nothing left to do")++(defprotocol subatomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor lk (cat "st-k" d o k))+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch)+ (critical-sections (1 4)))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load ls (cat "st" d any))+ (load lk (cat "st-k" d o k)) (stor ls (cat "st" d o o)) (send n))+ (critical-sections (1 3))+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o))))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n))+ (gen-st (cat "st-k" d o k))+ (critical-sections (1 3)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (load ls (cat "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ (uniq-orig n)+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ (critical-sections (0 1)))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" z (idx 3)) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" z (idx 3)) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" z (idx 3)) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" z (idx 2)) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule eff-dev-up-3+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 4)) (prec z (idx 3) z1 i))+ (or (= z z1)+ (and (p "dev-up" z (idx 5)) (prec z (idx 4) z1 i))))))+ (defgenrule cau-dev-up-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-open-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-open" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-close-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-close" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-pass-1+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-pass" z (idx 2)) (prec z1 i z (idx 1)))+ (or (= z z1) (prec z1 i z (idx 0))))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o))))))++(defskeleton subatomic-open-closed+ (vars (k skey) (n text) (d o name) (pt pt-0 pval) (lk ls locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (uniq-orig n)+ (traces+ ((load lk (cat pt "st-k" d o k)) (load ls (cat pt-0 "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k))))+ (label 3)+ (realized)+ (origs (n (0 3)))+ (comment "Not closed under rules"))++(defskeleton subatomic-open-closed+ (vars (old old1 any mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (ls lk locn))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (defstrand owner-power-dev 1 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (precedes ((1 4) (3 1)) ((2 0) (1 0)) ((3 3) (0 0)))+ (uniq-orig n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((1 3) (0 0)) ((1 3) (3 2)) ((3 3) (0 1)))+ (operation channel-test (displaced 4 1 dev-up 4)+ (ch-msg lk (cat pt-5 "st-k" d o k-0)) (3 2))+ (strand-map 0 1 2 3)+ (traces+ ((load lk (cat pt-2 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls (cat pt-1 old1)) (stor lk (cat pt-2 "st-k" d o k))+ (stor ls (cat pt-3 "st" d o)))+ ((send start-ch (cat "power-up" d o k)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-4 "st" d any))+ (load lk (cat pt-2 "st-k" d o k)) (stor ls (cat pt "st" d o o))))+ (label 8)+ (parent 3)+ (realized)+ (shape)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls))))+ (origs (pt-2 (1 3)) (pt-3 (1 4)) (pt (3 3)) (n (0 3))))++(comment "Nothing left to do")++(defprotocol subatomic-open-closed basic+ (defrole dev-up+ (vars (k skey) (d o name) (old old1 mesg) (start-ch chan)+ (lk ls locn))+ (trace (recv start-ch (cat "power-up" d o k)) (load lk old)+ (load ls old1) (stor lk (cat "st-k" d o k))+ (stor ls (cat "st" d o)) (send (enc "up" k)))+ (auth start-ch)+ (critical-sections (1 4)))+ (defrole owner-power-dev+ (vars (k skey) (d o name) (start-ch chan))+ (trace (send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ (conf start-ch))+ (defrole owner-open+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "open" d o n k)) (recv n)))+ (defrole owner-close+ (vars (k skey) (n text) (d o name))+ (trace (send (enc "close" d o n k)) (recv n)))+ (defrole dev-open+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "open" d o n k)) (load ls (cat "st" d any))+ (load lk (cat "st-k" d o k)) (stor ls (cat "st" d o o)) (send n))+ (critical-sections (1 3))+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o))))+ (defrole dev-close+ (vars (k skey) (n text) (any mesg) (d o name) (lk ls locn))+ (trace (recv (enc "close" d o n k)) (load lk (cat "st-k" d o k))+ (load ls (cat "st" d any)) (stor ls (cat "st" d o)) (send n))+ (gen-st (cat "st-k" d o k))+ (critical-sections (1 3)))+ (defrole dev-pass+ (vars (k skey) (n text) (d o name) (lk ls locn))+ (trace (load lk (cat "st-k" d o k)) (load ls (cat "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ (uniq-orig n)+ (gen-st (cat "st-k" d o k) (cat "st" d (cat o o)))+ (critical-sections (0 1)))+ (defrole user-pass+ (vars (k skey))+ (trace (send (enc "may I pass" k)) (recv (enc "you may pass" k))))+ (defrule power-deliver-once+ (forall ((z1 z2 strd) (k skey))+ (implies+ (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))+ (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (= z1 z2))))+ (defrule same-dev-ls-lk+ (forall ((ls lk lk-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (= lk lk-0))))+ (defrule same-dev-lk-ls+ (forall ((lk ls ls-0 locn))+ (implies+ (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (= ls ls-0))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule discreteAfter+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule discreteBefore+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule fact-dev-up-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-up" z (idx 3)) (p "dev-up" "ls" z ls)+ (p "dev-up" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-open-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-open" z (idx 3)) (p "dev-open" "ls" z ls)+ (p "dev-open" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-close-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-close" z (idx 3)) (p "dev-close" "ls" z ls)+ (p "dev-close" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule fact-dev-pass-same-dev0+ (forall ((z strd) (lk ls locn))+ (implies+ (and (p "dev-pass" z (idx 2)) (p "dev-pass" "ls" z ls)+ (p "dev-pass" "lk" z lk)) (fact same-dev ls lk))))+ (defgenrule trRl_dev-up-at-4+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 4)))))+ (defgenrule trRl_dev-up-at-3+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-up-at-2+ (forall ((z strd))+ (implies (p "dev-up" z (idx 5)) (trans z (idx 2)))))+ (defgenrule trRl_dev-up-at-1+ (forall ((z strd))+ (implies (p "dev-up" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-open-at-3+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-open-at-1+ (forall ((z strd))+ (implies (p "dev-open" z (idx 4)) (trans z (idx 1)))))+ (defgenrule trRl_dev-close-at-3+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_dev-close-at-2+ (forall ((z strd))+ (implies (p "dev-close" z (idx 4)) (trans z (idx 2)))))+ (defgenrule eff-dev-up-3+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 4)) (prec z (idx 3) z1 i))+ (or (= z z1)+ (and (p "dev-up" z (idx 5)) (prec z (idx 4) z1 i))))))+ (defgenrule cau-dev-up-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-up" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-open-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-open" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-close-2+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-close" z (idx 3)) (prec z1 i z (idx 2)))+ (or (= z z1) (prec z1 i z (idx 1))))))+ (defgenrule cau-dev-pass-1+ (forall ((i indx) (z1 z strd))+ (implies (and (p "dev-pass" z (idx 2)) (prec z1 i z (idx 1)))+ (or (= z z1) (prec z1 i z (idx 0))))))+ (defgenrule gen-st-dev-open-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "k" z k)+ (p "dev-open" "o" z o) (p "dev-open" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-open-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-open" z (idx 1)) (p "dev-open" "o" z o)+ (p "dev-open" "d" z d)) (gen-st (cat "st" d o o)))))+ (defgenrule gen-st-dev-close-0+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-close" z (idx 1)) (p "dev-close" "k" z k)+ (p "dev-close" "o" z o) (p "dev-close" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-1+ (forall ((z strd) (d o name) (k skey))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d))+ (gen-st (cat "st-k" d o k)))))+ (defgenrule gen-st-dev-pass-0+ (forall ((z strd) (d o name))+ (implies+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "o" z o)+ (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o))))))++(defskeleton subatomic-open-closed+ (vars (k skey) (n text) (d o d-0 o-0 name) (pt pt-0 pval)+ (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d-0) (o o-0) (lk lk) (ls ls))+ (uniq-orig k n)+ (conf start-ch)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt "st-k" d-0 o-0 k))+ (load ls (cat pt-0 "st" d-0 o-0 o-0)) (recv (enc "may I pass" k))+ (send (enc "you may pass" n k))))+ (label 9)+ (unrealized (0 1) (1 0) (1 2))+ (preskeleton)+ (origs (n (1 3)) (k (0 0)))+ (comment "Not a skeleton"))++(defskeleton subatomic-open-closed+ (vars (any old old1 mesg) (k skey) (n n-0 text) (d o name)+ (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval) (start-ch chan) (lk ls locn))+ (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-open 4 (any any) (k k) (n n-0) (d d) (o o) (lk lk)+ (ls ls))+ (defstrand owner-open 1 (k k) (n n-0) (d d) (o o))+ (defstrand user-pass 1 (k k))+ (defstrand dev-up 6 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls))+ (precedes ((0 0) (5 0)) ((2 3) (1 0)) ((3 0) (2 0)) ((4 0) (1 2))+ ((5 4) (2 1)) ((5 5) (0 1)))+ (uniq-orig k n)+ (gen-st (cat "st" d o o) (cat "st-k" d o k))+ (conf start-ch)+ (auth start-ch)+ (leads-to ((2 3) (1 1)) ((5 3) (1 0)) ((5 3) (2 2)))+ (operation encryption-test (displaced 2 6 dev-up 6) (enc "up" k)+ (0 1))+ (strand-map 0 1 5 2 3 4)+ (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))+ ((load lk (cat pt-3 "st-k" d o k)) (load ls (cat pt "st" d o o))+ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))+ ((recv (enc "open" d o n-0 k)) (load ls (cat pt-0 "st" d any))+ (load lk (cat pt-3 "st-k" d o k)) (stor ls (cat pt "st" d o o)))+ ((send (enc "open" d o n-0 k))) ((send (enc "may I pass" k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-1 old))+ (load ls (cat pt-2 old1)) (stor lk (cat pt-3 "st-k" d o k))+ (stor ls (cat pt-4 "st" d o)) (send (enc "up" k))))+ (label 21)+ (parent 9)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls))))+ (origs (pt-3 (5 3)) (pt-4 (5 4)) (pt (2 3)) (n (1 3)) (k (0 0))))++(comment "Nothing left to do")
+ tst/defact-sync_locn_envelope.tst view
@@ -0,0 +1,3195 @@+(herald "Envelope Protocol, location-based version" (check-nonces)+ (bound 30) (limit 6000))++(comment "CPSA 4.4.5")+(comment "All input read from tst/sync_locn_envelope.scm")+(comment "Step count limited to 6000")+(comment "Strand count bounded at 30")+(comment "Nonces checked first")++(defprotocol envelope basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id nonce text) (pcr locn)+ (tpm chan))+ (trace (send tpm (cat "token" nonce))+ (recv tpm (cat "extend" pcr-id value (hash pcr-id value nonce)))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok"))+ (uniq-orig nonce))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id nonce text) (k aik akey)+ (tpm tpmconf chan))+ (trace (recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpmconf)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-3+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 4)) (trans z (idx 2))))))++(defskeleton envelope+ (vars (v n data) (pcr-id nonce text) (k aik akey) (tpm tpmconf chan))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (non-orig aik)+ (uniq-orig v n)+ (conf tpmconf)+ (traces ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 0)+ (unrealized (0 0) (1 3))+ (preskeleton)+ (origs (v (1 4)) (n (1 1)))+ (comment "Not a skeleton"))++(defskeleton envelope+ (vars (v n data) (pcr-id nonce text) (k aik akey) (tpm tpmconf chan))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (precedes ((1 4) (0 0)))+ (non-orig aik)+ (uniq-orig v n)+ (conf tpmconf)+ (traces ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 1)+ (parent 0)+ (unrealized (1 3))+ (origs (v (1 4)) (n (1 1)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (v n data) (pcr-id nonce text) (k aik akey)+ (tpm tpmconf tpm-0 chan))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm-0))+ (precedes ((1 4) (0 0)) ((2 1) (1 3)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (conf tpmconf)+ (auth tpm-0)+ (operation encryption-test (added-strand tpm-create-key 2)+ (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik) (1 3))+ (strand-map 0 1)+ (traces ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-0 (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))))+ (label 2)+ (parent 1)+ (unrealized (0 0) (2 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (v n data) (pcr-id nonce text) (k aik akey) (tpm tpmconf chan))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (precedes ((1 2) (2 0)) ((1 4) (0 0)) ((2 1) (1 3)))+ (non-orig aik (invk k))+ (uniq-orig v n k)+ (conf tpmconf)+ (auth tpm)+ (operation channel-test (displaced 3 1 alice 3)+ (ch-msg tpm-0+ (cat "create-req" pcr-id (hash (hash "0" n) "obtain"))) (2 0))+ (strand-map 0 1 2)+ (traces ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))))+ (label 3)+ (parent 2)+ (unrealized (0 0) (1 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (v n data) (pcr-id nonce text) (k aik akey) (tpm tpmconf chan))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (precedes ((1 2) (2 0)) ((1 4) (0 0)) ((2 1) (1 3)) ((3 0) (1 0)))+ (non-orig aik (invk k))+ (uniq-orig v n nonce k)+ (conf tpmconf)+ (auth tpm)+ (operation channel-test (added-strand tpm-extend-enc 1)+ (ch-msg tpm (cat "token" nonce)) (1 0))+ (strand-map 0 1 2)+ (traces ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce))))+ (label 4)+ (parent 3)+ (unrealized (0 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (current-value mesg) (v n data) (pcr-id nonce pcr-id-0 text)+ (k aik aik-0 akey) (pt pval) (tpm tpmconf tpm-0 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v) (current-value current-value)+ (pcr-id pcr-id-0) (k k) (aik aik-0) (tpm tpm-0) (pcr pcr))+ (precedes ((1 2) (2 0)) ((1 4) (4 0)) ((2 1) (1 3)) ((3 0) (1 0))+ ((4 3) (0 0)))+ (non-orig aik aik-0 (invk k))+ (uniq-orig v n nonce k)+ (conf tpmconf)+ (auth tpm)+ (operation nonce-test (added-strand tpm-decrypt 4) v (0 0) (enc v k))+ (strand-map 0 1 2 3)+ (traces ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 current-value aik-0))+ (load pcr (cat pt current-value)) (send v)))+ (label 5)+ (parent 4)+ (unrealized (4 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (v n data) (pcr-id nonce text) (k aik akey) (pt pval)+ (tpm tpmconf tpm-0 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (precedes ((1 2) (2 0)) ((1 4) (4 0)) ((2 1) (1 3)) ((3 0) (1 0))+ ((4 3) (0 0)))+ (non-orig aik (invk k))+ (uniq-orig v n nonce k)+ (gen-st (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpm)+ + (operation encryption-test (displaced 5 2 tpm-create-key 2)+ (enc "created" k pcr-id-0 current-value aik-0) (4 1))+ (strand-map 0 1 2 3 4)+ (traces ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v)))+ (label 6)+ (parent 5)+ (unrealized (4 2))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton envelope+ (vars (v n data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (pt pt-0 pval) (tpmconf tpm tpm-0 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id) (nonce nonce) (k k)+ (aik aik) (tpm tpm-0) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm-0))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (precedes ((1 2) (2 0)) ((1 4) (3 0)) ((2 1) (1 3)) ((3 3) (0 0))+ ((4 0) (1 0)) ((4 3) (3 2)))+ (non-orig aik (invk k))+ (uniq-orig v n nonce k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpm-0)+ (leads-to ((4 3) (3 2)))+ + (operation channel-test (displaced 3 5 tpm-extend-enc 4)+ (ch-msg pcr (cat pt (hash (hash "0" n) "obtain"))) (4 2))+ (strand-map 0 1 2 4 3)+ (traces ((recv v) (send v))+ ((recv tpm-0 (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm-0+ (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-0 (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-0 "obtain" (hash pcr-id-0 "obtain" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain")))))+ (label 7)+ (parent 6)+ (unrealized (4 1) (4 2))+ (dead)+ (comment "empty cohort"))++(defskeleton envelope+ (vars (v n data) (pcr-id nonce pcr-id-0 nonce-0 text) (k aik akey)+ (pt pt-0 pval) (tpm tpmconf tpm-0 tpm-1 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (nonce nonce-0)+ (tpm tpm-1) (pcr pcr))+ (precedes ((1 2) (2 0)) ((1 4) (4 0)) ((2 1) (1 3)) ((3 0) (1 0))+ ((4 3) (0 0)) ((5 3) (4 2)))+ (non-orig aik (invk k))+ (uniq-orig v n nonce nonce-0 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpm)+ (leads-to ((5 3) (4 2)))+ + (operation channel-test (added-strand tpm-extend-enc 4)+ (ch-msg pcr (cat pt (hash (hash "0" n) "obtain"))) (4 2))+ (strand-map 0 1 2 3 4)+ (traces ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-1 (cat "token" nonce-0))+ (recv tpm-1+ (cat "extend" pcr-id-0 "obtain"+ (hash pcr-id-0 "obtain" nonce-0)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain")))))+ (label 8)+ (parent 6)+ (unrealized (5 2))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton envelope+ (vars (v n data) (pcr-id pcr-id-0 nonce pcr-id-1 nonce-0 text)+ (k aik akey) (pt pt-0 pt-1 pval) (tpmconf tpm tpm-0 tpm-1 chan)+ (pcr locn))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id) (nonce nonce-0) (k k)+ (aik aik) (tpm tpm-1) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm-1))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-1) (nonce nonce-0) (tpm tpm-1) (pcr pcr))+ (precedes ((1 1) (5 1)) ((1 2) (2 0)) ((1 4) (3 0)) ((2 1) (1 3))+ ((3 3) (0 0)) ((4 3) (3 2)) ((5 0) (1 0)) ((5 3) (4 2)))+ (non-orig aik (invk k))+ (uniq-orig v n nonce nonce-0 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpm-1)+ (leads-to ((4 3) (3 2)) ((5 3) (4 2)))+ + (operation channel-test (displaced 3 6 tpm-extend-enc 4)+ (ch-msg pcr (cat pt-0 (hash "0" n))) (5 2))+ (strand-map 0 1 2 5 3 4)+ (traces ((recv v) (send v))+ ((recv tpm-1 (cat "token" nonce-0))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce-0)))+ (send tpm-1+ (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-1 (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-0 "obtain" (hash pcr-id-0 "obtain" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((send tpm-1 (cat "token" nonce-0))+ (recv tpm-1 (cat "extend" pcr-id-1 n (hash pcr-id-1 n nonce-0)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n)))))+ (label 9)+ (parent 8)+ (unrealized (5 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (v n data) (pcr-id nonce pcr-id-0 nonce-0 pcr-id-1 nonce-1 text)+ (k aik akey) (pt pt-0 pt-1 pval)+ (tpm tpmconf tpm-0 tpm-1 tpm-2 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (nonce nonce-0)+ (tpm tpm-1) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-1) (nonce nonce-1) (tpm tpm-2) (pcr pcr))+ (precedes ((1 1) (6 1)) ((1 2) (2 0)) ((1 4) (4 0)) ((2 1) (1 3))+ ((3 0) (1 0)) ((4 3) (0 0)) ((5 3) (4 2)) ((6 3) (5 2)))+ (non-orig aik (invk k))+ (uniq-orig v n nonce nonce-0 nonce-1 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpm)+ (leads-to ((5 3) (4 2)) ((6 3) (5 2)))+ + (operation channel-test (added-strand tpm-extend-enc 4)+ (ch-msg pcr (cat pt-0 (hash "0" n))) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-1 (cat "token" nonce-0))+ (recv tpm-1+ (cat "extend" pcr-id-0 "obtain"+ (hash pcr-id-0 "obtain" nonce-0)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((send tpm-2 (cat "token" nonce-1))+ (recv tpm-2 (cat "extend" pcr-id-1 n (hash pcr-id-1 n nonce-1)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n)))))+ (label 10)+ (parent 8)+ (unrealized (6 1))+ (dead)+ (comment "empty cohort"))++(defskeleton envelope+ (vars (v n data) (pcr-id pcr-id-0 nonce nonce-0 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpmconf tpm tpm-0 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id) (nonce nonce-0) (k k)+ (aik aik) (tpm tpmconf) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpmconf))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id) (nonce nonce-0) (tpm tpmconf) (pcr pcr))+ (precedes ((1 1) (5 1)) ((1 2) (2 0)) ((1 4) (3 0)) ((2 1) (1 3))+ ((3 3) (0 0)) ((4 3) (3 2)) ((5 0) (1 0)) ((5 3) (4 2)))+ (non-orig aik (invk k))+ (uniq-orig v n nonce nonce-0 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpmconf)+ (leads-to ((4 3) (3 2)) ((5 3) (4 2)))+ + (operation channel-test (displaced 6 1 alice 2)+ (ch-msg tpm-1 (cat "extend" pcr-id-1 n (hash pcr-id-1 n nonce-0)))+ (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces ((recv v) (send v))+ ((recv tpmconf (cat "token" nonce-0))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce-0)))+ (send tpmconf+ (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpmconf+ (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-0 "obtain" (hash pcr-id-0 "obtain" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((send tpmconf (cat "token" nonce-0))+ (recv tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce-0)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n)))))+ (label 11)+ (parent 9)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((v v) (n n) (pcr-id pcr-id) (nonce nonce-0) (k k) (aik aik)+ (tpm tpmconf) (tpmconf tpmconf))))+ (origs (n (1 1)) (nonce-0 (5 0)) (pt-0 (5 3)) (nonce (4 0)) (pt (4 3))+ (k (2 1)) (v (1 4))))++(comment "Nothing left to do")++(defprotocol envelope basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id nonce text) (pcr locn)+ (tpm chan))+ (trace (send tpm (cat "token" nonce))+ (recv tpm (cat "extend" pcr-id value (hash pcr-id value nonce)))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok"))+ (uniq-orig nonce))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id nonce text) (k aik akey)+ (tpm tpmconf chan))+ (trace (recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpmconf)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-3+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 4)) (trans z (idx 2))))))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpmconf)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 12)+ (unrealized (0 0) (1 3))+ (preskeleton)+ (origs (v (1 4)) (n (1 1)))+ (comment "Not a skeleton"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (precedes ((1 4) (0 0)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpmconf)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 13)+ (parent 12)+ (unrealized (0 0) (1 3))+ (origs (v (1 4)) (n (1 1)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf tpm-0 chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm-0))+ (precedes ((1 4) (0 0)) ((2 1) (1 3)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpmconf)+ (auth tpm-0)+ (operation encryption-test (added-strand tpm-create-key 2)+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik) (1 3))+ (strand-map 0 1)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 14)+ (parent 13)+ (unrealized (0 0) (2 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (precedes ((1 2) (2 0)) ((1 4) (0 0)) ((2 1) (1 3)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpmconf)+ (auth tpm)+ (operation channel-test (displaced 3 1 alice 3)+ (ch-msg tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain"))) (2 0))+ (strand-map 0 1 2)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 15)+ (parent 14)+ (unrealized (0 0) (1 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (precedes ((1 2) (2 0)) ((1 4) (0 0)) ((2 1) (1 3)) ((3 0) (1 0)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce k)+ (conf tpmconf)+ (auth tpm)+ (operation channel-test (added-strand tpm-extend-enc 1)+ (ch-msg tpm (cat "token" nonce)) (1 0))+ (strand-map 0 1 2)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce))))+ (label 16)+ (parent 15)+ (unrealized (0 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey) (pt pval)+ (tpm tpmconf tpm-0 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (precedes ((1 2) (2 0)) ((1 4) (4 0)) ((2 1) (1 3)) ((3 0) (1 0))+ ((4 2) (0 0)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce k)+ (gen-st (hash (hash "0" n) "refuse"))+ (conf tpmconf)+ (auth tpm)+ + (operation encryption-test (added-strand tpm-quote 3)+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik)+ (0 0))+ (strand-map 0 1 2 3)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))))+ (label 17)+ (parent 16)+ (unrealized (4 1))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 nonce text) (k aik akey)+ (pt pt-0 pval) (tpmconf tpm tpm-0 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm-0) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm-0))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (precedes ((1 2) (2 0)) ((1 4) (3 0)) ((2 1) (1 3)) ((3 2) (0 0))+ ((4 0) (1 0)) ((4 3) (3 1)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpmconf)+ (auth tpm-0)+ (leads-to ((4 3) (3 1)))+ + (operation channel-test (displaced 3 5 tpm-extend-enc 4)+ (ch-msg pcr (cat pt (hash (hash "0" n) "refuse"))) (4 1))+ (strand-map 0 1 2 4 3)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-0 (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-1 "refuse" (hash pcr-id-1 "refuse" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse")))))+ (label 18)+ (parent 17)+ (unrealized (4 1) (4 2))+ (dead)+ (comment "empty cohort"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce pcr-id-1 nonce-0 text)+ (k aik akey) (pt pt-0 pval) (tpm tpmconf tpm-0 tpm-1 chan)+ (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce-0)+ (tpm tpm-1) (pcr pcr))+ (precedes ((1 2) (2 0)) ((1 4) (4 0)) ((2 1) (1 3)) ((3 0) (1 0))+ ((4 2) (0 0)) ((5 3) (4 1)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpmconf)+ (auth tpm)+ (leads-to ((5 3) (4 1)))+ + (operation channel-test (added-strand tpm-extend-enc 4)+ (ch-msg pcr (cat pt (hash (hash "0" n) "refuse"))) (4 1))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm-1 (cat "token" nonce-0))+ (recv tpm-1+ (cat "extend" pcr-id-1 "refuse"+ (hash pcr-id-1 "refuse" nonce-0)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse")))))+ (label 19)+ (parent 17)+ (unrealized (5 2))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton envelope+ (vars (n v data)+ (pcr-id pcr-id-0 pcr-id-1 nonce pcr-id-2 nonce-0 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpmconf tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce-0) (k k)+ (aik aik) (tpm tpm-1) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm-1))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-2) (nonce nonce-0) (tpm tpm-1) (pcr pcr))+ (precedes ((1 1) (5 1)) ((1 2) (2 0)) ((1 4) (3 0)) ((2 1) (1 3))+ ((3 2) (0 0)) ((4 3) (3 1)) ((5 0) (1 0)) ((5 3) (4 2)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpmconf)+ (auth tpm-1)+ (leads-to ((4 3) (3 1)) ((5 3) (4 2)))+ + (operation channel-test (displaced 3 6 tpm-extend-enc 4)+ (ch-msg pcr (cat pt-0 (hash "0" n))) (5 2))+ (strand-map 0 1 2 5 3 4)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm-1 (cat "token" nonce-0))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (send tpm-1+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-1+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-1 "refuse" (hash pcr-id-1 "refuse" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse"))))+ ((send tpm-1 (cat "token" nonce-0))+ (recv tpm-1 (cat "extend" pcr-id-2 n (hash pcr-id-2 n nonce-0)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n)))))+ (label 20)+ (parent 19)+ (unrealized (5 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data)+ (pcr-id pcr-id-0 nonce pcr-id-1 nonce-0 pcr-id-2 nonce-1 text)+ (k aik akey) (pt pt-0 pt-1 pval)+ (tpm tpmconf tpm-0 tpm-1 tpm-2 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce-0)+ (tpm tpm-1) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-2) (nonce nonce-1) (tpm tpm-2) (pcr pcr))+ (precedes ((1 1) (6 1)) ((1 2) (2 0)) ((1 4) (4 0)) ((2 1) (1 3))+ ((3 0) (1 0)) ((4 2) (0 0)) ((5 3) (4 1)) ((6 3) (5 2)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 nonce-1 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpmconf)+ (auth tpm)+ (leads-to ((5 3) (4 1)) ((6 3) (5 2)))+ + (operation channel-test (added-strand tpm-extend-enc 4)+ (ch-msg pcr (cat pt-0 (hash "0" n))) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce)))+ ((recv tpm-0 (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm-1 (cat "token" nonce-0))+ (recv tpm-1+ (cat "extend" pcr-id-1 "refuse"+ (hash pcr-id-1 "refuse" nonce-0)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse"))))+ ((send tpm-2 (cat "token" nonce-1))+ (recv tpm-2 (cat "extend" pcr-id-2 n (hash pcr-id-2 n nonce-1)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n)))))+ (label 21)+ (parent 19)+ (unrealized (6 1))+ (dead)+ (comment "empty cohort"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 nonce nonce-0 text)+ (k aik akey) (pt pt-0 pt-1 pval) (tpmconf tpm tpm-0 chan)+ (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce-0) (k k)+ (aik aik) (tpm tpmconf) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpmconf))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-0) (nonce nonce-0) (tpm tpmconf) (pcr pcr))+ (precedes ((1 1) (5 1)) ((1 2) (2 0)) ((1 4) (3 0)) ((2 1) (1 3))+ ((3 2) (0 0)) ((4 3) (3 1)) ((5 0) (1 0)) ((5 3) (4 2)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpmconf)+ (auth tpmconf)+ (leads-to ((4 3) (3 1)) ((5 3) (4 2)))+ + (operation channel-test (displaced 6 1 alice 2)+ (ch-msg tpm-1 (cat "extend" pcr-id-2 n (hash pcr-id-2 n nonce-0)))+ (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpmconf (cat "token" nonce-0))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (send tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-1 "refuse" (hash pcr-id-1 "refuse" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse"))))+ ((send tpmconf (cat "token" nonce-0))+ (recv tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n)))))+ (label 22)+ (parent 20)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce-0) (tpm tpmconf) (tpmconf tpmconf))))+ (origs (n (1 1)) (nonce-0 (5 0)) (pt-0 (5 3)) (nonce (4 0)) (pt (4 3))+ (k (2 1)) (v (1 4))))++(comment "Nothing left to do")++(defprotocol envelope basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id nonce text) (pcr locn)+ (tpm chan))+ (trace (send tpm (cat "token" nonce))+ (recv tpm (cat "extend" pcr-id value (hash pcr-id value nonce)))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok"))+ (uniq-orig nonce))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id nonce text) (k aik akey)+ (tpm tpmconf chan))+ (trace (recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpmconf)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-3+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 4)) (trans z (idx 2))))))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpmconf)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 23)+ (unrealized (0 0) (1 0) (2 3))+ (preskeleton)+ (origs (v (2 4)) (n (2 1)))+ (comment "Not a skeleton"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (precedes ((2 4) (0 0)) ((2 4) (1 0)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpmconf)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 24)+ (parent 23)+ (unrealized (0 0) (2 3))+ (origs (v (2 4)) (n (2 1)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf tpm-0 chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm-0))+ (precedes ((2 4) (0 0)) ((2 4) (1 0)) ((3 1) (2 3)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpmconf)+ (auth tpm-0)+ (operation encryption-test (added-strand tpm-create-key 2)+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik) (2 3))+ (strand-map 0 1 2)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 25)+ (parent 24)+ (unrealized (0 0) (1 0) (3 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (precedes ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (1 0)) ((3 1) (2 3)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpmconf)+ (auth tpm)+ (operation channel-test (displaced 4 2 alice 3)+ (ch-msg tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain"))) (3 0))+ (strand-map 0 1 2 3)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 26)+ (parent 25)+ (unrealized (0 0) (1 0) (2 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (precedes ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (1 0)) ((3 1) (2 3))+ ((4 0) (2 0)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce k)+ (conf tpmconf)+ (auth tpm)+ (operation channel-test (added-strand tpm-extend-enc 1)+ (ch-msg tpm (cat "token" nonce)) (2 0))+ (strand-map 0 1 2 3)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce))))+ (label 27)+ (parent 26)+ (unrealized (0 0) (1 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (current-value mesg) (n v data)+ (pcr-id pcr-id-0 nonce pcr-id-1 text) (k aik aik-0 akey) (pt pval)+ (tpm tpmconf tpm-0 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v) (current-value current-value)+ (pcr-id pcr-id-1) (k k) (aik aik-0) (tpm tpm-0) (pcr pcr))+ (precedes ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (5 0)) ((3 1) (2 3))+ ((4 0) (2 0)) ((5 3) (1 0)))+ (non-orig aik aik-0 (invk k))+ (uniq-orig n v nonce k)+ (conf tpmconf)+ (auth tpm)+ (operation nonce-test (added-strand tpm-decrypt 4) v (1 0) (enc v k))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-1 current-value aik-0))+ (load pcr (cat pt current-value)) (send v)))+ (label 28)+ (parent 27)+ (unrealized (0 0) (5 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey) (pt pval)+ (tpm tpmconf tpm-0 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (precedes ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (5 0)) ((3 1) (2 3))+ ((4 0) (2 0)) ((5 3) (1 0)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce k)+ (gen-st (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpm)+ + (operation encryption-test (displaced 6 3 tpm-create-key 2)+ (enc "created" k pcr-id-1 current-value aik-0) (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v)))+ (label 29)+ (parent 28)+ (unrealized (0 0) (5 2))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 nonce text) (k aik akey)+ (pt pt-0 pval) (tpmconf tpm tpm-0 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm-0) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm-0))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (precedes ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (4 0)) ((3 1) (2 3))+ ((4 3) (1 0)) ((5 0) (2 0)) ((5 3) (4 2)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpm-0)+ (leads-to ((5 3) (4 2)))+ + (operation channel-test (displaced 4 6 tpm-extend-enc 4)+ (ch-msg pcr (cat pt (hash (hash "0" n) "obtain"))) (5 2))+ (strand-map 0 1 2 3 5 4)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm-0 (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-1 "obtain" (hash pcr-id-1 "obtain" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain")))))+ (label 30)+ (parent 29)+ (unrealized (0 0) (5 1) (5 2))+ (dead)+ (comment "empty cohort"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce pcr-id-1 nonce-0 text)+ (k aik akey) (pt pt-0 pval) (tpm tpmconf tpm-0 tpm-1 chan)+ (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce-0)+ (tpm tpm-1) (pcr pcr))+ (precedes ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (5 0)) ((3 1) (2 3))+ ((4 0) (2 0)) ((5 3) (1 0)) ((6 3) (5 2)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpm)+ (leads-to ((6 3) (5 2)))+ + (operation channel-test (added-strand tpm-extend-enc 4)+ (ch-msg pcr (cat pt (hash (hash "0" n) "obtain"))) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-1 (cat "token" nonce-0))+ (recv tpm-1+ (cat "extend" pcr-id-1 "obtain"+ (hash pcr-id-1 "obtain" nonce-0)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain")))))+ (label 31)+ (parent 29)+ (unrealized (0 0) (6 2))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton envelope+ (vars (n v data)+ (pcr-id pcr-id-0 pcr-id-1 nonce pcr-id-2 nonce-0 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpmconf tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce-0) (k k)+ (aik aik) (tpm tpm-1) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm-1))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-2) (nonce nonce-0) (tpm tpm-1) (pcr pcr))+ (precedes ((2 1) (6 1)) ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (4 0))+ ((3 1) (2 3)) ((4 3) (1 0)) ((5 3) (4 2)) ((6 0) (2 0))+ ((6 3) (5 2)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpm-1)+ (leads-to ((5 3) (4 2)) ((6 3) (5 2)))+ + (operation channel-test (displaced 4 7 tpm-extend-enc 4)+ (ch-msg pcr (cat pt-0 (hash "0" n))) (6 2))+ (strand-map 0 1 2 3 6 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm-1 (cat "token" nonce-0))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (send tpm-1+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-1+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-1 "obtain" (hash pcr-id-1 "obtain" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((send tpm-1 (cat "token" nonce-0))+ (recv tpm-1 (cat "extend" pcr-id-2 n (hash pcr-id-2 n nonce-0)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n)))))+ (label 32)+ (parent 31)+ (unrealized (0 0) (6 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data)+ (pcr-id pcr-id-0 nonce pcr-id-1 nonce-0 pcr-id-2 nonce-1 text)+ (k aik akey) (pt pt-0 pt-1 pval)+ (tpm tpmconf tpm-0 tpm-1 tpm-2 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce-0)+ (tpm tpm-1) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-2) (nonce nonce-1) (tpm tpm-2) (pcr pcr))+ (precedes ((2 1) (7 1)) ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (5 0))+ ((3 1) (2 3)) ((4 0) (2 0)) ((5 3) (1 0)) ((6 3) (5 2))+ ((7 3) (6 2)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 nonce-1 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpm)+ (leads-to ((6 3) (5 2)) ((7 3) (6 2)))+ + (operation channel-test (added-strand tpm-extend-enc 4)+ (ch-msg pcr (cat pt-0 (hash "0" n))) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-1 (cat "token" nonce-0))+ (recv tpm-1+ (cat "extend" pcr-id-1 "obtain"+ (hash pcr-id-1 "obtain" nonce-0)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((send tpm-2 (cat "token" nonce-1))+ (recv tpm-2 (cat "extend" pcr-id-2 n (hash pcr-id-2 n nonce-1)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n)))))+ (label 33)+ (parent 31)+ (unrealized (0 0) (7 1))+ (dead)+ (comment "empty cohort"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 nonce nonce-0 text)+ (k aik akey) (pt pt-0 pt-1 pval) (tpmconf tpm tpm-0 chan)+ (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce-0) (k k)+ (aik aik) (tpm tpmconf) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpmconf))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-0) (nonce nonce-0) (tpm tpmconf) (pcr pcr))+ (precedes ((2 1) (6 1)) ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (4 0))+ ((3 1) (2 3)) ((4 3) (1 0)) ((5 3) (4 2)) ((6 0) (2 0))+ ((6 3) (5 2)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpmconf)+ (leads-to ((5 3) (4 2)) ((6 3) (5 2)))+ + (operation channel-test (displaced 7 2 alice 2)+ (ch-msg tpm-1 (cat "extend" pcr-id-2 n (hash pcr-id-2 n nonce-0)))+ (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpmconf (cat "token" nonce-0))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (send tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-1 "obtain" (hash pcr-id-1 "obtain" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((send tpmconf (cat "token" nonce-0))+ (recv tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n)))))+ (label 34)+ (parent 32)+ (unrealized (0 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 nonce nonce-0 text)+ (k aik akey) (pt pt-0 pt-1 pt-2 pval) (tpmconf tpm tpm-0 tpm-1 chan)+ (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce-0) (k k)+ (aik aik) (tpm tpmconf) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpmconf))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-0) (nonce nonce-0) (tpm tpmconf) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-1) (pcr pcr-0))+ (precedes ((2 1) (6 1)) ((2 2) (3 0)) ((2 4) (4 0)) ((2 4) (7 0))+ ((3 1) (2 3)) ((4 3) (1 0)) ((5 3) (4 2)) ((6 0) (2 0))+ ((6 3) (5 2)) ((7 2) (0 0)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpmconf)+ (auth tpmconf)+ (leads-to ((5 3) (4 2)) ((6 3) (5 2)))+ + (operation encryption-test (added-strand tpm-quote 3)+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik)+ (0 0))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpmconf (cat "token" nonce-0))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (send tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-1 "obtain" (hash pcr-id-1 "obtain" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((send tpmconf (cat "token" nonce-0))+ (recv tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-1 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))))+ (label 35)+ (parent 34)+ (unrealized (7 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data)+ (pcr-id pcr-id-0 pcr-id-1 nonce nonce-0 pcr-id-2 nonce-1 text)+ (k aik akey) (pt pt-0 pt-1 pt-2 pt-3 pval)+ (tpmconf tpm tpm-0 tpm-1 tpm-2 chan) (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce-0) (k k)+ (aik aik) (tpm tpmconf) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpmconf))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-0) (nonce nonce-0) (tpm tpmconf) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-1) (pcr pcr-0))+ (defstrand tpm-extend-enc 4 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-2) (nonce nonce-1)+ (tpm tpm-2) (pcr pcr-0))+ (precedes ((2 1) (6 1)) ((2 2) (3 0)) ((2 4) (4 0)) ((2 4) (7 0))+ ((3 1) (2 3)) ((4 3) (1 0)) ((5 3) (4 2)) ((6 0) (2 0))+ ((6 3) (5 2)) ((7 2) (0 0)) ((8 3) (7 1)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 nonce-1 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpmconf)+ (auth tpmconf)+ (leads-to ((5 3) (4 2)) ((6 3) (5 2)) ((8 3) (7 1)))+ + (operation channel-test (added-strand tpm-extend-enc 4)+ (ch-msg pcr-0 (cat pt-2 (hash (hash "0" n) "refuse"))) (7 1))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpmconf (cat "token" nonce-0))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (send tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-1 "obtain" (hash pcr-id-1 "obtain" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((send tpmconf (cat "token" nonce-0))+ (recv tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-1 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm-2 (cat "token" nonce-1))+ (recv tpm-2+ (cat "extend" pcr-id-2 "refuse"+ (hash pcr-id-2 "refuse" nonce-1)))+ (load pcr-0 (cat pt-3 (hash "0" n)))+ (stor pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))))+ (label 36)+ (parent 35)+ (unrealized (8 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data)+ (pcr-id pcr-id-0 pcr-id-1 nonce nonce-0 pcr-id-2 nonce-1 pcr-id-3+ nonce-2 text) (k aik akey) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval)+ (tpmconf tpm tpm-0 tpm-1 tpm-2 tpm-3 chan) (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce-0) (k k)+ (aik aik) (tpm tpmconf) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpmconf))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-0) (nonce nonce-0) (tpm tpmconf) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-1) (pcr pcr-0))+ (defstrand tpm-extend-enc 4 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-2) (nonce nonce-1)+ (tpm tpm-2) (pcr pcr-0))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-3) (nonce nonce-2) (tpm tpm-3) (pcr pcr-0))+ (precedes ((2 1) (6 1)) ((2 1) (9 1)) ((2 2) (3 0)) ((2 4) (4 0))+ ((2 4) (7 0)) ((3 1) (2 3)) ((4 3) (1 0)) ((5 3) (4 2))+ ((6 0) (2 0)) ((6 3) (5 2)) ((7 2) (0 0)) ((8 3) (7 1))+ ((9 3) (8 2)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 nonce-1 nonce-2 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpmconf)+ (auth tpmconf)+ (leads-to ((5 3) (4 2)) ((6 3) (5 2)) ((8 3) (7 1)) ((9 3) (8 2)))+ + (operation channel-test (added-strand tpm-extend-enc 4)+ (ch-msg pcr-0 (cat pt-3 (hash "0" n))) (8 2))+ (strand-map 0 1 2 3 4 5 6 7 8)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpmconf (cat "token" nonce-0))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (send tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-1 "obtain" (hash pcr-id-1 "obtain" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((send tpmconf (cat "token" nonce-0))+ (recv tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-1 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm-2 (cat "token" nonce-1))+ (recv tpm-2+ (cat "extend" pcr-id-2 "refuse"+ (hash pcr-id-2 "refuse" nonce-1)))+ (load pcr-0 (cat pt-3 (hash "0" n)))+ (stor pcr-0 (cat pt-2 (hash (hash "0" n) "refuse"))))+ ((send tpm-3 (cat "token" nonce-2))+ (recv tpm-3 (cat "extend" pcr-id-3 n (hash pcr-id-3 n nonce-2)))+ (load pcr-0 (cat pt-4 "0")) (stor pcr-0 (cat pt-3 (hash "0" n)))))+ (label 37)+ (parent 36)+ (unrealized (9 1))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol envelope basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id nonce text) (pcr locn)+ (tpm chan))+ (trace (send tpm (cat "token" nonce))+ (recv tpm (cat "extend" pcr-id value (hash pcr-id value nonce)))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok"))+ (uniq-orig nonce))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id nonce text) (k aik akey)+ (tpm tpmconf chan))+ (trace (recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpmconf)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-3+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 4)) (trans z (idx 2))))))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpmconf)+ + (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 38)+ (unrealized (0 0) (1 0) (2 3))+ (preskeleton)+ (origs (v (2 4)) (n (2 1)))+ (comment "Not a skeleton"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (precedes ((2 4) (0 0)) ((2 4) (1 0)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpmconf)+ + (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 39)+ (parent 38)+ (unrealized (0 0) (2 3))+ (origs (v (2 4)) (n (2 1)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf tpm-0 chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm-0))+ (precedes ((2 4) (0 0)) ((2 4) (1 0)) ((3 1) (2 3)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpmconf)+ (auth tpm-0)+ + (operation encryption-test (added-strand tpm-create-key 2)+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik) (2 3))+ (strand-map 0 1 2)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 40)+ (parent 39)+ (unrealized (0 0) (1 0) (3 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (precedes ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (1 0)) ((3 1) (2 3)))+ (non-orig aik (invk k))+ (uniq-orig n v k)+ (conf tpmconf)+ (auth tpm)+ + (operation channel-test (displaced 4 2 alice 3)+ (ch-msg tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain"))) (3 0))+ (strand-map 0 1 2 3)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))))+ (label 41)+ (parent 40)+ (unrealized (0 0) (1 0) (2 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (precedes ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (1 0)) ((3 1) (2 3))+ ((4 0) (2 0)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce k)+ (conf tpmconf)+ (auth tpm)+ + (operation channel-test (added-strand tpm-extend-enc 1)+ (ch-msg tpm (cat "token" nonce)) (2 0))+ (strand-map 0 1 2 3)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce))))+ (label 42)+ (parent 41)+ (unrealized (0 0) (1 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (current-value mesg) (n v data)+ (pcr-id pcr-id-0 nonce pcr-id-1 text) (k aik aik-0 akey) (pt pval)+ (tpm tpmconf tpm-0 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v) (current-value current-value)+ (pcr-id pcr-id-1) (k k) (aik aik-0) (tpm tpm-0) (pcr pcr))+ (precedes ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (5 0)) ((3 1) (2 3))+ ((4 0) (2 0)) ((5 3) (1 0)))+ (non-orig aik aik-0 (invk k))+ (uniq-orig n v nonce k)+ (conf tpmconf)+ (auth tpm)+ + (operation nonce-test (added-strand tpm-decrypt 4) v (1 0) (enc v k))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-1 current-value aik-0))+ (load pcr (cat pt current-value)) (send v)))+ (label 43)+ (parent 42)+ (unrealized (0 0) (5 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey) (pt pval)+ (tpm tpmconf tpm-0 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (precedes ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (5 0)) ((3 1) (2 3))+ ((4 0) (2 0)) ((5 3) (1 0)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce k)+ (gen-st (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpm)+ + + (operation encryption-test (displaced 6 3 tpm-create-key 2)+ (enc "created" k pcr-id-1 current-value aik-0) (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v)))+ (label 44)+ (parent 43)+ (unrealized (0 0) (5 2))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 nonce text) (k aik akey)+ (pt pt-0 pval) (tpmconf tpm tpm-0 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm-0) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm-0))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (precedes ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (4 0)) ((3 1) (2 3))+ ((4 3) (1 0)) ((5 0) (2 0)) ((5 3) (4 2)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpm-0)+ + (leads-to ((5 3) (4 2)))+ + (operation channel-test (displaced 4 6 tpm-extend-enc 4)+ (ch-msg pcr (cat pt (hash (hash "0" n) "obtain"))) (5 2))+ (strand-map 0 1 2 3 5 4)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm-0 (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-0+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-1 "obtain" (hash pcr-id-1 "obtain" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain")))))+ (label 45)+ (parent 44)+ (unrealized (0 0) (5 1) (5 2))+ (dead)+ (comment "empty cohort"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce pcr-id-1 nonce-0 text)+ (k aik akey) (pt pt-0 pval) (tpm tpmconf tpm-0 tpm-1 chan)+ (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce-0)+ (tpm tpm-1) (pcr pcr))+ (precedes ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (5 0)) ((3 1) (2 3))+ ((4 0) (2 0)) ((5 3) (1 0)) ((6 3) (5 2)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpm)+ + (leads-to ((6 3) (5 2)))+ + (operation channel-test (added-strand tpm-extend-enc 4)+ (ch-msg pcr (cat pt (hash (hash "0" n) "obtain"))) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-1 (cat "token" nonce-0))+ (recv tpm-1+ (cat "extend" pcr-id-1 "obtain"+ (hash pcr-id-1 "obtain" nonce-0)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain")))))+ (label 46)+ (parent 44)+ (unrealized (0 0) (6 2))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton envelope+ (vars (n v data)+ (pcr-id pcr-id-0 pcr-id-1 nonce pcr-id-2 nonce-0 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpmconf tpm tpm-0 tpm-1 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce-0) (k k)+ (aik aik) (tpm tpm-1) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm-1))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-2) (nonce nonce-0) (tpm tpm-1) (pcr pcr))+ (precedes ((2 1) (6 1)) ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (4 0))+ ((3 1) (2 3)) ((4 3) (1 0)) ((5 3) (4 2)) ((6 0) (2 0))+ ((6 3) (5 2)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpm-1)+ + (leads-to ((5 3) (4 2)) ((6 3) (5 2)))+ + (operation channel-test (displaced 4 7 tpm-extend-enc 4)+ (ch-msg pcr (cat pt-0 (hash "0" n))) (6 2))+ (strand-map 0 1 2 3 6 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm-1 (cat "token" nonce-0))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (send tpm-1+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm-1+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-1 "obtain" (hash pcr-id-1 "obtain" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((send tpm-1 (cat "token" nonce-0))+ (recv tpm-1 (cat "extend" pcr-id-2 n (hash pcr-id-2 n nonce-0)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n)))))+ (label 47)+ (parent 46)+ (unrealized (0 0) (6 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data)+ (pcr-id pcr-id-0 nonce pcr-id-1 nonce-0 pcr-id-2 nonce-1 text)+ (k aik akey) (pt pt-0 pt-1 pval)+ (tpm tpmconf tpm-0 tpm-1 tpm-2 chan) (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpm))+ (defstrand tpm-extend-enc 1 (nonce nonce) (tpm tpm))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce-0)+ (tpm tpm-1) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-2) (nonce nonce-1) (tpm tpm-2) (pcr pcr))+ (precedes ((2 1) (7 1)) ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (5 0))+ ((3 1) (2 3)) ((4 0) (2 0)) ((5 3) (1 0)) ((6 3) (5 2))+ ((7 3) (6 2)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 nonce-1 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpm)+ + (leads-to ((6 3) (5 2)) ((7 3) (6 2)))+ + (operation channel-test (added-strand tpm-extend-enc 4)+ (ch-msg pcr (cat pt-0 (hash "0" n))) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpm (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((send tpm (cat "token" nonce)))+ ((recv tpm-0 (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-1 (cat "token" nonce-0))+ (recv tpm-1+ (cat "extend" pcr-id-1 "obtain"+ (hash pcr-id-1 "obtain" nonce-0)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((send tpm-2 (cat "token" nonce-1))+ (recv tpm-2 (cat "extend" pcr-id-2 n (hash pcr-id-2 n nonce-1)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n)))))+ (label 48)+ (parent 46)+ (unrealized (0 0) (7 1))+ (dead)+ (comment "empty cohort"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 nonce nonce-0 text)+ (k aik akey) (pt pt-0 pt-1 pval) (tpmconf tpm tpm-0 chan)+ (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce-0) (k k)+ (aik aik) (tpm tpmconf) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpmconf))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-0) (nonce nonce-0) (tpm tpmconf) (pcr pcr))+ (precedes ((2 1) (6 1)) ((2 2) (3 0)) ((2 4) (0 0)) ((2 4) (4 0))+ ((3 1) (2 3)) ((4 3) (1 0)) ((5 3) (4 2)) ((6 0) (2 0))+ ((6 3) (5 2)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpmconf)+ + (leads-to ((5 3) (4 2)) ((6 3) (5 2)))+ + (operation channel-test (displaced 7 2 alice 2)+ (ch-msg tpm-1 (cat "extend" pcr-id-2 n (hash pcr-id-2 n nonce-0)))+ (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpmconf (cat "token" nonce-0))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (send tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-1 "obtain" (hash pcr-id-1 "obtain" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((send tpmconf (cat "token" nonce-0))+ (recv tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n)))))+ (label 49)+ (parent 47)+ (unrealized (0 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 nonce nonce-0 text)+ (k aik akey) (pt pt-0 pt-1 pt-2 pval) (tpmconf tpm tpm-0 tpm-1 chan)+ (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce-0) (k k)+ (aik aik) (tpm tpmconf) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpmconf))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-0) (nonce nonce-0) (tpm tpmconf) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-1) (pcr pcr-0))+ (precedes ((2 1) (6 1)) ((2 2) (3 0)) ((2 4) (4 0)) ((2 4) (7 0))+ ((3 1) (2 3)) ((4 3) (1 0)) ((5 3) (4 2)) ((6 0) (2 0))+ ((6 3) (5 2)) ((7 2) (0 0)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpmconf)+ (auth tpmconf)+ + (leads-to ((5 3) (4 2)) ((6 3) (5 2)))+ + (operation encryption-test (added-strand tpm-quote 3)+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik)+ (0 0))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpmconf (cat "token" nonce-0))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (send tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-1 "obtain" (hash pcr-id-1 "obtain" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((send tpmconf (cat "token" nonce-0))+ (recv tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-1 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))))+ (label 50)+ (parent 49)+ (unrealized (7 1))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data)+ (pcr-id pcr-id-0 pcr-id-1 nonce nonce-0 pcr-id-2 nonce-1 text)+ (k aik akey) (pt pt-0 pt-1 pt-2 pt-3 pval)+ (tpmconf tpm tpm-0 tpm-1 tpm-2 chan) (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce-0) (k k)+ (aik aik) (tpm tpmconf) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpmconf))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-0) (nonce nonce-0) (tpm tpmconf) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-1) (pcr pcr-0))+ (defstrand tpm-extend-enc 4 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-2) (nonce nonce-1)+ (tpm tpm-2) (pcr pcr-0))+ (precedes ((2 1) (6 1)) ((2 2) (3 0)) ((2 4) (4 0)) ((2 4) (7 0))+ ((3 1) (2 3)) ((4 3) (1 0)) ((5 3) (4 2)) ((6 0) (2 0))+ ((6 3) (5 2)) ((7 2) (0 0)) ((8 3) (7 1)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 nonce-1 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpmconf)+ (auth tpmconf)+ + (leads-to ((5 3) (4 2)) ((6 3) (5 2)) ((8 3) (7 1)))+ + (operation channel-test (added-strand tpm-extend-enc 4)+ (ch-msg pcr-0 (cat pt-2 (hash (hash "0" n) "refuse"))) (7 1))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpmconf (cat "token" nonce-0))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (send tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-1 "obtain" (hash pcr-id-1 "obtain" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((send tpmconf (cat "token" nonce-0))+ (recv tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-1 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm-2 (cat "token" nonce-1))+ (recv tpm-2+ (cat "extend" pcr-id-2 "refuse"+ (hash pcr-id-2 "refuse" nonce-1)))+ (load pcr-0 (cat pt-3 (hash "0" n)))+ (stor pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))))+ (label 51)+ (parent 50)+ (unrealized (8 2))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton envelope+ (vars (n v data)+ (pcr-id pcr-id-0 pcr-id-1 nonce nonce-0 pcr-id-2 nonce-1 pcr-id-3+ nonce-2 text) (k aik akey) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pval)+ (tpmconf tpm tpm-0 tpm-1 tpm-2 tpm-3 chan) (pcr pcr-0 locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce-0) (k k)+ (aik aik) (tpm tpmconf) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpmconf))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id-0) (k k)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-0) (nonce nonce-0) (tpm tpmconf) (pcr pcr))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm-1) (pcr pcr-0))+ (defstrand tpm-extend-enc 4 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-2) (nonce nonce-1)+ (tpm tpm-2) (pcr pcr-0))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-3) (nonce nonce-2) (tpm tpm-3) (pcr pcr-0))+ (precedes ((2 1) (6 1)) ((2 1) (9 1)) ((2 2) (3 0)) ((2 4) (4 0))+ ((2 4) (7 0)) ((3 1) (2 3)) ((4 3) (1 0)) ((5 3) (4 2))+ ((6 0) (2 0)) ((6 3) (5 2)) ((7 2) (0 0)) ((8 3) (7 1))+ ((9 3) (8 2)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 nonce-1 nonce-2 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain")+ (hash (hash "0" n) "refuse"))+ (conf tpmconf)+ (auth tpmconf)+ + (leads-to ((5 3) (4 2)) ((6 3) (5 2)) ((8 3) (7 1)) ((9 3) (8 2)))+ + (operation channel-test (added-strand tpm-extend-enc 4)+ (ch-msg pcr-0 (cat pt-3 (hash "0" n))) (8 2))+ (strand-map 0 1 2 3 4 5 6 7 8)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpmconf (cat "token" nonce-0))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (send tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-1 "obtain" (hash pcr-id-1 "obtain" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((send tpmconf (cat "token" nonce-0))+ (recv tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n))))+ ((recv tpm-1 (cat "quote" pcr-id (enc v k)))+ (load pcr-0 (cat pt-2 (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm-2 (cat "token" nonce-1))+ (recv tpm-2+ (cat "extend" pcr-id-2 "refuse"+ (hash pcr-id-2 "refuse" nonce-1)))+ (load pcr-0 (cat pt-3 (hash "0" n)))+ (stor pcr-0 (cat pt-2 (hash (hash "0" n) "refuse"))))+ ((send tpm-3 (cat "token" nonce-2))+ (recv tpm-3 (cat "extend" pcr-id-3 n (hash pcr-id-3 n nonce-2)))+ (load pcr-0 (cat pt-4 "0")) (stor pcr-0 (cat pt-3 (hash "0" n)))))+ (label 52)+ (parent 51)+ (unrealized (9 1))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")
+ tst/defact-sync_locn_envelope_shapes.tst view
@@ -0,0 +1,731 @@+(comment "CPSA 4.4.5")+(comment "Extracted shapes")++(herald "Envelope Protocol, location-based version" (check-nonces)+ (bound 30) (limit 6000))++(comment "CPSA 4.4.5")++(comment "All input read from tst/sync_locn_envelope.scm")++(comment "Step count limited to 6000")++(comment "Strand count bounded at 30")++(comment "Nonces checked first")++(defprotocol envelope basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id nonce text) (pcr locn)+ (tpm chan))+ (trace (send tpm (cat "token" nonce))+ (recv tpm (cat "extend" pcr-id value (hash pcr-id value nonce)))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok"))+ (uniq-orig nonce))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id nonce text) (k aik akey)+ (tpm tpmconf chan))+ (trace (recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpmconf)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-3+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 4)) (trans z (idx 2))))))++(defskeleton envelope+ (vars (v n data) (pcr-id nonce text) (k aik akey) (tpm tpmconf chan))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (non-orig aik)+ (uniq-orig v n)+ (conf tpmconf)+ (traces ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 0)+ (unrealized (0 0) (1 3))+ (preskeleton)+ (origs (v (1 4)) (n (1 1)))+ (comment "Not a skeleton"))++(defskeleton envelope+ (vars (v n data) (pcr-id pcr-id-0 nonce nonce-0 text) (k aik akey)+ (pt pt-0 pt-1 pval) (tpmconf tpm tpm-0 chan) (pcr locn))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id) (nonce nonce-0) (k k)+ (aik aik) (tpm tpmconf) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id) (k k) (aik aik) (tpm tpmconf))+ (defstrand tpm-decrypt 4 (m v)+ (current-value (hash (hash "0" n) "obtain")) (pcr-id pcr-id) (k k)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "obtain")+ (current-value (hash "0" n)) (pcr-id pcr-id-0) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id) (nonce nonce-0) (tpm tpmconf) (pcr pcr))+ (precedes ((1 1) (5 1)) ((1 2) (2 0)) ((1 4) (3 0)) ((2 1) (1 3))+ ((3 3) (0 0)) ((4 3) (3 2)) ((5 0) (1 0)) ((5 3) (4 2)))+ (non-orig aik (invk k))+ (uniq-orig v n nonce nonce-0 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "obtain"))+ (conf tpmconf)+ (auth tpmconf)+ (leads-to ((4 3) (3 2)) ((5 3) (4 2)))+ (operation channel-test (displaced 6 1 alice 2)+ (ch-msg tpm-1 (cat "extend" pcr-id-1 n (hash pcr-id-1 n nonce-0)))+ (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces ((recv v) (send v))+ ((recv tpmconf (cat "token" nonce-0))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce-0)))+ (send tpmconf+ (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpmconf+ (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (send (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "decrypt" (enc v k)))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (load pcr (cat pt (hash (hash "0" n) "obtain"))) (send v))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-0 "obtain" (hash pcr-id-0 "obtain" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "obtain"))))+ ((send tpmconf (cat "token" nonce-0))+ (recv tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce-0)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n)))))+ (label 11)+ (parent 0)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((v v) (n n) (pcr-id pcr-id) (nonce nonce-0) (k k) (aik aik)+ (tpm tpmconf) (tpmconf tpmconf))))+ (origs (n (1 1)) (nonce-0 (5 0)) (pt-0 (5 3)) (nonce (4 0)) (pt (4 3))+ (k (2 1)) (v (1 4))))++(comment "Nothing left to do")++(defprotocol envelope basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id nonce text) (pcr locn)+ (tpm chan))+ (trace (send tpm (cat "token" nonce))+ (recv tpm (cat "extend" pcr-id value (hash pcr-id value nonce)))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok"))+ (uniq-orig nonce))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id nonce text) (k aik akey)+ (tpm tpmconf chan))+ (trace (recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpmconf)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-3+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 4)) (trans z (idx 2))))))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpmconf)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 12)+ (unrealized (0 0) (1 3))+ (preskeleton)+ (origs (v (1 4)) (n (1 1)))+ (comment "Not a skeleton"))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 pcr-id-1 nonce nonce-0 text)+ (k aik akey) (pt pt-0 pt-1 pval) (tpmconf tpm tpm-0 chan)+ (pcr locn))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce-0) (k k)+ (aik aik) (tpm tpmconf) (tpmconf tpmconf))+ (defstrand tpm-create-key 2 (pcrval (hash (hash "0" n) "obtain"))+ (pcr-id pcr-id-0) (k k) (aik aik) (tpm tpmconf))+ (defstrand tpm-quote 3 (nonce (enc v k))+ (current-value (hash (hash "0" n) "refuse")) (pcr-id pcr-id)+ (aik aik) (tpm tpm) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value "refuse")+ (current-value (hash "0" n)) (pcr-id pcr-id-1) (nonce nonce)+ (tpm tpm-0) (pcr pcr))+ (defstrand tpm-extend-enc 4 (value n) (current-value "0")+ (pcr-id pcr-id-0) (nonce nonce-0) (tpm tpmconf) (pcr pcr))+ (precedes ((1 1) (5 1)) ((1 2) (2 0)) ((1 4) (3 0)) ((2 1) (1 3))+ ((3 2) (0 0)) ((4 3) (3 1)) ((5 0) (1 0)) ((5 3) (4 2)))+ (non-orig aik (invk k))+ (uniq-orig n v nonce nonce-0 k)+ (gen-st (hash "0" n) (hash (hash "0" n) "refuse"))+ (conf tpmconf)+ (auth tpmconf)+ (leads-to ((4 3) (3 1)) ((5 3) (4 2)))+ (operation channel-test (displaced 6 1 alice 2)+ (ch-msg tpm-1 (cat "extend" pcr-id-2 n (hash pcr-id-2 n nonce-0)))+ (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((recv tpmconf (cat "token" nonce-0))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (send tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ ((recv tpmconf+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (send+ (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik)))+ ((recv tpm (cat "quote" pcr-id (enc v k)))+ (load pcr (cat pt (hash (hash "0" n) "refuse")))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik)))+ ((send tpm-0 (cat "token" nonce))+ (recv tpm-0+ (cat "extend" pcr-id-1 "refuse" (hash pcr-id-1 "refuse" nonce)))+ (load pcr (cat pt-0 (hash "0" n)))+ (stor pcr (cat pt (hash (hash "0" n) "refuse"))))+ ((send tpmconf (cat "token" nonce-0))+ (recv tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce-0)))+ (load pcr (cat pt-1 "0")) (stor pcr (cat pt-0 (hash "0" n)))))+ (label 22)+ (parent 12)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce-0) (tpm tpmconf) (tpmconf tpmconf))))+ (origs (n (1 1)) (nonce-0 (5 0)) (pt-0 (5 3)) (nonce (4 0)) (pt (4 3))+ (k (2 1)) (v (1 4))))++(comment "Nothing left to do")++(defprotocol envelope basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id nonce text) (pcr locn)+ (tpm chan))+ (trace (send tpm (cat "token" nonce))+ (recv tpm (cat "extend" pcr-id value (hash pcr-id value nonce)))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok"))+ (uniq-orig nonce))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id nonce text) (k aik akey)+ (tpm tpmconf chan))+ (trace (recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpmconf)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-3+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 4)) (trans z (idx 2))))))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpmconf)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 23)+ (unrealized (0 0) (1 0) (2 3))+ (preskeleton)+ (origs (v (2 4)) (n (2 1)))+ (comment "Not a skeleton"))++(comment "Nothing left to do")++(defprotocol envelope basic+ (defrole tpm-power-on+ (vars (current-value mesg) (pcr locn) (tpm chan))+ (trace (recv tpm "power on") (load pcr current-value)+ (stor pcr "0")))+ (defrole tpm-extend-enc+ (vars (value current-value mesg) (pcr-id nonce text) (pcr locn)+ (tpm chan))+ (trace (send tpm (cat "token" nonce))+ (recv tpm (cat "extend" pcr-id value (hash pcr-id value nonce)))+ (load pcr current-value) (stor pcr (hash current-value value))+ (send "ext ok"))+ (uniq-orig nonce))+ (defrole tpm-quote+ (vars (nonce current-value mesg) (pcr-id text) (aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "quote" pcr-id nonce))+ (load pcr current-value)+ (send (enc "quote" pcr-id current-value nonce aik))))+ (defrole tpm-create-key+ (vars (k aik akey) (pcr-id text) (pcrval mesg) (tpm chan))+ (trace (recv tpm (cat "create-req" pcr-id pcrval))+ (send (enc "created" k pcr-id pcrval aik)))+ (non-orig (invk k))+ (uniq-orig k)+ (auth tpm))+ (defrole tpm-decrypt+ (vars (m current-value mesg) (pcr-id text) (k aik akey) (pcr locn)+ (tpm chan))+ (trace (recv tpm (cat "decrypt" (enc m k)))+ (recv (enc "created" k pcr-id current-value aik))+ (load pcr current-value) (send m))+ (non-orig aik))+ (defrole alice+ (vars (n v data) (pcr-id nonce text) (k aik akey)+ (tpm tpmconf chan))+ (trace (recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id n (hash pcr-id n nonce)))+ (send tpm (cat "create-req" pcr-id (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id (hash (hash "0" n) "obtain") aik))+ (send (enc v k)))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpmconf)+ (neq (k aik)))+ (defrule genStV-if-hashed-tpm-power-on+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-power-on" z (idx 2))+ (p "tpm-power-on" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-extend-enc+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-decrypt+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-decrypt" z (idx 3))+ (p "tpm-decrypt" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defrule genStV-if-hashed-tpm-quote+ (forall ((z strd) (v1 v2 mesg))+ (implies+ (and (p "tpm-quote" z (idx 2))+ (p "tpm-quote" "current-value" z (hash v1 v2)))+ (gen-st (hash v1 v2)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule scissorsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (leads-to z0 i0 z2 i2))+ (and (= z1 z2) (= i1 i2)))))+ (defgenrule cakeRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (leads-to z0 i0 z1 i1)+ (leads-to z0 i0 z2 i2) (prec z1 i1 z2 i2)) (false))))+ (defgenrule no-interruption+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (leads-to z0 i0 z2 i2) (trans z1 i1)+ (same-locn z0 i0 z1 i1) (prec z0 i0 z1 i1) (prec z1 i1 z2 i2))+ (false))))+ (defgenrule shearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (trans z2 i2)+ (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)+ (prec z0 i0 z2 i2))+ (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2)))))+ (defgenrule invShearsRule+ (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))+ (implies+ (and (trans z0 i0) (trans z1 i1) (same-locn z0 i0 z1 i1)+ (leads-to z1 i1 z2 i2) (prec z0 i0 z2 i2))+ (or (and (= z0 z1) (= i0 i1)) (prec z0 i0 z1 i1)))))+ (defgenrule trRl_tpm-power-on-at-2+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 2)))))+ (defgenrule trRl_tpm-power-on-at-1+ (forall ((z strd))+ (implies (p "tpm-power-on" z (idx 3)) (trans z (idx 1)))))+ (defgenrule trRl_tpm-extend-enc-at-3+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 4)) (trans z (idx 3)))))+ (defgenrule trRl_tpm-extend-enc-at-2+ (forall ((z strd))+ (implies (p "tpm-extend-enc" z (idx 4)) (trans z (idx 2))))))++(defskeleton envelope+ (vars (n v data) (pcr-id pcr-id-0 nonce text) (k aik akey)+ (tpm tpmconf chan))+ (deflistener+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (deflistener v)+ (defstrand alice 5 (n n) (v v) (pcr-id pcr-id-0) (nonce nonce) (k k)+ (aik aik) (tpm tpm) (tpmconf tpmconf))+ (non-orig aik)+ (uniq-orig n v)+ (conf tpmconf)+ (traces+ ((recv+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k) aik))+ (send+ (enc "quote" pcr-id (hash (hash "0" n) "refuse") (enc v k)+ aik))) ((recv v) (send v))+ ((recv tpm (cat "token" nonce))+ (send tpmconf (cat "extend" pcr-id-0 n (hash pcr-id-0 n nonce)))+ (send tpm+ (cat "create-req" pcr-id-0 (hash (hash "0" n) "obtain")))+ (recv (enc "created" k pcr-id-0 (hash (hash "0" n) "obtain") aik))+ (send (enc v k))))+ (label 38)+ (unrealized (0 0) (1 0) (2 3))+ (preskeleton)+ (origs (v (2 4)) (n (2 1)))+ (comment "Not a skeleton"))++(comment "Nothing left to do")
tst/denning-sacco.tst view
@@ -1,6 +1,6 @@ (herald "Denning-Sacco Protocol") -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/denning-sacco.scm") (defprotocol denning-sacco basic@@ -41,6 +41,7 @@ (enc a (pubk a) (privk ks)) (pubk b))))) (label 0) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (ks ks) (k k) (ta ta)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -68,6 +69,7 @@ (label 1) (parent 0) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (ks ks) (k k) (ta ta)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton denning-sacco@@ -95,6 +97,7 @@ (label 2) (parent 1) (unrealized (1 1))+ (maps ((0) ((a a) (b b) (ks ks) (k k) (ta ta)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton denning-sacco@@ -125,6 +128,7 @@ (label 3) (parent 2) (unrealized (1 1))+ (maps ((0) ((a a) (b b) (ks ks) (k k) (ta ta)))) (comment "4 in cohort - 4 not yet seen")) (defskeleton denning-sacco@@ -155,6 +159,7 @@ (label 4) (parent 2) (unrealized (1 1))+ (maps ((0) ((a a) (b b) (ks ks) (k k) (ta ta)))) (comment "4 in cohort - 4 not yet seen")) (defskeleton denning-sacco
tst/deorig_contract.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/deorig_contract.scm") (defprotocol deorig-contract basic@@ -25,6 +25,7 @@ (traces ((send (enc x1 k)) (send (enc x2 k)) (recv (enc x1 x2 k)))) (label 0) (unrealized (0 2))+ (maps ((0) ((k k) (x1 x1) (x2 x2)))) (origs (x2 (0 1)) (x1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -43,6 +44,7 @@ (parent 0) (unrealized (0 2)) (dead)+ (maps ((0) ((k k) (x1 x1) (x2 x2)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/deorig_mesg.tst view
@@ -1,6 +1,6 @@ (herald deorig-mesg) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/deorig_mesg.scm") (defprotocol deorig-mesg basic@@ -26,6 +26,7 @@ (label 0) (unrealized (0 1)) (dead)+ (maps ((0) ((k k) (x x)))) (origs (x (0 0))) (comment "empty cohort"))
tst/deorig_simple.tst view
@@ -1,6 +1,6 @@ (herald deorig-simple) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/deorig_simple.scm") (defprotocol deorig-simple basic@@ -28,6 +28,7 @@ (label 0) (unrealized (0 1)) (dead)+ (maps ((0) ((k k) (x x)))) (origs (x (0 0))) (comment "empty cohort"))
tst/dh-ca_hack.tst view
@@ -1,6 +1,6 @@ (herald dhca (algebra basic) (bound 12)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/dh-ca_hack.scm") (defprotocol dhca basic@@ -49,6 +49,7 @@ (send (enc "check" n (enc "dh" gx h dhkey))))) (label 0) (unrealized (0 0) (0 2))+ (maps ((0) ((gx gx) (h h) (dhkey dhkey) (a a) (b b) (ca ca) (n n)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -59,6 +60,8 @@ (defstrand ca 1 (gz gx) (subject a) (ca ca)) (precedes ((1 0) (0 0))) (non-orig dhkey (invk gx) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (added-strand ca 1) (enc gx a (privk ca)) (0 0)) (strand-map 0)@@ -70,6 +73,7 @@ (label 1) (parent 0) (unrealized (0 2))+ (maps ((0) ((gx gx) (h h) (dhkey dhkey) (a a) (b b) (ca ca) (n n)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhca@@ -79,6 +83,8 @@ (defstrand ca 1 (gz gx) (subject a) (ca ca)) (precedes ((1 0) (0 0))) (non-orig dhkey (invk gx) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (displaced 2 1 ca 1) (enc h b (privk ca)) (0 2)) (strand-map 0 1)@@ -91,6 +97,7 @@ (label 2) (parent 1) (unrealized (0 2))+ (maps ((0) ((gx gx) (h gx) (dhkey dhkey) (a a) (b a) (ca ca) (n n)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhca@@ -101,6 +108,8 @@ (defstrand ca 1 (gz h) (subject b) (ca ca)) (precedes ((1 0) (0 0)) ((2 0) (0 2))) (non-orig dhkey (invk gx) (invk h) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (added-strand ca 1) (enc h b (privk ca)) (0 2)) (strand-map 0 1)@@ -112,6 +121,7 @@ (label 3) (parent 1) (unrealized (0 2))+ (maps ((0) ((gx gx) (h h) (dhkey dhkey) (a a) (b b) (ca ca) (n n)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhca@@ -123,6 +133,8 @@ (ca ca-0)) (precedes ((1 0) (0 0)) ((2 2) (0 2))) (non-orig dhkey (invk gx) (privk ca) (privk ca-0))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (added-strand resp 3) (enc n (enc "dh" gx gx dhkey)) (0 2)) (strand-map 0 1)@@ -140,6 +152,7 @@ (label 4) (parent 2) (unrealized (2 0) (2 1))+ (maps ((0) ((gx gx) (h gx) (dhkey dhkey) (a a) (b a) (ca ca) (n n)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhca@@ -150,6 +163,8 @@ (deflistener (enc "dh" gx gx dhkey)) (precedes ((1 0) (0 0)) ((2 1) (0 2))) (non-orig dhkey (invk gx) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (added-listener (enc "dh" gx gx dhkey)) (enc n (enc "dh" gx gx dhkey)) (0 2)) (strand-map 0 1)@@ -164,6 +179,7 @@ (parent 2) (unrealized (2 0)) (dead)+ (maps ((0) ((gx gx) (h gx) (dhkey dhkey) (a a) (b a) (ca ca) (n n)))) (comment "empty cohort")) (defskeleton dhca@@ -176,6 +192,8 @@ (ca ca-0)) (precedes ((1 0) (0 0)) ((2 0) (0 2)) ((3 2) (0 2))) (non-orig dhkey (invk gx) (invk h) (privk ca) (privk ca-0))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (added-strand resp 3) (enc n (enc "dh" gx h dhkey)) (0 2)) (strand-map 0 1 2)@@ -192,6 +210,7 @@ (label 6) (parent 3) (unrealized (3 0) (3 1))+ (maps ((0) ((gx gx) (h h) (dhkey dhkey) (a a) (b b) (ca ca) (n n)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -203,6 +222,8 @@ (deflistener (enc "dh" gx h dhkey)) (precedes ((1 0) (0 0)) ((2 0) (0 2)) ((3 1) (0 2))) (non-orig dhkey (invk gx) (invk h) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (added-listener (enc "dh" gx h dhkey)) (enc n (enc "dh" gx h dhkey)) (0 2)) (strand-map 0 1 2)@@ -216,6 +237,7 @@ (parent 3) (unrealized (3 0)) (dead)+ (maps ((0) ((gx gx) (h h) (dhkey dhkey) (a a) (b b) (ca ca) (n n)))) (comment "empty cohort")) (defskeleton dhca@@ -227,6 +249,8 @@ (ca ca)) (precedes ((1 0) (0 0)) ((1 0) (2 0)) ((2 2) (0 2))) (non-orig dhkey (invk gx) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (displaced 3 1 ca 1) (enc gx b (privk ca-0)) (2 0)) (strand-map 0 1 2)@@ -243,6 +267,7 @@ (label 8) (parent 4) (unrealized (2 1))+ (maps ((0) ((gx gx) (h gx) (dhkey dhkey) (a a) (b a) (ca ca) (n n)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhca@@ -255,6 +280,8 @@ (defstrand ca 1 (gz gx) (subject b) (ca ca-0)) (precedes ((1 0) (0 0)) ((2 2) (0 2)) ((3 0) (2 0))) (non-orig dhkey (invk gx) (privk ca) (privk ca-0))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (added-strand ca 1) (enc gx b (privk ca-0)) (2 0)) (strand-map 0 1 2)@@ -273,6 +300,7 @@ (label 9) (parent 4) (unrealized (2 1))+ (maps ((0) ((gx gx) (h gx) (dhkey dhkey) (a a) (b a) (ca ca) (n n)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -285,6 +313,8 @@ (ca ca)) (precedes ((1 0) (0 0)) ((1 0) (3 0)) ((2 0) (0 2)) ((3 2) (0 2))) (non-orig dhkey (invk gx) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (displaced 4 1 ca 1) (enc h b-0 (privk ca-0)) (3 0)) (strand-map 0 1 2 3)@@ -301,6 +331,7 @@ (label 10) (parent 6) (unrealized (3 1))+ (maps ((0) ((gx gx) (h gx) (dhkey dhkey) (a a) (b b) (ca ca) (n n)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -313,6 +344,8 @@ (ca ca)) (precedes ((1 0) (0 0)) ((2 0) (3 0)) ((3 2) (0 2))) (non-orig dhkey (invk gx) (invk h) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (displaced 4 2 ca 1) (enc h b-0 (privk ca-0)) (3 0)) (strand-map 0 1 2 3)@@ -327,6 +360,7 @@ (label 11) (parent 6) (unrealized (3 1))+ (maps ((0) ((gx gx) (h h) (dhkey dhkey) (a a) (b b) (ca ca) (n n)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -340,6 +374,8 @@ (defstrand ca 1 (gz h) (subject b-0) (ca ca-0)) (precedes ((1 0) (0 0)) ((2 0) (0 2)) ((3 2) (0 2)) ((4 0) (3 0))) (non-orig dhkey (invk gx) (invk h) (privk ca) (privk ca-0))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (added-strand ca 1) (enc h b-0 (privk ca-0)) (3 0)) (strand-map 0 1 2 3)@@ -356,6 +392,7 @@ (label 12) (parent 6) (unrealized (3 1))+ (maps ((0) ((gx gx) (h h) (dhkey dhkey) (a a) (b b) (ca ca) (n n)))) (comment "4 in cohort - 4 not yet seen")) (defskeleton dhca@@ -367,6 +404,8 @@ (ca ca)) (precedes ((1 0) (0 0)) ((1 0) (2 0)) ((2 2) (0 2))) (non-orig dhkey (invk gx) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (displaced 3 1 ca 1) (enc gx a-0 (privk ca)) (2 1)) (strand-map 0 1 2)@@ -396,6 +435,8 @@ (defstrand ca 1 (gz gx) (subject a-0) (ca ca)) (precedes ((1 0) (0 0)) ((1 0) (2 0)) ((2 2) (0 2)) ((3 0) (2 1))) (non-orig dhkey (invk gx) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (added-strand ca 1) (enc gx a-0 (privk ca)) (2 1)) (strand-map 0 1 2)@@ -427,6 +468,8 @@ (defstrand ca 1 (gz gx) (subject b) (ca ca)) (precedes ((1 0) (0 0)) ((1 0) (2 1)) ((2 2) (0 2)) ((3 0) (2 0))) (non-orig dhkey (invk gx) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (displaced 4 1 ca 1) (enc gx a-0 (privk ca-0)) (2 1)) (strand-map 0 1 2 3)@@ -457,6 +500,8 @@ (defstrand ca 1 (gz gx) (subject b) (ca ca-0)) (precedes ((1 0) (0 0)) ((2 2) (0 2)) ((3 0) (2 0))) (non-orig dhkey (invk gx) (privk ca) (privk ca-0))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (displaced 4 3 ca 1) (enc gx a-0 (privk ca-0)) (2 1)) (strand-map 0 1 2 3)@@ -490,6 +535,8 @@ (defstrand ca 1 (gz gx) (subject a-0) (ca ca-0)) (precedes ((1 0) (0 0)) ((2 2) (0 2)) ((3 0) (2 0)) ((4 0) (2 1))) (non-orig dhkey (invk gx) (privk ca) (privk ca-0))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (added-strand ca 1) (enc gx a-0 (privk ca-0)) (2 1)) (strand-map 0 1 2 3)@@ -522,6 +569,8 @@ (ca ca)) (precedes ((1 0) (0 0)) ((1 0) (3 0)) ((2 0) (0 2)) ((3 2) (0 2))) (non-orig dhkey (invk gx) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (displaced 4 1 ca 1) (enc gx a-0 (privk ca)) (3 1)) (strand-map 0 1 2 3)@@ -551,6 +600,8 @@ (ca ca)) (precedes ((1 0) (0 0)) ((1 0) (3 0)) ((2 0) (3 1)) ((3 2) (0 2))) (non-orig dhkey (invk gx) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (displaced 4 2 ca 1) (enc gx a-0 (privk ca)) (3 1)) (strand-map 0 1 2 3)@@ -582,6 +633,8 @@ (precedes ((1 0) (0 0)) ((1 0) (3 0)) ((2 0) (0 2)) ((3 2) (0 2)) ((4 0) (3 1))) (non-orig dhkey (invk gx) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (added-strand ca 1) (enc gx a-0 (privk ca)) (3 1)) (strand-map 0 1 2 3)@@ -613,6 +666,8 @@ (ca ca)) (precedes ((1 0) (0 0)) ((1 0) (3 1)) ((2 0) (3 0)) ((3 2) (0 2))) (non-orig dhkey (invk gx) (invk h) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (displaced 4 1 ca 1) (enc gx a-0 (privk ca)) (3 1)) (strand-map 0 1 2 3)@@ -641,6 +696,8 @@ (ca ca)) (precedes ((1 0) (0 0)) ((2 0) (3 0)) ((3 2) (0 2))) (non-orig dhkey (invk h) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (displaced 4 2 ca 1) (enc gx a-0 (privk ca)) (3 1)) (strand-map 0 1 2 3)@@ -669,6 +726,8 @@ (defstrand ca 1 (gz gx) (subject a-0) (ca ca)) (precedes ((1 0) (0 0)) ((2 0) (3 0)) ((3 2) (0 2)) ((4 0) (3 1))) (non-orig dhkey (invk gx) (invk h) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (added-strand ca 1) (enc gx a-0 (privk ca)) (3 1)) (strand-map 0 1 2 3)@@ -698,6 +757,8 @@ (defstrand ca 1 (gz h) (subject b-0) (ca ca)) (precedes ((1 0) (0 0)) ((2 0) (3 1)) ((3 2) (0 2)) ((4 0) (3 0))) (non-orig dhkey (invk h) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (displaced 5 2 ca 1) (enc gx a-0 (privk ca-0)) (3 1)) (strand-map 0 1 2 3 4)@@ -729,6 +790,8 @@ (precedes ((1 0) (0 0)) ((1 0) (3 1)) ((2 0) (0 2)) ((3 2) (0 2)) ((4 0) (3 0))) (non-orig dhkey (invk gx) (invk h) (privk ca))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (displaced 5 1 ca 1) (enc gx a-0 (privk ca-0)) (3 1)) (strand-map 0 1 2 3 4)@@ -759,6 +822,8 @@ (defstrand ca 1 (gz h) (subject b-0) (ca ca-0)) (precedes ((1 0) (0 0)) ((2 0) (0 2)) ((3 2) (0 2)) ((4 0) (3 0))) (non-orig dhkey (invk h) (privk ca) (privk ca-0))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (displaced 5 4 ca 1) (enc gx a-0 (privk ca-0)) (3 1)) (strand-map 0 1 2 3 4)@@ -792,6 +857,8 @@ (precedes ((1 0) (0 0)) ((2 0) (0 2)) ((3 2) (0 2)) ((4 0) (3 0)) ((5 0) (3 1))) (non-orig dhkey (invk gx) (invk h) (privk ca) (privk ca-0))+ (comment+ "Full initiator point-of-view. No need to make extra assumptions.") (operation encryption-test (added-strand ca 1) (enc gx a-0 (privk ca-0)) (3 1)) (strand-map 0 1 2 3 4)@@ -862,6 +929,7 @@ (recv (enc "check" n (enc "dh" h gy dhkey))))) (label 28) (unrealized (0 0) (0 1) (0 3))+ (maps ((0) ((n n) (gy gy) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (origs (n (0 2))) (comment "1 in cohort - 1 not yet seen")) @@ -873,6 +941,7 @@ (precedes ((1 0) (0 0))) (non-orig dhkey (invk gy) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-strand ca 1) (enc gy b (privk ca)) (0 0)) (strand-map 0)@@ -885,6 +954,7 @@ (label 29) (parent 28) (unrealized (0 1) (0 3))+ (maps ((0) ((n n) (gy gy) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhca@@ -895,6 +965,7 @@ (precedes ((1 0) (0 0))) (non-orig dhkey (invk gy) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (displaced 2 1 ca 1) (enc h a (privk ca)) (0 1)) (strand-map 0 1)@@ -907,6 +978,7 @@ (label 30) (parent 29) (unrealized (0 3))+ (maps ((0) ((n n) (gy gy) (h gy) (dhkey dhkey) (a b) (b b) (ca ca)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhca@@ -918,6 +990,7 @@ (precedes ((1 0) (0 0)) ((2 0) (0 1))) (non-orig dhkey (invk gy) (invk h) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-strand ca 1) (enc h a (privk ca)) (0 1)) (strand-map 0 1)@@ -930,6 +1003,7 @@ (label 31) (parent 29) (unrealized (0 3))+ (maps ((0) ((n n) (gy gy) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhca@@ -942,6 +1016,7 @@ (precedes ((0 2) (2 2)) ((1 0) (0 0)) ((2 3) (0 3))) (non-orig dhkey (invk gy) (privk ca) (privk ca-0)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-strand init 4) (enc "check" n (enc "dh" gy gy dhkey)) (0 3)) (strand-map 0 1)@@ -960,6 +1035,7 @@ (label 32) (parent 30) (unrealized (2 0) (2 2))+ (maps ((0) ((n n) (gy gy) (h gy) (dhkey dhkey) (a b) (b b) (ca ca)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhca@@ -971,6 +1047,7 @@ (precedes ((1 0) (0 0)) ((2 1) (0 3))) (non-orig dhkey (invk gy) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-listener (enc "dh" gy gy dhkey)) (enc "check" n (enc "dh" gy gy dhkey)) (0 3)) (strand-map 0 1)@@ -985,6 +1062,7 @@ (parent 30) (unrealized (2 0)) (dead)+ (maps ((0) ((n n) (gy gy) (h gy) (dhkey dhkey) (a b) (b b) (ca ca)))) (comment "empty cohort")) (defskeleton dhca@@ -998,6 +1076,7 @@ (precedes ((0 2) (3 2)) ((1 0) (0 0)) ((2 0) (0 1)) ((3 3) (0 3))) (non-orig dhkey (invk gy) (invk h) (privk ca) (privk ca-0)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-strand init 4) (enc "check" n (enc "dh" h gy dhkey)) (0 3)) (strand-map 0 1 2)@@ -1016,6 +1095,7 @@ (label 34) (parent 31) (unrealized (3 0) (3 2))+ (maps ((0) ((n n) (gy gy) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -1028,6 +1108,7 @@ (precedes ((1 0) (0 0)) ((2 0) (0 1)) ((3 1) (0 3))) (non-orig dhkey (invk gy) (invk h) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-listener (enc "dh" h gy dhkey)) (enc "check" n (enc "dh" h gy dhkey)) (0 3)) (strand-map 0 1 2)@@ -1042,6 +1123,7 @@ (parent 31) (unrealized (3 0)) (dead)+ (maps ((0) ((n n) (gy gy) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (comment "empty cohort")) (defskeleton dhca@@ -1054,6 +1136,7 @@ (precedes ((0 2) (2 2)) ((1 0) (0 0)) ((1 0) (2 0)) ((2 3) (0 3))) (non-orig dhkey (invk gy) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (displaced 3 1 ca 1) (enc gy a (privk ca-0)) (2 0)) (strand-map 0 1 2)@@ -1070,6 +1153,7 @@ (label 36) (parent 32) (unrealized (2 2))+ (maps ((0) ((n n) (gy gy) (h gy) (dhkey dhkey) (a b) (b b) (ca ca)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhca@@ -1083,6 +1167,7 @@ (precedes ((0 2) (2 2)) ((1 0) (0 0)) ((2 3) (0 3)) ((3 0) (2 0))) (non-orig dhkey (invk gy) (privk ca) (privk ca-0)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-strand ca 1) (enc gy a (privk ca-0)) (2 0)) (strand-map 0 1 2)@@ -1102,6 +1187,7 @@ (label 37) (parent 32) (unrealized (2 2))+ (maps ((0) ((n n) (gy gy) (h gy) (dhkey dhkey) (a b) (b b) (ca ca)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -1116,6 +1202,7 @@ ((3 3) (0 3))) (non-orig dhkey (invk gy) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (displaced 4 1 ca 1) (enc h a-0 (privk ca-0)) (3 0)) (strand-map 0 1 2 3)@@ -1132,6 +1219,7 @@ (label 38) (parent 34) (unrealized (3 2))+ (maps ((0) ((n n) (gy gy) (h gy) (dhkey dhkey) (a a) (b b) (ca ca)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -1146,6 +1234,7 @@ ((3 3) (0 3))) (non-orig dhkey (invk gy) (invk h) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (displaced 4 2 ca 1) (enc h a-0 (privk ca-0)) (3 0)) (strand-map 0 1 2 3)@@ -1162,6 +1251,7 @@ (label 39) (parent 34) (unrealized (3 2))+ (maps ((0) ((n n) (gy gy) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -1177,6 +1267,7 @@ ((4 0) (3 0))) (non-orig dhkey (invk gy) (invk h) (privk ca) (privk ca-0)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-strand ca 1) (enc h a-0 (privk ca-0)) (3 0)) (strand-map 0 1 2 3)@@ -1196,6 +1287,7 @@ (label 40) (parent 34) (unrealized (3 2))+ (maps ((0) ((n n) (gy gy) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (comment "4 in cohort - 4 not yet seen")) (defskeleton dhca@@ -1208,6 +1300,7 @@ (precedes ((0 2) (2 2)) ((1 0) (0 0)) ((1 0) (2 0)) ((2 3) (0 3))) (non-orig dhkey (invk gy) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (displaced 3 1 ca 1) (enc gy b-0 (privk ca)) (2 2)) (strand-map 0 1 2)@@ -1240,6 +1333,7 @@ ((3 0) (2 2))) (non-orig dhkey (invk gy) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-strand ca 1) (enc gy b-0 (privk ca)) (2 2)) (strand-map 0 1 2)@@ -1272,6 +1366,7 @@ (precedes ((0 2) (2 2)) ((1 0) (0 0)) ((2 3) (0 3)) ((3 0) (2 0))) (non-orig dhkey (invk gy) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (displaced 4 1 ca 1) (enc gy b-0 (privk ca-0)) (2 2)) (strand-map 0 1 2 3)@@ -1304,6 +1399,7 @@ (precedes ((0 2) (2 2)) ((1 0) (0 0)) ((2 3) (0 3)) ((3 0) (2 0))) (non-orig dhkey (invk gy) (privk ca) (privk ca-0)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (displaced 4 3 ca 1) (enc gy b-0 (privk ca-0)) (2 2)) (strand-map 0 1 2 3)@@ -1339,6 +1435,7 @@ ((4 0) (2 2))) (non-orig dhkey (invk gy) (privk ca) (privk ca-0)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-strand ca 1) (enc gy b-0 (privk ca-0)) (2 2)) (strand-map 0 1 2 3)@@ -1374,6 +1471,7 @@ ((3 3) (0 3))) (non-orig dhkey (invk gy) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (displaced 4 1 ca 1) (enc gy b-0 (privk ca)) (3 2)) (strand-map 0 1 2 3)@@ -1406,6 +1504,7 @@ ((3 3) (0 3))) (non-orig dhkey (invk gy) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (displaced 4 2 ca 1) (enc gy b-0 (privk ca)) (3 2)) (strand-map 0 1 2 3)@@ -1439,6 +1538,7 @@ ((3 3) (0 3)) ((4 0) (3 2))) (non-orig dhkey (invk gy) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-strand ca 1) (enc gy b-0 (privk ca)) (3 2)) (strand-map 0 1 2 3)@@ -1472,6 +1572,7 @@ ((3 3) (0 3))) (non-orig dhkey (invk gy) (invk h) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (displaced 4 1 ca 1) (enc gy b-0 (privk ca)) (3 2)) (strand-map 0 1 2 3)@@ -1504,6 +1605,7 @@ ((3 3) (0 3))) (non-orig dhkey (invk h) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (displaced 4 2 ca 1) (enc gy b-0 (privk ca)) (3 2)) (strand-map 0 1 2 3)@@ -1535,6 +1637,7 @@ ((3 3) (0 3)) ((4 0) (3 2))) (non-orig dhkey (invk gy) (invk h) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-strand ca 1) (enc gy b-0 (privk ca)) (3 2)) (strand-map 0 1 2 3)@@ -1569,6 +1672,7 @@ ((4 0) (3 0))) (non-orig dhkey (invk h) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (displaced 5 2 ca 1) (enc gy b-0 (privk ca-0)) (3 2)) (strand-map 0 1 2 3 4)@@ -1601,6 +1705,7 @@ ((4 0) (3 0))) (non-orig dhkey (invk gy) (invk h) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (displaced 5 1 ca 1) (enc gy b-0 (privk ca-0)) (3 2)) (strand-map 0 1 2 3 4)@@ -1635,6 +1740,7 @@ ((4 0) (3 0))) (non-orig dhkey (invk h) (privk ca) (privk ca-0)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (displaced 5 4 ca 1) (enc gy b-0 (privk ca-0)) (3 2)) (strand-map 0 1 2 3 4)@@ -1670,6 +1776,7 @@ ((4 0) (3 0)) ((5 0) (3 2))) (non-orig dhkey (invk gy) (invk h) (privk ca) (privk ca-0)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-strand ca 1) (enc gy b-0 (privk ca-0)) (3 2)) (strand-map 0 1 2 3 4)@@ -1745,6 +1852,7 @@ (label 56) (unrealized (0 0) (0 1) (0 3) (1 0)) (preskeleton)+ (maps ((0 1) ((n n) (gy gy) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (origs (n (0 2))) (comment "Not a skeleton")) @@ -1756,6 +1864,7 @@ (precedes ((0 2) (1 0))) (non-orig dhkey (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (traces ((recv (enc gy b (privk ca))) (recv (cat h (enc h a (privk ca)))) (send@@ -1764,6 +1873,7 @@ (label 57) (parent 56) (unrealized (0 0) (0 1) (0 3) (1 0))+ (maps ((0 1) ((n n) (gy gy) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (origs (n (0 2))) (comment "2 in cohort - 2 not yet seen")) @@ -1777,6 +1887,7 @@ (precedes ((0 2) (2 2)) ((2 3) (1 0))) (non-orig dhkey (privk ca) (privk ca-0)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation nonce-test (added-strand init 4) n (1 0) (enc n (enc "dh" h gy dhkey))) (strand-map 0 1)@@ -1794,6 +1905,7 @@ (label 58) (parent 57) (unrealized (0 0) (0 1) (0 3) (1 0) (2 0) (2 2))+ (maps ((0 1) ((n n) (gy gy) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhca@@ -1805,6 +1917,7 @@ (precedes ((0 2) (1 0)) ((2 1) (1 0))) (non-orig dhkey (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation nonce-test (added-listener (enc "dh" h gy dhkey)) n (1 0) (enc n (enc "dh" h gy dhkey))) (strand-map 0 1)@@ -1817,6 +1930,7 @@ (label 59) (parent 57) (unrealized (0 0) (0 1) (0 3) (2 0))+ (maps ((0 1) ((n n) (gy gy) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhca@@ -1830,6 +1944,7 @@ (precedes ((0 2) (2 2)) ((2 3) (1 0)) ((3 0) (2 0))) (non-orig dhkey (invk h) (privk ca) (privk ca-0)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-strand ca 1) (enc h a-0 (privk ca-0)) (2 0)) (strand-map 0 1 2)@@ -1848,6 +1963,7 @@ (label 60) (parent 58) (unrealized (0 0) (0 1) (0 3) (1 0) (2 2))+ (maps ((0 1) ((n n) (gy gy) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhca@@ -1860,6 +1976,7 @@ (precedes ((0 2) (1 0)) ((2 1) (1 0)) ((3 1) (2 0))) (non-orig dhkey (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-strand CDHcalc1 2) (enc "dh" h gy dhkey) (2 0)) (strand-map 0 1 2)@@ -1874,6 +1991,7 @@ (parent 59) (unrealized (0 0) (0 1) (0 3)) (dead)+ (maps ((0 1) ((n n) (gy gy) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (comment "empty cohort")) (defskeleton dhca@@ -1886,6 +2004,7 @@ (precedes ((0 2) (1 0)) ((2 1) (1 0)) ((3 1) (2 0))) (non-orig dhkey (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-strand CDHcalc2 2) (enc "dh" h gy dhkey) (2 0)) (strand-map 0 1 2)@@ -1899,6 +2018,7 @@ (label 62) (parent 59) (unrealized (0 0) (0 1) (0 3))+ (maps ((0 1) ((n n) (gy gy) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhca@@ -1912,6 +2032,7 @@ (precedes ((0 2) (2 2)) ((2 3) (1 0)) ((3 0) (2 0))) (non-orig dhkey (invk h) (privk ca) (privk ca-0)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (displaced 4 3 ca 1) (enc gy b-0 (privk ca-0)) (2 2)) (strand-map 0 1 2 3)@@ -1928,6 +2049,7 @@ (label 63) (parent 60) (unrealized (0 0) (0 1) (0 3) (1 0))+ (maps ((0 1) ((n n) (gy h) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhca@@ -1942,6 +2064,7 @@ (precedes ((0 2) (2 2)) ((2 3) (1 0)) ((3 0) (2 0)) ((4 0) (2 2))) (non-orig dhkey (invk gy) (invk h) (privk ca) (privk ca-0)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-strand ca 1) (enc gy b-0 (privk ca-0)) (2 2)) (strand-map 0 1 2 3)@@ -1961,6 +2084,7 @@ (label 64) (parent 60) (unrealized (0 0) (0 1) (0 3) (1 0))+ (maps ((0 1) ((n n) (gy gy) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhca@@ -1974,6 +2098,7 @@ (precedes ((0 2) (1 0)) ((2 1) (1 0)) ((3 1) (2 0)) ((4 0) (0 0))) (non-orig dhkey (invk gy) (privk ca)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation encryption-test (added-strand ca 1) (enc gy b (privk ca)) (0 0)) (strand-map 0 1 2 3)@@ -1989,6 +2114,7 @@ (parent 62) (unrealized (0 1) (0 3)) (dead)+ (maps ((0 1) ((n n) (gy gy) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (comment "empty cohort")) (defskeleton dhca@@ -2003,6 +2129,7 @@ (precedes ((0 2) (2 2)) ((2 3) (1 0)) ((3 0) (2 0)) ((4 1) (1 0))) (non-orig dhkey (invk h) (privk ca) (privk ca-0)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation nonce-test (added-listener (enc "dh" h h dhkey)) n (1 0) (enc n (enc "dh" h h dhkey)) (enc "check" n (enc "dh" h h dhkey))) (strand-map 0 1 2 3)@@ -2021,6 +2148,7 @@ (parent 63) (unrealized (0 0) (0 1) (0 3) (4 0)) (dead)+ (maps ((0 1) ((n n) (gy h) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (comment "empty cohort")) (defskeleton dhca@@ -2037,6 +2165,7 @@ ((5 1) (1 0))) (non-orig dhkey (invk gy) (invk h) (privk ca) (privk ca-0)) (uniq-orig n)+ (comment "Full responder point of view with freshly chosen n") (operation nonce-test (added-listener (enc "dh" h gy dhkey)) n (1 0) (enc n (enc "dh" h gy dhkey)) (enc "check" n (enc "dh" h gy dhkey))) (strand-map 0 1 2 3 4)@@ -2057,6 +2186,7 @@ (parent 64) (unrealized (0 0) (0 1) (0 3) (5 0)) (dead)+ (maps ((0 1) ((n n) (gy gy) (h h) (dhkey dhkey) (a a) (b b) (ca ca)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -2114,6 +2244,8 @@ (label 68) (unrealized (0 0) (0 2) (1 0) (1 1) (1 3)) (preskeleton)+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gx) (gy gy) (n n) (dhkey dhkey)))) (origs (n (1 2))) (comment "Not a skeleton")) @@ -2138,6 +2270,8 @@ (label 69) (parent 68) (unrealized (0 0) (1 0) (1 1) (1 3))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gx) (gy gy) (n n) (dhkey dhkey)))) (origs (n (1 2))) (comment "1 in cohort - 1 not yet seen")) @@ -2167,6 +2301,8 @@ (label 70) (parent 69) (unrealized (0 0) (1 1) (1 3))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gx) (gy gy) (n n) (dhkey dhkey)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhca@@ -2195,6 +2331,8 @@ (label 71) (parent 70) (unrealized (0 0) (1 3))+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -2224,6 +2362,8 @@ (label 72) (parent 70) (unrealized (0 0) (1 3))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gx) (gy gy) (n n) (dhkey dhkey)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -2252,6 +2392,8 @@ (label 73) (parent 71) (unrealized (0 0))+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhca@@ -2288,6 +2430,8 @@ (label 74) (parent 71) (unrealized (0 0) (3 0) (3 2))+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhca@@ -2319,6 +2463,8 @@ (parent 71) (unrealized (0 0) (3 0)) (dead)+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "empty cohort")) (defskeleton dhca@@ -2348,6 +2494,8 @@ (label 76) (parent 72) (unrealized (0 0))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gx) (gy gy) (n n) (dhkey dhkey)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -2386,6 +2534,8 @@ (label 77) (parent 72) (unrealized (0 0) (4 0) (4 2))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gx) (gy gy) (n n) (dhkey dhkey)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -2418,6 +2568,8 @@ (parent 72) (unrealized (0 0) (4 0)) (dead)+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gx) (gy gy) (n n) (dhkey dhkey)))) (comment "empty cohort")) (defskeleton dhca@@ -2516,6 +2668,8 @@ (label 81) (parent 74) (unrealized (0 0) (3 2))+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhca@@ -2555,6 +2709,8 @@ (label 82) (parent 74) (unrealized (0 0) (3 2))+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -2588,6 +2744,8 @@ (seen-ops (79 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton dhca@@ -2692,6 +2850,8 @@ (label 86) (parent 77) (unrealized (0 0) (4 2))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -2728,6 +2888,8 @@ (label 87) (parent 77) (unrealized (0 0) (4 2))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gx) (gy gy) (n n) (dhkey dhkey)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -2768,6 +2930,8 @@ (label 88) (parent 77) (unrealized (0 0) (4 2))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gx) (gy gy) (n n) (dhkey dhkey)))) (comment "4 in cohort - 4 not yet seen")) (defskeleton dhca@@ -2803,6 +2967,8 @@ (label 89) (parent 81) (unrealized (0 0))+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhca@@ -2840,6 +3006,8 @@ (label 90) (parent 81) (unrealized (0 0))+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -2877,6 +3045,8 @@ (label 91) (parent 82) (unrealized (0 0))+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -2920,6 +3090,8 @@ (operation encryption-test (displaced 5 4 ca 1) (enc gy b (privk ca-0)) (0 0)) (strand-map 0 1 2 3 4))) (unrealized (0 0))+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton dhca@@ -2960,6 +3132,8 @@ (label 93) (parent 82) (unrealized (0 0))+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "4 in cohort - 4 not yet seen")) (defskeleton dhca@@ -2996,6 +3170,8 @@ (label 94) (parent 86) (unrealized (0 0))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -3037,6 +3213,8 @@ (operation encryption-test (displaced 5 2 ca 1) (enc gy a (privk ca)) (0 0)) (strand-map 0 1 2 3 4))) (unrealized (0 0))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton dhca@@ -3075,6 +3253,8 @@ (label 96) (parent 86) (unrealized (0 0))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "4 in cohort - 4 not yet seen")) (defskeleton dhca@@ -3111,6 +3291,8 @@ (label 97) (parent 87) (unrealized (0 0))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gx) (gy gy) (n n) (dhkey dhkey)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhca@@ -3152,6 +3334,8 @@ (operation encryption-test (displaced 5 2 ca 1) (enc gx a (privk ca)) (0 0)) (strand-map 0 1 2 3 4))) (unrealized (0 0))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gx) (gy gx) (n n) (dhkey dhkey)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton dhca@@ -3190,6 +3374,8 @@ (label 99) (parent 87) (unrealized (0 0))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gx) (gy gy) (n n) (dhkey dhkey)))) (comment "4 in cohort - 4 not yet seen")) (defskeleton dhca@@ -3229,6 +3415,8 @@ (label 100) (parent 88) (unrealized (0 0))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gx) (gy gx) (n n) (dhkey dhkey)))) (comment "4 in cohort - 4 not yet seen")) (defskeleton dhca@@ -3273,6 +3461,8 @@ (operation encryption-test (displaced 6 2 ca 1) (enc gx a-0 (privk ca)) (0 0)) (strand-map 0 1 2 3 4 5))) (unrealized (0 0))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gx) (gy gy) (n n) (dhkey dhkey)))) (comment "4 in cohort - 3 not yet seen")) (defskeleton dhca@@ -3318,6 +3508,8 @@ (operation encryption-test (displaced 6 5 ca 1) (enc gx a-0 (privk ca-0)) (0 0)) (strand-map 0 1 2 3 4 5))) (unrealized (0 0))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gx) (gy gx) (n n) (dhkey dhkey)))) (comment "4 in cohort - 3 not yet seen")) (defskeleton dhca@@ -3360,6 +3552,8 @@ (label 103) (parent 88) (unrealized (0 0))+ (maps+ ((0 1) ((a a) (b b) (ca ca) (gx gx) (gy gy) (n n) (dhkey dhkey)))) (comment "5 in cohort - 5 not yet seen")) (defskeleton dhca@@ -3515,6 +3709,8 @@ (label 107) (parent 90) (realized)+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhca@@ -3882,6 +4078,8 @@ (label 116) (parent 93) (realized)+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhca@@ -3966,6 +4164,8 @@ (seen-ops (104 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton dhca@@ -4209,6 +4409,8 @@ (106 (operation generalization deleted (3 0)) (strand-map 0 1 2 4 5))) (realized)+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton dhca@@ -4249,6 +4451,8 @@ (label 125) (parent 96) (realized)+ (maps+ ((0 1) ((a b-0) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhca@@ -4327,6 +4531,8 @@ (label 127) (parent 97) (realized)+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhca@@ -4566,6 +4772,8 @@ (label 133) (parent 99) (realized)+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhca@@ -4607,6 +4815,8 @@ (label 134) (parent 99) (realized)+ (maps+ ((0 1) ((a b-0) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhca@@ -4733,6 +4943,8 @@ (109 (operation generalization deleted (3 0)) (strand-map 0 1 2 4 5))) (realized)+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gx) (gy gx) (n n) (dhkey dhkey)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton dhca@@ -5029,6 +5241,8 @@ (112 (operation generalization deleted (3 0)) (strand-map 0 1 2 4 5))) (realized)+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gx) (gy gx) (n n) (dhkey dhkey)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton dhca@@ -5163,6 +5377,8 @@ (115 (operation generalization deleted (3 0)) (strand-map 0 1 2 4 5 6))) (realized)+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton dhca@@ -5246,6 +5462,8 @@ (label 149) (parent 103) (realized)+ (maps+ ((0 1) ((a b-0) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhca@@ -5332,6 +5550,8 @@ (105 (operation generalization weakened ((4 0) (1 3))) (strand-map 0 1 2 3 4))) (realized)+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton dhca@@ -5373,6 +5593,8 @@ (111 (operation generalization weakened ((5 0) (1 3))) (strand-map 0 1 2 3 4 5))) (realized)+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton dhca@@ -5416,6 +5638,8 @@ (122 (operation generalization weakened ((5 0) (1 3))) (strand-map 0 1 2 3 4 5))) (realized)+ (maps+ ((0 1) ((a b-0) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton dhca@@ -5451,6 +5675,8 @@ (label 154) (parent 127) (realized)+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhca@@ -5488,6 +5714,8 @@ (label 155) (parent 133) (realized)+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhca@@ -5532,6 +5760,8 @@ (131 (operation generalization weakened ((5 0) (1 3))) (strand-map 0 1 2 3 4 5))) (realized)+ (maps+ ((0 1) ((a b-0) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton dhca@@ -5576,6 +5806,8 @@ (139 (operation generalization weakened ((6 0) (1 3))) (strand-map 0 1 2 3 4 5 6))) (realized)+ (maps+ ((0 1) ((a b-0) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton dhca@@ -5615,6 +5847,8 @@ (109 (operation generalization separated b-0) (strand-map 0 1 2 3 4))) (realized)+ (maps+ ((0 1) ((a b) (b b) (ca ca) (gx gy) (gy gy) (n n) (dhkey dhkey)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton dhca
tst/dh_encrypt_hack.tst view
@@ -1,6 +1,6 @@ (herald dhencrypt (algebra basic)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/dh_encrypt_hack.scm") (defprotocol dhencrypt basic@@ -40,6 +40,7 @@ (send (enc "check" n (enc "dh" gx h dhkey))))) (label 0) (unrealized (0 1))+ (maps ((0) ((gx gx) (h h) (dhkey dhkey) (n n)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -50,6 +51,7 @@ (precedes ((1 1) (0 1))) (non-orig dhkey (invk gx) (invk h)) (uniq-orig n h)+ (comment "Initiator full point of view") (operation encryption-test (added-strand resp 2) (enc n (enc "dh" gx h dhkey)) (0 1)) (strand-map 0)@@ -70,6 +72,7 @@ (deflistener (enc "dh" gx h dhkey)) (precedes ((1 1) (0 1))) (non-orig dhkey (invk gx))+ (comment "Initiator full point of view") (operation encryption-test (added-listener (enc "dh" gx h dhkey)) (enc n (enc "dh" gx h dhkey)) (0 1)) (strand-map 0)@@ -80,6 +83,7 @@ (label 2) (parent 0) (unrealized (1 0))+ (maps ((0) ((gx gx) (h h) (dhkey dhkey) (n n)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhencrypt@@ -89,6 +93,7 @@ (defstrand CDHcalc1 2 (dhkey dhkey) (gx gx) (gy h)) (precedes ((1 1) (0 1)) ((2 1) (1 0))) (non-orig dhkey (invk gx))+ (comment "Initiator full point of view") (operation encryption-test (added-strand CDHcalc1 2) (enc "dh" gx h dhkey) (1 0)) (strand-map 0 1)@@ -100,6 +105,7 @@ (label 3) (parent 2) (realized)+ (maps ((0) ((gx gx) (h h) (dhkey dhkey) (n n)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhencrypt@@ -108,6 +114,7 @@ (defstrand CDHcalc1 2 (dhkey dhkey) (gx gx) (gy h)) (precedes ((1 1) (0 1))) (non-orig dhkey (invk gx))+ (comment "Initiator full point of view") (operation generalization deleted (1 0)) (strand-map 0 2) (traces@@ -161,6 +168,7 @@ (recv (enc "check" n (enc "dh" h gy dhkey))))) (label 5) (unrealized (0 2))+ (maps ((0) ((gy gy) (h h) (dhkey dhkey) (n n)))) (origs (n (0 1)) (gy (0 1))) (comment "2 in cohort - 2 not yet seen")) @@ -171,6 +179,7 @@ (precedes ((0 1) (1 1)) ((1 2) (0 2))) (non-orig dhkey (invk gy) (invk h)) (uniq-orig n gy)+ (comment "Responder full point of view") (operation encryption-test (added-strand init 3) (enc "check" n (enc "dh" h gy dhkey)) (0 2)) (strand-map 0)@@ -193,6 +202,7 @@ (precedes ((0 1) (1 0)) ((1 1) (0 2))) (non-orig dhkey (invk gy)) (uniq-orig n gy)+ (comment "Responder full point of view") (operation encryption-test (added-listener (enc "dh" h gy dhkey)) (enc "check" n (enc "dh" h gy dhkey)) (0 2)) (strand-map 0)@@ -203,6 +213,7 @@ (label 7) (parent 5) (unrealized (1 0))+ (maps ((0) ((gy gy) (h h) (dhkey dhkey) (n n)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhencrypt@@ -213,6 +224,7 @@ (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0))) (non-orig dhkey (invk gy)) (uniq-orig n gy)+ (comment "Responder full point of view") (operation encryption-test (added-strand CDHcalc2 2) (enc "dh" h gy dhkey) (1 0)) (strand-map 0 1)@@ -224,6 +236,7 @@ (label 8) (parent 7) (realized)+ (maps ((0) ((gy gy) (h h) (dhkey dhkey) (n n)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhencrypt@@ -233,6 +246,7 @@ (precedes ((0 1) (1 0)) ((1 1) (0 2))) (non-orig dhkey (invk gy)) (uniq-orig n gy)+ (comment "Responder full point of view") (operation generalization deleted (1 0)) (strand-map 0 2) (traces@@ -289,6 +303,7 @@ (label 10) (unrealized (0 1) (1 2)) (preskeleton)+ (maps ((0 1) ((gx gx) (gy gy) (n n) (dhkey dhkey) (dhkey-0 dhkey-0)))) (origs (n (1 1)) (gy (1 1))) (comment "Not a skeleton")) @@ -299,12 +314,15 @@ (precedes ((1 1) (0 1))) (non-orig dhkey dhkey-0 (invk gx) (invk gy)) (uniq-orig n gy)+ (comment+ "Point of view where the natural result should be the only shape") (traces ((send gx) (recv (cat gy (enc n (enc "dh" gx gy dhkey))))) ((recv gx) (send (cat gy (enc n (enc "dh" gx gy dhkey-0)))) (recv (enc "check" n (enc "dh" gx gy dhkey-0))))) (label 11) (parent 10) (unrealized (0 1) (1 2))+ (maps ((0 1) ((gx gx) (gy gy) (n n) (dhkey dhkey) (dhkey-0 dhkey-0)))) (origs (n (1 1)) (gy (1 1))) (comment "3 in cohort - 3 not yet seen")) @@ -315,6 +333,8 @@ (precedes ((0 1) (1 1)) ((1 2) (0 2))) (non-orig dhkey (invk gx) (invk gy)) (uniq-orig n gy)+ (comment+ "Point of view where the natural result should be the only shape") (operation encryption-test (displaced 0 2 init 3) (enc "check" n (enc "dh" gx gy dhkey)) (1 2)) (strand-map 1 0)@@ -338,6 +358,8 @@ (precedes ((1 1) (0 1)) ((1 1) (2 1)) ((2 2) (1 2))) (non-orig dhkey dhkey-0 (invk gx) (invk gy)) (uniq-orig n gy)+ (comment+ "Point of view where the natural result should be the only shape") (operation encryption-test (added-strand init 3) (enc "check" n (enc "dh" gx gy dhkey-0)) (1 2)) (strand-map 0 1)@@ -349,6 +371,7 @@ (label 13) (parent 11) (unrealized (0 1))+ (maps ((0 1) ((gx gx) (gy gy) (n n) (dhkey dhkey) (dhkey-0 dhkey-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhencrypt@@ -359,6 +382,8 @@ (precedes ((1 1) (0 1)) ((1 1) (2 0)) ((2 1) (1 2))) (non-orig dhkey dhkey-0 (invk gx) (invk gy)) (uniq-orig n gy)+ (comment+ "Point of view where the natural result should be the only shape") (operation encryption-test (added-listener (enc "dh" gx gy dhkey-0)) (enc "check" n (enc "dh" gx gy dhkey-0)) (1 2)) (strand-map 0 1)@@ -370,6 +395,7 @@ (parent 11) (unrealized (0 1) (2 0)) (dead)+ (maps ((0 1) ((gx gx) (gy gy) (n n) (dhkey dhkey) (dhkey-0 dhkey-0)))) (comment "empty cohort")) (defskeleton dhencrypt@@ -380,6 +406,8 @@ (precedes ((1 1) (0 1)) ((1 1) (2 1)) ((2 2) (1 2))) (non-orig dhkey (invk gx) (invk gy)) (uniq-orig n gy)+ (comment+ "Point of view where the natural result should be the only shape") (operation encryption-test (displaced 3 1 resp 2) (enc n (enc "dh" gx gy dhkey-0)) (0 1)) (strand-map 0 1 2)@@ -404,6 +432,8 @@ (precedes ((1 1) (2 1)) ((1 1) (3 0)) ((2 2) (1 2)) ((3 1) (0 1))) (non-orig dhkey dhkey-0 (invk gx) (invk gy)) (uniq-orig n gy)+ (comment+ "Point of view where the natural result should be the only shape") (operation encryption-test (added-listener (enc "dh" gx gy dhkey)) (enc n (enc "dh" gx gy dhkey)) (0 1)) (strand-map 0 1 2)@@ -417,6 +447,7 @@ (parent 13) (unrealized (0 1) (3 0)) (dead)+ (maps ((0 1) ((gx gx) (gy gy) (n n) (dhkey dhkey) (dhkey-0 dhkey-0)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/dh_group_sig.tst view
@@ -1,7 +1,7 @@ (herald "Signed group DH exchange (improved version)" (algebra diffie-hellman) (limit 100)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/dh_group_sig.scm") (comment "Step count limited to 100") @@ -69,6 +69,10 @@ (recv (enc na nb (exp (gen) (mul x y alpha)))) (send nb))) (label 0) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((a a) (b b) (x x) (y y) (alpha alpha) (group group) (na na)+ (nb nb) (group-dist group-dist)))) (origs) (ugens (x (0 1)) (na (0 3))) (comment "1 in cohort - 1 not yet seen"))@@ -103,6 +107,10 @@ (label 1) (parent 0) (unrealized (0 2))+ (maps+ ((0)+ ((a a) (b b) (x x) (y y) (alpha alpha) (group group) (na na)+ (nb nb) (group-dist group-dist)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dh_sig@@ -145,6 +153,10 @@ (label 2) (parent 1) (unrealized (0 4) (2 0))+ (maps+ ((0)+ ((a a) (b b) (x x) (y (mul y (rec alpha) alpha-0)) (alpha alpha)+ (group group) (na na) (nb nb) (group-dist group-dist)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dh_sig@@ -185,6 +197,10 @@ (label 3) (parent 2) (unrealized (0 4))+ (maps+ ((0)+ ((a a) (b b) (x x) (y y) (alpha alpha) (group group) (na na)+ (nb nb) (group-dist group-dist)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dh_sig@@ -230,6 +246,10 @@ (label 4) (parent 2) (unrealized (0 4))+ (maps+ ((0)+ ((a a) (b b) (x x) (y (mul y (rec alpha) alpha-0)) (alpha alpha)+ (group group) (na na) (nb nb) (group-dist group-dist)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dh_sig@@ -324,6 +344,10 @@ (label 6) (parent 3) (unrealized (3 0))+ (maps+ ((0)+ ((a a) (b b) (x x) (y y) (alpha alpha) (group group) (na na)+ (nb nb) (group-dist group-dist)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dh_sig@@ -373,6 +397,10 @@ (label 7) (parent 4) (unrealized (4 0))+ (maps+ ((0)+ ((a a) (b b) (x x) (y (mul y (rec alpha) alpha-0)) (alpha alpha)+ (group group) (na na) (nb nb) (group-dist group-dist)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dh_sig@@ -421,6 +449,10 @@ (parent 6) (unrealized (4 0)) (dead)+ (maps+ ((0)+ ((a a) (b b) (x x) (y y) (alpha alpha) (group group) (na na)+ (nb nb) (group-dist group-dist)))) (comment "empty cohort")) (defskeleton dh_sig@@ -469,6 +501,10 @@ (parent 6) (unrealized (4 0)) (dead)+ (maps+ ((0)+ ((a a) (b b) (x x) (y y) (alpha alpha) (group group) (na na)+ (nb nb) (group-dist group-dist)))) (comment "empty cohort")) (defskeleton dh_sig@@ -517,6 +553,10 @@ (parent 6) (unrealized (4 0)) (dead)+ (maps+ ((0)+ ((a a) (b b) (x x) (y y) (alpha alpha) (group group) (na na)+ (nb nb) (group-dist group-dist)))) (comment "empty cohort")) (defskeleton dh_sig@@ -570,6 +610,10 @@ (parent 7) (unrealized (5 0)) (dead)+ (maps+ ((0)+ ((a a) (b b) (x x) (y (mul y (rec alpha) alpha-0)) (alpha alpha)+ (group group) (na na) (nb nb) (group-dist group-dist)))) (comment "empty cohort")) (defskeleton dh_sig@@ -623,6 +667,10 @@ (parent 7) (unrealized (5 0)) (dead)+ (maps+ ((0)+ ((a a) (b b) (x x) (y (mul y (rec alpha) alpha-0)) (alpha alpha)+ (group group) (na na) (nb nb) (group-dist group-dist)))) (comment "empty cohort")) (defskeleton dh_sig@@ -676,6 +724,10 @@ (parent 7) (unrealized (5 0)) (dead)+ (maps+ ((0)+ ((a a) (b b) (x x) (y (mul y (rec alpha) alpha-0)) (alpha alpha)+ (group group) (na na) (nb nb) (group-dist group-dist)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -744,6 +796,10 @@ (send (enc na nb (exp (gen) (mul y x alpha)))) (recv nb))) (label 14) (unrealized (0 0) (0 1) (0 3))+ (maps+ ((0)+ ((a a) (b b) (y y) (x x) (alpha alpha) (group group) (na na)+ (nb nb) (group-dist group-dist)))) (origs) (ugens (y (0 2)) (nb (0 4))) (comment "1 in cohort - 1 not yet seen"))@@ -778,6 +834,10 @@ (label 15) (parent 14) (unrealized (0 1) (0 3))+ (maps+ ((0)+ ((a a) (b b) (y y) (x x) (alpha alpha) (group group) (na na)+ (nb nb) (group-dist group-dist)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dh_sig@@ -815,6 +875,10 @@ (label 16) (parent 15) (unrealized (0 3) (0 5) (2 0))+ (maps+ ((0)+ ((a a) (b b) (y y) (x (mul (rec alpha) x alpha-0)) (alpha alpha)+ (group group) (na na) (nb nb) (group-dist group-dist)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dh_sig@@ -852,6 +916,10 @@ (label 17) (parent 16) (unrealized (0 3) (0 5))+ (maps+ ((0)+ ((a a) (b b) (y y) (x x) (alpha alpha) (group group) (na na)+ (nb nb) (group-dist group-dist)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dh_sig@@ -893,6 +961,10 @@ (label 18) (parent 16) (unrealized (0 3) (0 5))+ (maps+ ((0)+ ((a a) (b b) (y y) (x (mul (rec alpha) x alpha-0)) (alpha alpha)+ (group group) (na na) (nb nb) (group-dist group-dist)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dh_sig@@ -937,6 +1009,10 @@ (label 19) (parent 17) (unrealized (0 5))+ (maps+ ((0)+ ((a a) (b b) (y y) (x x) (alpha alpha) (group group) (na na)+ (nb nb) (group-dist group-dist)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dh_sig@@ -986,6 +1062,10 @@ (label 20) (parent 18) (unrealized (0 5))+ (maps+ ((0)+ ((a a) (b b) (y y) (x (mul (rec alpha) alpha-0 x)) (alpha alpha)+ (group group) (na na) (nb nb) (group-dist group-dist)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dh_sig@@ -1082,6 +1162,10 @@ (label 22) (parent 19) (unrealized (3 0))+ (maps+ ((0)+ ((a a) (b b) (y y) (x x) (alpha alpha) (group group) (na na)+ (nb nb) (group-dist group-dist)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dh_sig@@ -1133,6 +1217,10 @@ (label 23) (parent 20) (unrealized (4 0))+ (maps+ ((0)+ ((a a) (b b) (y y) (x (mul (rec alpha) alpha-0 x)) (alpha alpha)+ (group group) (na na) (nb nb) (group-dist group-dist)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dh_sig@@ -1184,6 +1272,10 @@ (parent 22) (unrealized (4 0)) (dead)+ (maps+ ((0)+ ((a a) (b b) (y y) (x x) (alpha alpha) (group group) (na na)+ (nb nb) (group-dist group-dist)))) (comment "empty cohort")) (defskeleton dh_sig@@ -1235,6 +1327,10 @@ (parent 22) (unrealized (4 0)) (dead)+ (maps+ ((0)+ ((a a) (b b) (y y) (x x) (alpha alpha) (group group) (na na)+ (nb nb) (group-dist group-dist)))) (comment "empty cohort")) (defskeleton dh_sig@@ -1286,6 +1382,10 @@ (parent 22) (unrealized (4 0)) (dead)+ (maps+ ((0)+ ((a a) (b b) (y y) (x x) (alpha alpha) (group group) (na na)+ (nb nb) (group-dist group-dist)))) (comment "empty cohort")) (defskeleton dh_sig@@ -1342,6 +1442,10 @@ (parent 23) (unrealized (5 0)) (dead)+ (maps+ ((0)+ ((a a) (b b) (y y) (x (mul (rec alpha) alpha-0 x)) (alpha alpha)+ (group group) (na na) (nb nb) (group-dist group-dist)))) (comment "empty cohort")) (defskeleton dh_sig@@ -1398,6 +1502,10 @@ (parent 23) (unrealized (5 0)) (dead)+ (maps+ ((0)+ ((a a) (b b) (y y) (x (mul (rec alpha) alpha-0 x)) (alpha alpha)+ (group group) (na na) (nb nb) (group-dist group-dist)))) (comment "empty cohort")) (defskeleton dh_sig@@ -1454,6 +1562,10 @@ (parent 23) (unrealized (5 0)) (dead)+ (maps+ ((0)+ ((a a) (b b) (y y) (x (mul (rec alpha) alpha-0 x)) (alpha alpha)+ (group group) (na na) (nb nb) (group-dist group-dist)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/dh_group_sig_auth_failure.tst view
@@ -1,7 +1,7 @@ (herald "Signed group DH exchange (version with auth failure)" (algebra diffie-hellman) (limit 100)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/dh_group_sig_auth_failure.scm") (comment "Step count limited to 100") @@ -66,6 +66,10 @@ (privk a))))) (label 0) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((a a) (b b) (x x) (y y) (alpha alpha) (group group)+ (group-dist group-dist)))) (origs) (ugens (x (0 1))) (comment "1 in cohort - 1 not yet seen"))@@ -99,6 +103,10 @@ (label 1) (parent 0) (unrealized (0 2))+ (maps+ ((0)+ ((a a) (b b) (x x) (y y) (alpha alpha) (group group)+ (group-dist group-dist)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dh_sig@@ -139,6 +147,10 @@ (label 2) (parent 1) (unrealized (2 0))+ (maps+ ((0)+ ((a a) (b b) (x x) (y (mul y (rec alpha) alpha-0)) (alpha alpha)+ (group group) (group-dist group-dist)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dh_sig@@ -297,6 +309,10 @@ (privk a))))) (label 5) (unrealized (0 0) (0 1) (0 3))+ (maps+ ((0)+ ((a a) (b b) (y y) (x x) (alpha alpha) (group group)+ (group-dist group-dist)))) (origs) (ugens (y (0 2))) (comment "1 in cohort - 1 not yet seen"))@@ -330,6 +346,10 @@ (label 6) (parent 5) (unrealized (0 1) (0 3))+ (maps+ ((0)+ ((a a) (b b) (y y) (x x) (alpha alpha) (group group)+ (group-dist group-dist)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dh_sig@@ -365,6 +385,10 @@ (label 7) (parent 6) (unrealized (0 3) (2 0))+ (maps+ ((0)+ ((a a) (b b) (y y) (x (mul (rec alpha) x alpha-0)) (alpha alpha)+ (group group) (group-dist group-dist)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dh_sig@@ -400,6 +424,10 @@ (label 8) (parent 7) (unrealized (0 3))+ (maps+ ((0)+ ((a a) (b b) (y y) (x x) (alpha alpha) (group group)+ (group-dist group-dist)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dh_sig@@ -439,6 +467,10 @@ (label 9) (parent 7) (unrealized (0 3))+ (maps+ ((0)+ ((a a) (b b) (y y) (x (mul (rec alpha) x alpha-0)) (alpha alpha)+ (group group) (group-dist group-dist)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dh_sig
tst/dh_mim_hack.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/dh_mim_hack.scm") (defprotocol dh_mim basic@@ -39,6 +39,9 @@ ((recv gx-0) (send gy) (recv (enc n (enc "dh" gx-0 gy dhkey))))) (label 0) (unrealized (1 2))+ (maps+ ((0 1)+ ((n n) (gx gx) (gy gy) (dhkey dhkey) (gy-0 gy-0) (gx-0 gx-0)))) (origs (gy (1 1)) (gx (0 0)) (n (0 2))) (comment "2 in cohort - 2 not yet seen")) @@ -49,6 +52,7 @@ (precedes ((0 0) (1 0)) ((0 2) (1 2)) ((1 1) (0 1))) (non-orig dhkey (invk gx) (invk gy)) (uniq-orig n gx gy)+ (comment "Agreement on the encrypted text only") (operation encryption-test (displaced 2 0 init 3) (enc n (enc "dh" gx-0 gy-0 dhkey)) (1 2)) (strand-map 0 1)@@ -70,6 +74,7 @@ (precedes ((0 2) (1 2)) ((1 1) (2 0)) ((2 1) (1 2))) (non-orig dhkey (invk gx) (invk gy)) (uniq-orig n gx gy)+ (comment "Agreement on the encrypted text only") (operation encryption-test (added-listener (enc "dh" gx-0 gy dhkey)) (enc n (enc "dh" gx-0 gy dhkey)) (1 2)) (strand-map 0 1)@@ -80,6 +85,9 @@ (label 2) (parent 0) (unrealized (1 2) (2 0))+ (maps+ ((0 1)+ ((n n) (gx gx) (gy gy) (dhkey dhkey) (gy-0 gy-0) (gx-0 gx-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dh_mim@@ -91,6 +99,7 @@ (precedes ((0 2) (1 2)) ((1 1) (3 0)) ((2 1) (1 2)) ((3 1) (2 0))) (non-orig dhkey (invk gx) (invk gy)) (uniq-orig n gx gy)+ (comment "Agreement on the encrypted text only") (operation encryption-test (added-strand CDHcalc2 2) (enc "dh" gx-0 gy dhkey) (2 0)) (strand-map 0 1 2)@@ -102,6 +111,9 @@ (label 3) (parent 2) (unrealized (1 2))+ (maps+ ((0 1)+ ((n n) (gx gx) (gy gy) (dhkey dhkey) (gy-0 gy-0) (gx-0 gx-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dh_mim@@ -115,6 +127,7 @@ ((3 1) (2 0)) ((4 1) (1 2))) (non-orig dhkey (invk gx) (invk gy)) (uniq-orig n gx gy)+ (comment "Agreement on the encrypted text only") (operation nonce-test (added-listener (enc "dh" gx gy-0 dhkey)) n (1 2) (enc n (enc "dh" gx gy-0 dhkey))) (strand-map 0 1 2 3)@@ -127,6 +140,9 @@ (label 4) (parent 3) (unrealized (4 0))+ (maps+ ((0 1)+ ((n n) (gx gx) (gy gy) (dhkey dhkey) (gy-0 gy-0) (gx-0 gx-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dh_mim@@ -141,6 +157,7 @@ ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (4 0))) (non-orig dhkey (invk gx) (invk gy)) (uniq-orig n gx gy)+ (comment "Agreement on the encrypted text only") (operation encryption-test (added-strand CDHcalc1 2) (enc "dh" gx gy-0 dhkey) (4 0)) (strand-map 0 1 2 3 4)@@ -154,6 +171,9 @@ (label 5) (parent 4) (realized)+ (maps+ ((0 1)+ ((n n) (gx gx) (gy gy) (dhkey dhkey) (gy-0 gy-0) (gx-0 gx-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dh_mim@@ -167,6 +187,7 @@ ((3 1) (1 2)) ((4 1) (3 0))) (non-orig dhkey (invk gx) (invk gy)) (uniq-orig n gx gy)+ (comment "Agreement on the encrypted text only") (operation generalization deleted (2 0)) (strand-map 0 1 3 4 5) (traces@@ -178,6 +199,9 @@ (label 6) (parent 5) (realized)+ (maps+ ((0 1)+ ((n n) (gx gx) (gy gy) (dhkey dhkey) (gy-0 gy-0) (gx-0 gx-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dh_mim@@ -190,6 +214,7 @@ ((3 1) (1 2))) (non-orig dhkey (invk gx) (invk gy)) (uniq-orig n gx gy)+ (comment "Agreement on the encrypted text only") (operation generalization deleted (3 0)) (strand-map 0 1 2 4) (traces
tst/dhnsl_hack.tst view
@@ -1,7 +1,7 @@ (herald "Diffie-Hellman enhanced Needham-Schroeder-Lowe Protocol" (algebra basic)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/dhnsl_hack.scm") (defprotocol dhnsl basic@@ -42,6 +42,7 @@ (send (enc (enc "dh" gz gx dhkey) (pubk b))))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (gx gx) (gy gy) (gz gz) (dhkey dhkey)))) (origs (gx (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -53,6 +54,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig dhkey (invk gx) (invk gy) (invk gz-0) (privk a) (privk b)) (uniq-orig gx gy gz-0)+ (comment "Initiator point-of-view") (operation encryption-test (added-strand resp 2) (enc "dh" gy gx dhkey) (0 1)) (strand-map 0)@@ -65,6 +67,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (gx gx) (gy gy) (gz gz) (dhkey dhkey)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhnsl@@ -74,6 +77,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig dhkey (invk gx) (invk gy) (invk gz-0) (privk a) (privk b)) (uniq-orig gx gy gz-0)+ (comment "Initiator point-of-view") (operation nonce-test (contracted (b-0 b) (a-0 a)) gx (1 0) (enc gx a (pubk b))) (strand-map 0 1)@@ -86,6 +90,7 @@ (label 2) (parent 1) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (gx gx) (gy gy) (gz gz) (dhkey dhkey)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhnsl@@ -100,6 +105,7 @@ (non-orig dhkey dhkey-0 (invk gx) (invk gy) (invk gz-0) (invk gy-0) (invk gz-1) (privk a) (privk b)) (uniq-orig gx gy gz-0 gy-0 gz-1)+ (comment "Initiator point-of-view") (operation nonce-test (added-strand resp 2) gx (1 0) (enc gx a (pubk b))) (strand-map 0 1)@@ -114,6 +120,7 @@ (label 3) (parent 1) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (gx gx) (gy gy) (gz gz) (dhkey dhkey)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhnsl@@ -123,6 +130,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig dhkey (invk gx) (invk gy) (invk gz) (privk a) (privk b)) (uniq-orig gx gy gz)+ (comment "Initiator point-of-view") (operation encryption-test (contracted (gz-0 gz)) (enc "dh" gy gx dhkey) (0 1) (enc gy (enc "dh" gy gx dhkey) gz b (pubk a)))@@ -150,6 +158,7 @@ (non-orig dhkey dhkey-0 (invk gx) (invk gy) (invk gz-0) (invk gy-0) (invk gz-1) (privk a) (privk b)) (uniq-orig gx gy gz-0 gy-0 gz-1)+ (comment "Initiator point-of-view") (operation nonce-test (contracted (b-0 b) (a-0 a)) gx (1 0) (enc gx a (pubk b)) (enc gy-0 (enc "dh" gy-0 gx dhkey-0) gz-1 b (pubk a)))@@ -165,6 +174,7 @@ (label 5) (parent 3) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (gx gx) (gy gy) (gz gz) (dhkey dhkey)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhnsl@@ -177,6 +187,7 @@ (non-orig dhkey dhkey-0 (invk gx) (invk gy) (invk gz) (invk gy-0) (invk gz-0) (privk a) (privk b)) (uniq-orig gx gy gz gy-0 gz-0)+ (comment "Initiator point-of-view") (operation encryption-test (contracted (gz-1 gz)) (enc "dh" gy gx dhkey) (0 1) (enc gy (enc "dh" gy gx dhkey) gz b (pubk a)))@@ -195,6 +206,7 @@ (seen-ops (4 (operation generalization deleted (2 0)) (strand-map 0 1))) (realized)+ (maps ((0) ((a a) (b b) (gx gx) (gy gy) (gz gz) (dhkey dhkey)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")@@ -237,6 +249,7 @@ (recv (enc (enc "dh" gz gx dhkey) (pubk b))))) (label 7) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (gx gx) (gy gy) (gz gz) (dhkey dhkey)))) (origs (gz (0 1)) (gy (0 1))) (comment "2 in cohort - 2 not yet seen")) @@ -248,6 +261,7 @@ (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2))) (non-orig dhkey (invk gx) (invk gy) (invk gz) (privk a)) (uniq-orig gx gy gz)+ (comment "Responder point-of-view") (operation encryption-test (added-strand init 3) (enc "dh" gz gx dhkey) (0 2)) (strand-map 0)@@ -261,6 +275,7 @@ (label 8) (parent 7) (unrealized (1 1))+ (maps ((0) ((a a) (b b) (gx gx) (gy gy) (gz gz) (dhkey dhkey)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhnsl@@ -268,6 +283,7 @@ (defstrand resp 3 (dhkey dhkey) (h1 gx) (gy gy) (gz gy) (b b) (a a)) (non-orig dhkey (invk gy) (privk a)) (uniq-orig gy)+ (comment "Responder point-of-view") (operation encryption-test (displaced 1 0 resp 2) (enc "dh" gz gx dhkey) (0 2)) (strand-map 0)@@ -278,6 +294,7 @@ (label 9) (parent 7) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (gx gx) (gy gy) (gz gy) (dhkey dhkey)))) (origs (gy (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -289,6 +306,7 @@ (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2))) (non-orig dhkey (invk gx) (invk gy) (invk gz) (privk a)) (uniq-orig gx gy gz)+ (comment "Responder point-of-view") (operation encryption-test (displaced 2 0 resp 2) (enc "dh" h2 gx dhkey) (1 1)) (strand-map 0 1)@@ -302,6 +320,7 @@ (label 10) (parent 8) (unrealized (1 1))+ (maps ((0) ((a a) (b b) (gx gx) (gy gy) (gz gz) (dhkey dhkey)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhnsl@@ -316,6 +335,7 @@ (non-orig dhkey (invk gx) (invk gy) (invk gz) (invk h2) (invk gz-0) (privk a)) (uniq-orig gx gy gz h2 gz-0)+ (comment "Responder point-of-view") (operation encryption-test (added-strand resp 2) (enc "dh" h2 gx dhkey) (1 1)) (strand-map 0 1)@@ -332,6 +352,7 @@ (parent 8) (unrealized (1 1)) (dead)+ (maps ((0) ((a a) (b b) (gx gx) (gy gy) (gz gz) (dhkey dhkey)))) (comment "empty cohort")) (defskeleton dhnsl@@ -342,6 +363,7 @@ (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2))) (non-orig dhkey (invk gx) (invk gy) (privk a)) (uniq-orig gx gy)+ (comment "Responder point-of-view") (operation encryption-test (added-strand init 3) (enc "dh" gy gx dhkey) (0 2) (enc gy (enc "dh" gy gx dhkey) gy b (pubk a)))@@ -356,6 +378,7 @@ (label 12) (parent 9) (unrealized (1 1))+ (maps ((0) ((a a) (b b) (gx gx) (gy gy) (gz gy) (dhkey dhkey)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhnsl@@ -365,6 +388,7 @@ (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2))) (non-orig dhkey (invk gx) (invk gy) (invk gz) (privk a)) (uniq-orig gx gy gz)+ (comment "Responder point-of-view") (operation encryption-test (contracted (a-0 a) (b-0 b)) (enc "dh" gy gx dhkey) (1 1) (enc gy (enc "dh" gy gx dhkey) gz b (pubk a)))@@ -391,6 +415,7 @@ (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2))) (non-orig dhkey (invk gx) (invk gy) (privk a)) (uniq-orig gx gy)+ (comment "Responder point-of-view") (operation encryption-test (displaced 2 0 resp 2) (enc "dh" h2 gx dhkey) (1 1)) (strand-map 0 1)@@ -404,6 +429,7 @@ (label 14) (parent 12) (unrealized (1 1))+ (maps ((0) ((a a) (b b) (gx gx) (gy gy) (gz gy) (dhkey dhkey)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhnsl@@ -417,6 +443,7 @@ ((2 1) (1 1))) (non-orig dhkey (invk gx) (invk gy) (invk h2) (invk gz) (privk a)) (uniq-orig gx gy h2 gz)+ (comment "Responder point-of-view") (operation encryption-test (added-strand resp 2) (enc "dh" h2 gx dhkey) (1 1)) (strand-map 0 1)@@ -433,6 +460,7 @@ (parent 12) (unrealized (1 1)) (dead)+ (maps ((0) ((a a) (b b) (gx gx) (gy gy) (gz gy) (dhkey dhkey)))) (comment "empty cohort")) (defskeleton dhnsl@@ -442,6 +470,7 @@ (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2))) (non-orig dhkey (invk gx) (invk gy) (privk a)) (uniq-orig gx gy)+ (comment "Responder point-of-view") (operation encryption-test (contracted (a-0 a) (b-0 b)) (enc "dh" gy gx dhkey) (1 1) (enc gy (enc "dh" gy gx dhkey) gy b (pubk a)))@@ -459,6 +488,7 @@ (seen-ops (13 (operation generalization separated gy-0) (strand-map 0 1))) (realized)+ (maps ((0) ((a a) (b b) (gx gx) (gy gy) (gz gy) (dhkey dhkey)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
tst/dhstatic-state.tst view
@@ -1,6 +1,6 @@ (herald dhstatic-state (algebra diffie-hellman) (bound 16)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/dhstatic-state.scm") (comment "Strand count bounded at 16") @@ -70,9 +70,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -137,6 +136,11 @@ (recv n))) (label 0) (unrealized (0 1))+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha alpha) (n n)+ (static-key static-key)))) (origs (n (0 2))) (comment "Not closed under rules")) @@ -159,6 +163,11 @@ (label 1) (parent 0) (unrealized (0 0) (0 1))+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha alpha) (n n)+ (static-key static-key)))) (origs (n (0 2))) (comment "1 in cohort - 1 not yet seen")) @@ -193,6 +202,11 @@ (label 2) (parent 1) (unrealized (0 1) (1 1))+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha alpha) (n n)+ (static-key static-key)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhstatic-state@@ -230,6 +244,11 @@ (label 3) (parent 2) (unrealized (0 1))+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha alpha) (n n)+ (static-key static-key)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhstatic-state@@ -271,6 +290,11 @@ (label 4) (parent 3) (unrealized (3 0))+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha alpha) (n n)+ (static-key static-key)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhstatic-state@@ -315,6 +339,11 @@ (label 5) (parent 4) (unrealized (0 3))+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhstatic-state@@ -372,6 +401,11 @@ (label 6) (parent 5) (unrealized (5 0) (5 1))+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhstatic-state@@ -418,6 +452,11 @@ (label 7) (parent 5) (unrealized (5 0))+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhstatic-state@@ -550,6 +589,11 @@ (label 9) (parent 6) (unrealized (5 1))+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhstatic-state@@ -599,6 +643,11 @@ (label 10) (parent 7) (unrealized (6 0))+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhstatic-state@@ -648,6 +697,11 @@ (label 11) (parent 7) (unrealized (6 0))+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhstatic-state@@ -716,6 +770,11 @@ (label 12) (parent 9) (unrealized (7 0))+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhstatic-state@@ -784,6 +843,11 @@ (label 13) (parent 9) (unrealized (7 0))+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhstatic-state@@ -852,6 +916,11 @@ (label 14) (parent 9) (unrealized (7 0))+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhstatic-state@@ -908,6 +977,11 @@ (label 15) (parent 10) (unrealized (5 0) (6 1))+ (maps+ ((0)+ ((ca ca) (b self) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhstatic-state@@ -957,6 +1031,10 @@ (parent 11) (unrealized (6 0)) (dead)+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra-0) (serial-a serial-a)+ (serial-b serial-b) (alpha ra) (n n) (static-key static-key)))) (comment "empty cohort")) (defskeleton dhstatic-state@@ -1024,6 +1102,11 @@ (parent 12) (unrealized (7 0)) (dead)+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "empty cohort")) (defskeleton dhstatic-state@@ -1102,6 +1185,11 @@ (label 18) (parent 13) (unrealized (6 0) (7 1))+ (maps+ ((0)+ ((ca ca-0) (b self) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-1) (n n)+ (static-key static-key)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhstatic-state@@ -1169,6 +1257,10 @@ (parent 14) (unrealized (7 0)) (dead)+ (maps+ ((0)+ ((ca ca) (b b) (a a) (ra ra-1) (serial-a serial-a)+ (serial-b serial-b) (alpha ra) (n n) (static-key static-key)))) (comment "empty cohort")) (defskeleton dhstatic-state@@ -1226,6 +1318,11 @@ (parent 15) (unrealized (5 0)) (dead)+ (maps+ ((0)+ ((ca ca) (b self) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "empty cohort")) (defskeleton dhstatic-state@@ -1288,6 +1385,11 @@ (parent 15) (unrealized (5 0)) (dead)+ (maps+ ((0)+ ((ca ca) (b self) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "empty cohort")) (defskeleton dhstatic-state@@ -1368,6 +1470,11 @@ (parent 18) (unrealized (6 0)) (dead)+ (maps+ ((0)+ ((ca ca-0) (b self) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-1) (n n)+ (static-key static-key)))) (comment "empty cohort")) (defskeleton dhstatic-state@@ -1455,6 +1562,11 @@ (parent 18) (unrealized (6 0)) (dead)+ (maps+ ((0)+ ((ca ca-0) (b self) (a a) (ra ra) (serial-a serial-a)+ (serial-b serial-b) (alpha ra-1) (n n)+ (static-key static-key)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -1525,9 +1637,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -1591,6 +1702,11 @@ (send n))) (label 24) (unrealized (0 1))+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb rb) (serial-b serial-b)+ (serial-a serial-a) (alpha alpha) (n n)+ (static-key static-key)))) (origs) (comment "Not closed under rules")) @@ -1612,6 +1728,11 @@ (label 25) (parent 24) (unrealized (0 0) (0 1))+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb rb) (serial-b serial-b)+ (serial-a serial-a) (alpha alpha) (n n)+ (static-key static-key)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -1645,6 +1766,11 @@ (label 26) (parent 25) (unrealized (0 1) (1 1))+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha alpha) (n n)+ (static-key static-key)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhstatic-state@@ -1682,6 +1808,11 @@ (label 27) (parent 26) (unrealized (0 1))+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha alpha) (n n)+ (static-key static-key)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhstatic-state@@ -1723,6 +1854,11 @@ (label 28) (parent 27) (unrealized (3 0))+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha alpha) (n n)+ (static-key static-key)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhstatic-state@@ -1767,6 +1903,11 @@ (label 29) (parent 28) (unrealized (0 2))+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhstatic-state@@ -1822,6 +1963,11 @@ (label 30) (parent 29) (unrealized (5 0) (5 1))+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhstatic-state@@ -1868,6 +2014,11 @@ (label 31) (parent 29) (unrealized (5 0))+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhstatic-state@@ -1998,6 +2149,11 @@ (label 33) (parent 30) (unrealized (5 1))+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton dhstatic-state@@ -2047,6 +2203,11 @@ (label 34) (parent 31) (unrealized (6 0))+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhstatic-state@@ -2096,6 +2257,11 @@ (label 35) (parent 31) (unrealized (6 0))+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhstatic-state@@ -2163,6 +2329,11 @@ (label 36) (parent 33) (unrealized (7 0))+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhstatic-state@@ -2230,6 +2401,11 @@ (label 37) (parent 33) (unrealized (7 0))+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhstatic-state@@ -2297,6 +2473,11 @@ (label 38) (parent 33) (unrealized (7 0))+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton dhstatic-state@@ -2353,6 +2534,11 @@ (label 39) (parent 34) (unrealized (5 0) (6 1))+ (maps+ ((0)+ ((ca ca) (a self) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhstatic-state@@ -2402,6 +2588,10 @@ (parent 35) (unrealized (6 0)) (dead)+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb ra-0) (serial-b serial-b)+ (serial-a serial-a) (alpha ra) (n n) (static-key static-key)))) (comment "empty cohort")) (defskeleton dhstatic-state@@ -2467,6 +2657,11 @@ (parent 36) (unrealized (7 0)) (dead)+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "empty cohort")) (defskeleton dhstatic-state@@ -2545,6 +2740,11 @@ (label 42) (parent 37) (unrealized (6 0) (7 1))+ (maps+ ((0)+ ((ca ca-0) (a self) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-1) (n n)+ (static-key static-key)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton dhstatic-state@@ -2610,6 +2810,10 @@ (parent 38) (unrealized (7 0)) (dead)+ (maps+ ((0)+ ((ca ca) (a a) (b b) (rb ra-1) (serial-b serial-b)+ (serial-a serial-a) (alpha ra) (n n) (static-key static-key)))) (comment "empty cohort")) (defskeleton dhstatic-state@@ -2667,6 +2871,11 @@ (parent 39) (unrealized (5 0)) (dead)+ (maps+ ((0)+ ((ca ca) (a self) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "empty cohort")) (defskeleton dhstatic-state@@ -2729,6 +2938,11 @@ (parent 39) (unrealized (5 0)) (dead)+ (maps+ ((0)+ ((ca ca) (a self) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-0) (n n)+ (static-key static-key)))) (comment "empty cohort")) (defskeleton dhstatic-state@@ -2809,6 +3023,11 @@ (parent 42) (unrealized (6 0)) (dead)+ (maps+ ((0)+ ((ca ca-0) (a self) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-1) (n n)+ (static-key static-key)))) (comment "empty cohort")) (defskeleton dhstatic-state@@ -2896,6 +3115,11 @@ (parent 42) (unrealized (6 0)) (dead)+ (maps+ ((0)+ ((ca ca-0) (a self) (b b) (rb ra) (serial-b serial-b)+ (serial-a serial-a) (alpha ra-1) (n n)+ (static-key static-key)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/disclosure.tst view
@@ -1,6 +1,6 @@ (herald disclosure) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/disclosure.scm") (defprotocol disc basic@@ -26,6 +26,7 @@ (traces ((send (enc a b n k)) (recv n))) (label 0) (unrealized (0 1))+ (maps ((0) ((n n) (a a) (b b) (k k)))) (origs (n (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -60,6 +61,7 @@ (label 2) (parent 0) (unrealized (1 0))+ (maps ((0) ((n n) (a a) (b b) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton disc@@ -77,6 +79,7 @@ (label 3) (parent 2) (realized)+ (maps ((0) ((n n) (a a) (b b) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton disc
tst/doorsep.tst view
@@ -1,6 +1,6 @@ (herald doorsep (comment "Door Simple Example Protocol")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/doorsep.scm") (defprotocol doorsep basic@@ -15,8 +15,8 @@ (defrule trust (forall ((z strd) (p d akey)) (implies- (and (p "person" z (idx 1)) (p "person" "p" z p)- (p "person" "d" z d) (non (invk p)))+ (and (p "person" z (idx 1)) (p "person" "d" z d)+ (p "person" "p" z p) (non (invk p))) (non (invk d)))) (comment "The trust rule")) (defgenrule neqRl_indx@@ -36,6 +36,7 @@ (traces ((recv (enc (enc k (invk p)) d)) (send (enc t k)) (recv t))) (label 0) (unrealized (0 0))+ (maps ((0) ((p p) (d d) (k k) (t t)))) (origs (t (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -46,6 +47,7 @@ (precedes ((1 0) (0 0))) (non-orig (invk p) (invk d-0)) (uniq-orig k t)+ (comment "Analyze from the doors's perspective") (rule trust) (operation encryption-test (added-strand person 1) (enc k (invk p)) (0 0))@@ -55,6 +57,7 @@ (label 1) (parent 0) (unrealized (0 0) (0 2))+ (maps ((0) ((p p) (d d) (k k) (t t)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton doorsep@@ -64,6 +67,7 @@ (precedes ((1 0) (0 0))) (non-orig (invk p) (invk d)) (uniq-orig k t)+ (comment "Analyze from the doors's perspective") (operation encryption-test (contracted (d-0 d)) (enc k (invk p)) (0 0) (enc (enc k (invk p)) d)) (strand-map 0 1)@@ -72,6 +76,7 @@ (label 2) (parent 1) (unrealized (0 2))+ (maps ((0) ((p p) (d d) (k k) (t t)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton doorsep@@ -81,6 +86,7 @@ (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2))) (non-orig (invk d) (invk p)) (uniq-orig k t)+ (comment "Analyze from the doors's perspective") (operation nonce-test (displaced 1 2 person 3) t (0 2) (enc t k)) (strand-map 0 1) (traces ((recv (enc (enc k (invk p)) d)) (send (enc t k)) (recv t))@@ -100,6 +106,7 @@ (precedes ((1 0) (0 0)) ((1 0) (2 0)) ((2 1) (0 2))) (non-orig (invk p) (invk d)) (uniq-orig k t)+ (comment "Analyze from the doors's perspective") (operation nonce-test (added-listener k) t (0 2) (enc t k)) (strand-map 0 1) (traces ((recv (enc (enc k (invk p)) d)) (send (enc t k)) (recv t))@@ -108,6 +115,7 @@ (parent 2) (unrealized (2 0)) (dead)+ (maps ((0) ((p p) (d d) (k k) (t t)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/doorsep2invk.tst view
@@ -1,6 +1,6 @@ (herald doorsep2invk (comment "Door Simple Example Protocol")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/doorsep2invk.scm") (defprotocol doorsep basic@@ -24,10 +24,10 @@ (defskeleton doorsep (vars (skey+0 skey) (text+0 text) (akey+1 akey+0 akey+3 akey))- (defstrand init 1 (skey skey+0) (self (invk akey+3)) (peer akey+0)) (defstrand resp 3 (skey skey+0) (data text+0) (self akey+1) (peer (invk akey+3)))- (precedes ((0 0) (1 0)))+ (defstrand init 1 (skey skey+0) (self (invk akey+3)) (peer akey+0))+ (precedes ((1 0) (0 0))) (non-orig akey+3 (invk akey+0)) (uniq-orig skey+0 text+0) (goals@@ -42,32 +42,52 @@ (p "init" "peer" z-0 akey+0) (prec z-0 0 z 0) (non akey+3) (non (invk akey+0)) (uniq-at skey+0 z-0 0) (uniq-at text+0 z 1)) (and))))- (traces ((send (enc (enc skey+0 akey+3) akey+0)))+ (traces ((recv (enc (enc skey+0 akey+3) akey+1)) (send (enc text+0 skey+0))- (recv text+0)))+ (recv text+0)) ((send (enc (enc skey+0 akey+3) akey+0)))) (label 0)- (unrealized (1 0) (1 2))- (origs (skey+0 (0 0)) (text+0 (1 1)))+ (unrealized (0 0) (0 2))+ (maps+ ((0 1)+ ((text+0 text+0) (skey+0 skey+0) (akey+1 akey+1) (akey+0 akey+0)+ (akey+3 akey+3))))+ (origs (text+0 (0 1)) (skey+0 (1 0))) (comment "1 in cohort - 1 not yet seen")) (defskeleton doorsep (vars (skey+0 skey) (text+0 text) (akey+0 akey+3 akey))- (defstrand init 1 (skey skey+0) (self (invk akey+3)) (peer akey+0)) (defstrand resp 3 (skey skey+0) (data text+0) (self akey+0) (peer (invk akey+3)))- (precedes ((0 0) (1 0)))+ (defstrand init 1 (skey skey+0) (self (invk akey+3)) (peer akey+0))+ (precedes ((1 0) (0 0))) (non-orig akey+3 (invk akey+0)) (uniq-orig skey+0 text+0)+ (goals+ (forall+ ((text+0 text) (skey+0 skey) (akey+1 akey+0 akey+3 akey)+ (z z-0 strd))+ (implies+ (and (p "resp" z 3) (p "init" z-0 1) (p "resp" "data" z text+0)+ (p "resp" "skey" z skey+0) (p "resp" "self" z akey+1)+ (p "resp" "peer" z (invk akey+3)) (p "init" "skey" z-0 skey+0)+ (p "init" "self" z-0 (invk akey+3))+ (p "init" "peer" z-0 akey+0) (prec z-0 0 z 0) (non akey+3)+ (non (invk akey+0)) (uniq-at skey+0 z-0 0)+ (uniq-at text+0 z 1)) (and)))) (operation encryption-test (contracted (akey+1 akey+0))- (enc skey+0 akey+3) (1 0) (enc (enc skey+0 akey+3) akey+0))+ (enc skey+0 akey+3) (0 0) (enc (enc skey+0 akey+3) akey+0)) (strand-map 0 1)- (traces ((send (enc (enc skey+0 akey+3) akey+0)))+ (traces ((recv (enc (enc skey+0 akey+3) akey+0)) (send (enc text+0 skey+0))- (recv text+0)))+ (recv text+0)) ((send (enc (enc skey+0 akey+3) akey+0)))) (label 1) (parent 0)- (unrealized (1 2))- (origs (skey+0 (0 0)) (text+0 (1 1)))+ (unrealized (0 2))+ (maps+ ((0 1)+ ((text+0 text+0) (skey+0 skey+0) (akey+1 akey+0) (akey+0 akey+0)+ (akey+3 akey+3))))+ (origs (text+0 (0 1)) (skey+0 (1 0))) (comment "2 in cohort - 2 not yet seen")) (defskeleton doorsep@@ -77,9 +97,21 @@ (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2))) (non-orig (invk self) (invk peer)) (uniq-orig skey+0 text+0)- (operation nonce-test (displaced 0 2 init 3) text+0 (1 2)+ (goals+ (forall+ ((text+0 text) (skey+0 skey) (akey+1 akey+0 akey+3 akey)+ (z z-0 strd))+ (implies+ (and (p "resp" z 3) (p "init" z-0 1) (p "resp" "data" z text+0)+ (p "resp" "skey" z skey+0) (p "resp" "self" z akey+1)+ (p "resp" "peer" z (invk akey+3)) (p "init" "skey" z-0 skey+0)+ (p "init" "self" z-0 (invk akey+3))+ (p "init" "peer" z-0 akey+0) (prec z-0 0 z 0) (non akey+3)+ (non (invk akey+0)) (uniq-at skey+0 z-0 0)+ (uniq-at text+0 z 1)) (and))))+ (operation nonce-test (displaced 1 2 init 3) text+0 (0 2) (enc text+0 skey+0))- (strand-map 1 0)+ (strand-map 0 1) (traces ((recv (enc (enc skey+0 (invk self)) peer)) (send (enc text+0 skey+0)) (recv text+0))@@ -91,30 +123,47 @@ (shape) (satisfies yes) (maps- ((1 0)+ ((0 1) ((text+0 text+0) (skey+0 skey+0) (akey+1 peer) (akey+0 peer) (akey+3 (invk self))))) (origs (skey+0 (1 0)) (text+0 (0 1)))) (defskeleton doorsep (vars (skey+0 skey) (text+0 text) (akey+0 akey+3 akey))- (defstrand init 1 (skey skey+0) (self (invk akey+3)) (peer akey+0)) (defstrand resp 3 (skey skey+0) (data text+0) (self akey+0) (peer (invk akey+3)))+ (defstrand init 1 (skey skey+0) (self (invk akey+3)) (peer akey+0)) (deflistener skey+0)- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((2 1) (1 2)))+ (precedes ((1 0) (0 0)) ((1 0) (2 0)) ((2 1) (0 2))) (non-orig akey+3 (invk akey+0)) (uniq-orig skey+0 text+0)- (operation nonce-test (added-listener skey+0) text+0 (1 2)+ (goals+ (forall+ ((text+0 text) (skey+0 skey) (akey+1 akey+0 akey+3 akey)+ (z z-0 strd))+ (implies+ (and (p "resp" z 3) (p "init" z-0 1) (p "resp" "data" z text+0)+ (p "resp" "skey" z skey+0) (p "resp" "self" z akey+1)+ (p "resp" "peer" z (invk akey+3)) (p "init" "skey" z-0 skey+0)+ (p "init" "self" z-0 (invk akey+3))+ (p "init" "peer" z-0 akey+0) (prec z-0 0 z 0) (non akey+3)+ (non (invk akey+0)) (uniq-at skey+0 z-0 0)+ (uniq-at text+0 z 1)) (and))))+ (operation nonce-test (added-listener skey+0) text+0 (0 2) (enc text+0 skey+0)) (strand-map 0 1)- (traces ((send (enc (enc skey+0 akey+3) akey+0)))+ (traces ((recv (enc (enc skey+0 akey+3) akey+0)) (send (enc text+0 skey+0))- (recv text+0)) ((recv skey+0) (send skey+0)))+ (recv text+0)) ((send (enc (enc skey+0 akey+3) akey+0)))+ ((recv skey+0) (send skey+0))) (label 3) (parent 1) (unrealized (2 0)) (dead)+ (maps+ ((0 1)+ ((text+0 text+0) (skey+0 skey+0) (akey+1 akey+0) (akey+0 akey+0)+ (akey+3 akey+3)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/dy.tst view
file too large to diff
tst/encsig.tst view
@@ -1,7 +1,7 @@ (herald "Encrypted Signed Message Example" (comment "Shows examples of key usage of asymmetric keys")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/encsig.scm") (defprotocol mult-keys-enc-sig basic@@ -33,6 +33,7 @@ (send (enc (enc n2 (pubk "enc" b)) (privk "sig" a))))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -90,6 +91,7 @@ (recv (enc (enc n2 (pubk "enc" b)) (privk "sig" a))))) (label 2) (unrealized (0 0) (0 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (origs (n2 (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -111,6 +113,7 @@ (label 3) (parent 2) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton mult-keys-enc-sig@@ -194,6 +197,7 @@ (recv (enc (enc n2 (pubk "enc" b)) (privk "sig" a))))) (label 6) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (origs (n2 (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -252,6 +256,7 @@ (recv (enc (enc n2 (pubk "enc" b)) (privk "sig" a))))) (label 8) (unrealized (0 0) (0 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (origs (n2 (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -273,6 +278,7 @@ (label 9) (parent 8) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton mult-keys-enc-sig@@ -321,6 +327,7 @@ (label 11) (parent 9) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton mult-keys-enc-sig@@ -376,6 +383,7 @@ (seen-ops (10 (operation generalization deleted (1 0)) (strand-map 0 2))) (realized)+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton mult-keys-enc-sig
tst/envelope.tst view
@@ -1,6 +1,6 @@ (herald "Envelope Protocol" (bound 15)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/envelope.scm") (comment "Strand count bounded at 15") @@ -70,6 +70,7 @@ (label 0) (unrealized (0 0) (1 2)) (preskeleton)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -88,6 +89,7 @@ (label 1) (parent 0) (unrealized (1 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -113,6 +115,7 @@ (label 2) (parent 1) (unrealized (0 0) (2 0))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -137,6 +140,7 @@ (label 3) (parent 2) (unrealized (0 0))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -165,6 +169,7 @@ (label 4) (parent 3) (unrealized (3 1) (3 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -194,6 +199,7 @@ (label 5) (parent 4) (unrealized (3 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton envelope@@ -229,6 +235,7 @@ (label 6) (parent 5) (unrealized (4 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton envelope@@ -265,6 +272,7 @@ (parent 5) (unrealized (4 0) (4 1)) (dead)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "empty cohort")) (defskeleton envelope@@ -298,6 +306,7 @@ (parent 5) (unrealized (4 0)) (dead)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "empty cohort")) (defskeleton envelope@@ -337,6 +346,7 @@ (parent 6) (unrealized (5 0) (5 1)) (dead)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "empty cohort")) (defskeleton envelope@@ -376,6 +386,7 @@ (label 10) (parent 6) (unrealized (5 0) (5 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -414,6 +425,7 @@ (parent 6) (unrealized (4 1) (5 0)) (dead)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "empty cohort")) (defskeleton envelope@@ -453,6 +465,7 @@ (label 12) (parent 10) (unrealized (5 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -538,6 +551,7 @@ (parent 12) (unrealized (6 0)) (dead)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -610,6 +624,7 @@ (label 15) (unrealized (0 0) (1 2)) (preskeleton)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -630,6 +645,7 @@ (label 16) (parent 15) (unrealized (0 0) (1 2))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -657,6 +673,7 @@ (label 17) (parent 16) (unrealized (0 0) (2 0))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -683,6 +700,7 @@ (label 18) (parent 17) (unrealized (0 0))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -715,6 +733,7 @@ (label 19) (parent 18) (unrealized (3 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton envelope@@ -753,6 +772,7 @@ (label 20) (parent 19) (unrealized (4 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton envelope@@ -792,6 +812,7 @@ (parent 19) (unrealized (4 0) (4 1)) (dead)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -828,6 +849,7 @@ (parent 19) (unrealized (3 1) (4 0)) (dead)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -870,6 +892,7 @@ (parent 20) (unrealized (5 0) (5 1)) (dead)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -912,6 +935,7 @@ (label 24) (parent 20) (unrealized (5 0) (5 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -953,6 +977,7 @@ (parent 20) (unrealized (4 1) (5 0)) (dead)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -995,6 +1020,7 @@ (label 26) (parent 24) (unrealized (5 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -1086,6 +1112,7 @@ (parent 26) (unrealized (6 0)) (dead)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -1160,6 +1187,7 @@ (label 29) (unrealized (0 0) (1 0) (2 2)) (preskeleton)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (2 3)) (n (2 0))) (comment "Not a skeleton")) @@ -1182,6 +1210,7 @@ (label 30) (parent 29) (unrealized (0 0) (2 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (2 3)) (n (2 0))) (comment "1 in cohort - 1 not yet seen")) @@ -1211,6 +1240,7 @@ (label 31) (parent 30) (unrealized (0 0) (1 0) (3 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1239,6 +1269,7 @@ (label 32) (parent 31) (unrealized (0 0) (1 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1272,6 +1303,7 @@ (label 33) (parent 32) (unrealized (0 0) (4 1) (4 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1306,6 +1338,7 @@ (label 34) (parent 33) (unrealized (0 0) (4 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton envelope@@ -1345,6 +1378,7 @@ (label 35) (parent 34) (unrealized (0 0) (5 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton envelope@@ -1385,6 +1419,7 @@ (parent 34) (unrealized (0 0) (5 0) (5 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -1422,6 +1457,7 @@ (parent 34) (unrealized (0 0) (5 0)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -1465,6 +1501,7 @@ (parent 35) (unrealized (0 0) (6 0) (6 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -1508,6 +1545,7 @@ (label 39) (parent 35) (unrealized (0 0) (6 0) (6 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1550,6 +1588,7 @@ (parent 35) (unrealized (0 0) (5 1) (6 0)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -1593,6 +1632,7 @@ (label 41) (parent 39) (unrealized (0 0) (6 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -1639,6 +1679,7 @@ (label 42) (parent 41) (unrealized (0 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1686,6 +1727,7 @@ (parent 41) (unrealized (0 0) (7 0)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -1738,6 +1780,7 @@ (label 44) (parent 42) (unrealized (8 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton envelope@@ -1795,6 +1838,7 @@ (label 45) (parent 44) (unrealized (9 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "4 in cohort - 4 not yet seen")) (defskeleton envelope@@ -1853,6 +1897,7 @@ (parent 44) (unrealized (9 0) (9 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -1908,6 +1953,7 @@ (parent 44) (unrealized (8 1) (9 0)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -2030,6 +2076,7 @@ (parent 45) (unrealized (10 0) (10 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -2092,6 +2139,7 @@ (label 50) (parent 45) (unrealized (10 0) (10 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2152,6 +2200,7 @@ (parent 45) (unrealized (9 1) (10 0)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -2214,6 +2263,7 @@ (label 52) (parent 50) (unrealized (10 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton envelope@@ -2409,6 +2459,7 @@ (parent 52) (unrealized (11 0)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -2461,9 +2512,9 @@ (defrule ordered-extends (forall ((y z strd) (pcrkey skey)) (implies- (and (p "tpm-extend" y (idx 3)) (p "tpm-extend" z (idx 3))- (p "tpm-extend" "pcrkey" y pcrkey)- (p "tpm-extend" "pcrkey" z pcrkey))+ (and (p "tpm-extend" z (idx 3)) (p "tpm-extend" y (idx 3))+ (p "tpm-extend" "pcrkey" z pcrkey)+ (p "tpm-extend" "pcrkey" y pcrkey)) (or (= y z) (prec y (idx 2) z (idx 3))@@ -2489,6 +2540,7 @@ (label 56) (unrealized (0 0) (1 2)) (preskeleton)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -2507,6 +2559,7 @@ (label 57) (parent 56) (unrealized (1 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -2532,6 +2585,7 @@ (label 58) (parent 57) (unrealized (0 0) (2 0))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2556,6 +2610,7 @@ (label 59) (parent 58) (unrealized (0 0))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2584,6 +2639,7 @@ (label 60) (parent 59) (unrealized (3 1) (3 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2613,6 +2669,7 @@ (label 61) (parent 60) (unrealized (3 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton envelope@@ -2648,6 +2705,7 @@ (label 62) (parent 61) (unrealized (4 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -2684,6 +2742,7 @@ (parent 61) (unrealized (4 0) (4 1)) (dead)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "empty cohort")) (defskeleton envelope@@ -2717,6 +2776,7 @@ (parent 61) (unrealized (4 0)) (dead)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "empty cohort")) (defskeleton envelope@@ -2756,6 +2816,7 @@ (label 65) (parent 62) (unrealized (5 0) (5 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2794,6 +2855,7 @@ (parent 62) (unrealized (4 1) (5 0)) (dead)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "empty cohort")) (defskeleton envelope@@ -2833,6 +2895,7 @@ (label 67) (parent 65) (unrealized (5 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -2918,6 +2981,7 @@ (parent 67) (unrealized (6 0)) (dead)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -2970,9 +3034,9 @@ (defrule ordered-extends (forall ((y z strd) (pcrkey skey)) (implies- (and (p "tpm-extend" y (idx 3)) (p "tpm-extend" z (idx 3))- (p "tpm-extend" "pcrkey" y pcrkey)- (p "tpm-extend" "pcrkey" z pcrkey))+ (and (p "tpm-extend" z (idx 3)) (p "tpm-extend" y (idx 3))+ (p "tpm-extend" "pcrkey" z pcrkey)+ (p "tpm-extend" "pcrkey" y pcrkey)) (or (= y z) (prec y (idx 2) z (idx 3))@@ -3000,6 +3064,7 @@ (label 70) (unrealized (0 0) (1 2)) (preskeleton)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -3020,6 +3085,7 @@ (label 71) (parent 70) (unrealized (0 0) (1 2))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -3047,6 +3113,7 @@ (label 72) (parent 71) (unrealized (0 0) (2 0))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3073,6 +3140,7 @@ (label 73) (parent 72) (unrealized (0 0))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3105,6 +3173,7 @@ (label 74) (parent 73) (unrealized (3 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton envelope@@ -3143,6 +3212,7 @@ (label 75) (parent 74) (unrealized (4 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -3182,6 +3252,7 @@ (parent 74) (unrealized (4 0) (4 1)) (dead)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -3218,6 +3289,7 @@ (parent 74) (unrealized (3 1) (4 0)) (dead)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -3260,6 +3332,7 @@ (label 78) (parent 75) (unrealized (5 0) (5 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3301,6 +3374,7 @@ (parent 75) (unrealized (4 1) (5 0)) (dead)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -3343,6 +3417,7 @@ (label 80) (parent 78) (unrealized (5 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -3434,6 +3509,7 @@ (parent 80) (unrealized (6 0)) (dead)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -3486,9 +3562,9 @@ (defrule ordered-extends (forall ((y z strd) (pcrkey skey)) (implies- (and (p "tpm-extend" y (idx 3)) (p "tpm-extend" z (idx 3))- (p "tpm-extend" "pcrkey" y pcrkey)- (p "tpm-extend" "pcrkey" z pcrkey))+ (and (p "tpm-extend" z (idx 3)) (p "tpm-extend" y (idx 3))+ (p "tpm-extend" "pcrkey" z pcrkey)+ (p "tpm-extend" "pcrkey" y pcrkey)) (or (= y z) (prec y (idx 2) z (idx 3))@@ -3518,6 +3594,7 @@ (label 83) (unrealized (0 0) (1 0) (2 2)) (preskeleton)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (2 3)) (n (2 0))) (comment "Not a skeleton")) @@ -3540,6 +3617,7 @@ (label 84) (parent 83) (unrealized (0 0) (2 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (2 3)) (n (2 0))) (comment "1 in cohort - 1 not yet seen")) @@ -3569,6 +3647,7 @@ (label 85) (parent 84) (unrealized (0 0) (1 0) (3 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3597,6 +3676,7 @@ (label 86) (parent 85) (unrealized (0 0) (1 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3630,6 +3710,7 @@ (label 87) (parent 86) (unrealized (0 0) (4 1) (4 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3664,6 +3745,7 @@ (label 88) (parent 87) (unrealized (0 0) (4 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton envelope@@ -3703,6 +3785,7 @@ (label 89) (parent 88) (unrealized (0 0) (5 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -3743,6 +3826,7 @@ (parent 88) (unrealized (0 0) (5 0) (5 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -3780,6 +3864,7 @@ (parent 88) (unrealized (0 0) (5 0)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -3823,6 +3908,7 @@ (label 92) (parent 89) (unrealized (0 0) (6 0) (6 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3865,6 +3951,7 @@ (parent 89) (unrealized (0 0) (5 1) (6 0)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -3908,6 +3995,7 @@ (label 94) (parent 92) (unrealized (0 0) (6 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -3954,6 +4042,7 @@ (label 95) (parent 94) (unrealized (0 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4001,6 +4090,7 @@ (parent 94) (unrealized (0 0) (7 0)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -4053,6 +4143,7 @@ (label 97) (parent 95) (unrealized (8 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton envelope@@ -4110,6 +4201,7 @@ (label 98) (parent 97) (unrealized (9 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -4168,6 +4260,7 @@ (parent 97) (unrealized (9 0) (9 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -4223,6 +4316,7 @@ (parent 97) (unrealized (8 1) (9 0)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -4285,6 +4379,7 @@ (label 101) (parent 98) (unrealized (10 0) (10 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4345,6 +4440,7 @@ (parent 98) (unrealized (9 1) (10 0)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -4407,6 +4503,7 @@ (label 103) (parent 101) (unrealized (10 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -4538,6 +4635,7 @@ (parent 103) (unrealized (11 0)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -4590,9 +4688,9 @@ (defrule ordered-extends (forall ((y z strd) (pcrkey skey)) (implies- (and (p "tpm-extend" y (idx 3)) (p "tpm-extend" z (idx 3))- (p "tpm-extend" "pcrkey" y pcrkey)- (p "tpm-extend" "pcrkey" z pcrkey))+ (and (p "tpm-extend" z (idx 3)) (p "tpm-extend" y (idx 3))+ (p "tpm-extend" "pcrkey" z pcrkey)+ (p "tpm-extend" "pcrkey" y pcrkey)) (or (= y z) (prec y (idx 2) z (idx 3))@@ -4600,12 +4698,12 @@ (defrule esk-same-as-pcrkey (forall ((y z strd) (esk pcrkey pcrkey-0 skey)) (implies- (and (p "tpm-extend-enc" y (idx 3))- (p "tpm-extend-enc" z (idx 3))- (p "tpm-extend-enc" "esk" y esk)- (p "tpm-extend-enc" "esk" z esk)+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" "pcrkey" z pcrkey-0) (p "tpm-extend-enc" "pcrkey" y pcrkey)- (p "tpm-extend-enc" "pcrkey" z pcrkey-0))+ (p "tpm-extend-enc" "esk" z esk)+ (p "tpm-extend-enc" "esk" y esk)) (= pcrkey pcrkey-0)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -4628,6 +4726,7 @@ (label 106) (unrealized (0 0) (1 2)) (preskeleton)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -4646,6 +4745,7 @@ (label 107) (parent 106) (unrealized (1 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -4671,6 +4771,7 @@ (label 108) (parent 107) (unrealized (0 0) (2 0))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4695,6 +4796,7 @@ (label 109) (parent 108) (unrealized (0 0))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4723,6 +4825,7 @@ (label 110) (parent 109) (unrealized (3 1) (3 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4752,6 +4855,7 @@ (label 111) (parent 110) (unrealized (3 2))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton envelope@@ -4787,6 +4891,7 @@ (label 112) (parent 111) (unrealized (4 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -4823,6 +4928,7 @@ (parent 111) (unrealized (4 0) (4 1)) (dead)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "empty cohort")) (defskeleton envelope@@ -4856,6 +4962,7 @@ (parent 111) (unrealized (4 0)) (dead)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "empty cohort")) (defskeleton envelope@@ -4895,6 +5002,7 @@ (label 115) (parent 112) (unrealized (5 0) (5 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -4933,6 +5041,7 @@ (parent 112) (unrealized (4 1) (5 0)) (dead)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "empty cohort")) (defskeleton envelope@@ -4972,6 +5081,7 @@ (label 117) (parent 115) (unrealized (5 1))+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -5057,6 +5167,7 @@ (parent 117) (unrealized (6 0)) (dead)+ (maps ((0 1) ((v v) (n n) (esk esk) (k k) (aik aik)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -5109,9 +5220,9 @@ (defrule ordered-extends (forall ((y z strd) (pcrkey skey)) (implies- (and (p "tpm-extend" y (idx 3)) (p "tpm-extend" z (idx 3))- (p "tpm-extend" "pcrkey" y pcrkey)- (p "tpm-extend" "pcrkey" z pcrkey))+ (and (p "tpm-extend" z (idx 3)) (p "tpm-extend" y (idx 3))+ (p "tpm-extend" "pcrkey" z pcrkey)+ (p "tpm-extend" "pcrkey" y pcrkey)) (or (= y z) (prec y (idx 2) z (idx 3))@@ -5119,12 +5230,12 @@ (defrule esk-same-as-pcrkey (forall ((y z strd) (esk pcrkey pcrkey-0 skey)) (implies- (and (p "tpm-extend-enc" y (idx 3))- (p "tpm-extend-enc" z (idx 3))- (p "tpm-extend-enc" "esk" y esk)- (p "tpm-extend-enc" "esk" z esk)+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" "pcrkey" z pcrkey-0) (p "tpm-extend-enc" "pcrkey" y pcrkey)- (p "tpm-extend-enc" "pcrkey" z pcrkey-0))+ (p "tpm-extend-enc" "esk" z esk)+ (p "tpm-extend-enc" "esk" y esk)) (= pcrkey pcrkey-0)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -5149,6 +5260,7 @@ (label 120) (unrealized (0 0) (1 2)) (preskeleton)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -5169,6 +5281,7 @@ (label 121) (parent 120) (unrealized (0 0) (1 2))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -5196,6 +5309,7 @@ (label 122) (parent 121) (unrealized (0 0) (2 0))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -5222,6 +5336,7 @@ (label 123) (parent 122) (unrealized (0 0))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -5254,6 +5369,7 @@ (label 124) (parent 123) (unrealized (3 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton envelope@@ -5292,6 +5408,7 @@ (label 125) (parent 124) (unrealized (4 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -5331,6 +5448,7 @@ (parent 124) (unrealized (4 0) (4 1)) (dead)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -5367,6 +5485,7 @@ (parent 124) (unrealized (3 1) (4 0)) (dead)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -5409,6 +5528,7 @@ (label 128) (parent 125) (unrealized (5 0) (5 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -5450,6 +5570,7 @@ (parent 125) (unrealized (4 1) (5 0)) (dead)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -5492,6 +5613,7 @@ (label 130) (parent 128) (unrealized (5 1))+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -5583,6 +5705,7 @@ (parent 130) (unrealized (6 0)) (dead)+ (maps ((0 1) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -5635,9 +5758,9 @@ (defrule ordered-extends (forall ((y z strd) (pcrkey skey)) (implies- (and (p "tpm-extend" y (idx 3)) (p "tpm-extend" z (idx 3))- (p "tpm-extend" "pcrkey" y pcrkey)- (p "tpm-extend" "pcrkey" z pcrkey))+ (and (p "tpm-extend" z (idx 3)) (p "tpm-extend" y (idx 3))+ (p "tpm-extend" "pcrkey" z pcrkey)+ (p "tpm-extend" "pcrkey" y pcrkey)) (or (= y z) (prec y (idx 2) z (idx 3))@@ -5645,12 +5768,12 @@ (defrule esk-same-as-pcrkey (forall ((y z strd) (esk pcrkey pcrkey-0 skey)) (implies- (and (p "tpm-extend-enc" y (idx 3))- (p "tpm-extend-enc" z (idx 3))- (p "tpm-extend-enc" "esk" y esk)- (p "tpm-extend-enc" "esk" z esk)+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" "pcrkey" z pcrkey-0) (p "tpm-extend-enc" "pcrkey" y pcrkey)- (p "tpm-extend-enc" "pcrkey" z pcrkey-0))+ (p "tpm-extend-enc" "esk" z esk)+ (p "tpm-extend-enc" "esk" y esk)) (= pcrkey pcrkey-0)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -5677,6 +5800,7 @@ (label 133) (unrealized (0 0) (1 0) (2 2)) (preskeleton)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (2 3)) (n (2 0))) (comment "Not a skeleton")) @@ -5699,6 +5823,7 @@ (label 134) (parent 133) (unrealized (0 0) (2 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (origs (v (2 3)) (n (2 0))) (comment "1 in cohort - 1 not yet seen")) @@ -5728,6 +5853,7 @@ (label 135) (parent 134) (unrealized (0 0) (1 0) (3 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -5756,6 +5882,7 @@ (label 136) (parent 135) (unrealized (0 0) (1 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -5789,6 +5916,7 @@ (label 137) (parent 136) (unrealized (0 0) (4 1) (4 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -5823,6 +5951,7 @@ (label 138) (parent 137) (unrealized (0 0) (4 2))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton envelope@@ -5862,6 +5991,7 @@ (label 139) (parent 138) (unrealized (0 0) (5 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -5902,6 +6032,7 @@ (parent 138) (unrealized (0 0) (5 0) (5 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -5939,6 +6070,7 @@ (parent 138) (unrealized (0 0) (5 0)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -5982,6 +6114,7 @@ (label 142) (parent 139) (unrealized (0 0) (6 0) (6 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -6024,6 +6157,7 @@ (parent 139) (unrealized (0 0) (5 1) (6 0)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -6067,6 +6201,7 @@ (label 144) (parent 142) (unrealized (0 0) (6 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -6113,6 +6248,7 @@ (label 145) (parent 144) (unrealized (0 0))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -6160,6 +6296,7 @@ (parent 144) (unrealized (0 0) (7 0)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -6212,6 +6349,7 @@ (label 147) (parent 145) (unrealized (8 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton envelope@@ -6269,6 +6407,7 @@ (label 148) (parent 147) (unrealized (9 1))+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -6327,6 +6466,7 @@ (parent 147) (unrealized (9 0) (9 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -6382,6 +6522,7 @@ (parent 147) (unrealized (8 1) (9 0)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -6445,6 +6586,7 @@ (parent 148) (unrealized (10 0) (10 1)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (defskeleton envelope@@ -6505,6 +6647,7 @@ (parent 148) (unrealized (9 1) (10 0)) (dead)+ (maps ((0 1 2) ((n n) (v v) (k k) (aik aik) (esk esk)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/epmo-hash.tst view
@@ -1,7 +1,7 @@ (herald "Electronic Purchase with Money Order Protocol with Key Hashing" (comment "Annotated with trust management formulas")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/epmo-hash.scm") (defprotocol epmo basic@@ -86,6 +86,10 @@ (send (cat (enc (hash c nc nb nm price) (privk b)) nb)))) (label 0) (unrealized (0 1) (0 3))+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (origs (nc (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -114,6 +118,10 @@ (label 1) (parent 0) (unrealized (0 1) (0 3))+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -141,6 +149,10 @@ (label 2) (parent 1) (unrealized (0 3))+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -173,6 +185,10 @@ (label 3) (parent 2) (unrealized (2 0))+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo@@ -247,6 +263,10 @@ (label 5) (parent 3) (unrealized (2 0))+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -289,6 +309,10 @@ (seen-ops (4 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")@@ -372,6 +396,7 @@ (enc nc nb (pubk c)))) (recv (enc (hash b nb nm) (privk m))))) (label 7) (unrealized (0 2))+ (maps ((0) ((b b) (c c) (m m) (nc nc) (nm nm) (nb nb) (price price)))) (origs (nb (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -400,6 +425,7 @@ (label 8) (parent 7) (unrealized (1 2))+ (maps ((0) ((b b) (c c) (m m) (nc nc) (nm nm) (nb nb) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -426,6 +452,7 @@ (label 9) (parent 8) (unrealized (0 0) (1 2))+ (maps ((0) ((b b) (c c) (m m) (nc nc) (nm nm) (nb nb) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -463,6 +490,7 @@ (label 10) (parent 9) (unrealized (0 0) (2 3))+ (maps ((0) ((b b) (c c) (m m) (nc nc) (nm nm) (nb nb) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo@@ -499,6 +527,7 @@ (label 11) (parent 10) (unrealized (0 0) (2 1))+ (maps ((0) ((b b) (c c) (m m) (nc nc) (nm nm) (nb nb) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -540,6 +569,7 @@ (parent 10) (unrealized (0 0) (3 0)) (dead)+ (maps ((0) ((b b) (c c) (m m) (nc nc) (nm nm) (nb nb) (price price)))) (comment "empty cohort")) (defskeleton epmo@@ -576,6 +606,7 @@ (label 13) (parent 11) (unrealized (0 0))+ (maps ((0) ((b b) (c c) (m m) (nc nc) (nm nm) (nb nb) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -697,6 +728,10 @@ (send (enc (hash b nb nm) (privk m))))) (label 15) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (origs (nm (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -723,6 +758,10 @@ (label 16) (parent 15) (unrealized (0 2) (1 0))+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -753,6 +792,10 @@ (label 17) (parent 16) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo
tst/epmo-key-hash.tst view
@@ -1,7 +1,7 @@ (herald "Electronic Purchase with Money Order Protocol with Key Hashing" (comment "Annotated with trust management formulas")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/epmo-key-hash.scm") (defprotocol epmo basic@@ -90,6 +90,10 @@ (cat (enc (enc "hash" (cat c nc nb nm price)) (privk b)) nb)))) (label 0) (unrealized (0 1) (0 3))+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (origs (nc (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -119,6 +123,10 @@ (label 1) (parent 0) (unrealized (0 1) (0 3))+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -147,6 +155,10 @@ (label 2) (parent 1) (unrealized (0 3))+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -180,6 +192,10 @@ (label 3) (parent 2) (unrealized (2 0))+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo@@ -256,6 +272,10 @@ (label 5) (parent 3) (unrealized (2 0))+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -299,6 +319,10 @@ (seen-ops (4 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")@@ -386,6 +410,7 @@ (recv (enc (enc "hash" (cat b nb nm)) (privk m))))) (label 7) (unrealized (0 2))+ (maps ((0) ((b b) (c c) (m m) (nc nc) (nm nm) (nb nb) (price price)))) (origs (nb (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -416,6 +441,7 @@ (label 8) (parent 7) (unrealized (1 2))+ (maps ((0) ((b b) (c c) (m m) (nc nc) (nm nm) (nb nb) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -444,6 +470,7 @@ (label 9) (parent 8) (unrealized (0 0) (1 2))+ (maps ((0) ((b b) (c c) (m m) (nc nc) (nm nm) (nb nb) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -485,6 +512,7 @@ (label 10) (parent 9) (unrealized (0 0) (2 3))+ (maps ((0) ((b b) (c c) (m m) (nc nc) (nm nm) (nb nb) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo@@ -525,6 +553,7 @@ (label 11) (parent 10) (unrealized (0 0) (2 1))+ (maps ((0) ((b b) (c c) (m m) (nc nc) (nm nm) (nb nb) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -570,6 +599,7 @@ (parent 10) (unrealized (0 0) (3 0)) (dead)+ (maps ((0) ((b b) (c c) (m m) (nc nc) (nm nm) (nb nb) (price price)))) (comment "empty cohort")) (defskeleton epmo@@ -610,6 +640,7 @@ (label 13) (parent 11) (unrealized (0 0))+ (maps ((0) ((b b) (c c) (m m) (nc nc) (nm nm) (nb nb) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -739,6 +770,10 @@ (send (enc (enc "hash" (cat b nb nm)) (privk m))))) (label 15) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (origs (nm (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -766,6 +801,10 @@ (label 16) (parent 15) (unrealized (0 2) (1 0))+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -797,6 +836,10 @@ (label 17) (parent 16) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (c c) (m m) (nb nb) (nc nc) (nm nm) (goods goods)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo
tst/epmo.tst view
@@ -1,7 +1,7 @@ (herald "Electronic Purchase with Money Order Protocol" (comment "Annotated with trust management formulas")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/epmo.scm") (defprotocol epmo basic@@ -90,6 +90,10 @@ (send (cat (enc (enc c nc nb nm price hash) (privk b)) nb)))) (label 0) (unrealized (0 1) (0 3))+ (maps+ ((0)+ ((b b) (c c) (m m) (hash hash) (nb nb) (nc nc) (nm nm)+ (goods goods) (price price)))) (origs (nc (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -119,6 +123,10 @@ (label 1) (parent 0) (unrealized (0 1) (0 3))+ (maps+ ((0)+ ((b b) (c c) (m m) (hash hash) (nb nb) (nc nc) (nm nm)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -146,6 +154,10 @@ (label 2) (parent 1) (unrealized (0 3))+ (maps+ ((0)+ ((b b) (c c) (m m) (hash hash) (nb nb) (nc nc) (nm nm)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -179,6 +191,10 @@ (label 3) (parent 2) (unrealized (2 0))+ (maps+ ((0)+ ((b b) (c c) (m m) (hash hash) (nb nb) (nc nc) (nm nm)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo@@ -256,6 +272,10 @@ (label 5) (parent 3) (unrealized (2 0))+ (maps+ ((0)+ ((b b) (c c) (m m) (hash hash) (nb nb) (nc nc) (nm nm)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -300,6 +320,10 @@ (seen-ops (4 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps+ ((0)+ ((b b) (c c) (m m) (hash hash) (nb nb) (nc nc) (nm nm)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")@@ -388,6 +412,10 @@ (recv (enc (enc b nb nm hash) (privk m))))) (label 7) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (c c) (m m) (hash hash) (nc nc) (nm nm) (nb nb)+ (price price)))) (origs (nb (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -417,6 +445,10 @@ (label 8) (parent 7) (unrealized (1 2))+ (maps+ ((0)+ ((b b) (c c) (m m) (hash hash) (nc nc) (nm nm) (nb nb)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -444,6 +476,10 @@ (label 9) (parent 8) (unrealized (0 0) (1 2))+ (maps+ ((0)+ ((b b) (c c) (m m) (hash hash) (nc nc) (nm nm) (nb nb)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -482,6 +518,10 @@ (label 10) (parent 9) (unrealized (0 0) (2 1))+ (maps+ ((0)+ ((b b) (c c) (m m) (hash hash) (nc nc) (nm nm) (nb nb)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -519,6 +559,10 @@ (label 11) (parent 10) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (c c) (m m) (hash hash) (nc nc) (nm nm) (nb nb)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -648,6 +692,10 @@ (send (enc (enc b nb nm hash) (privk m))))) (label 13) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (c c) (m m) (hash hash) (nb nb) (nc nc) (nm nm)+ (goods goods) (price price)))) (origs (nm (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -675,6 +723,10 @@ (label 14) (parent 13) (unrealized (0 2) (1 0))+ (maps+ ((0)+ ((b b) (c c) (m m) (hash hash) (nb nb) (nc nc) (nm nm)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo@@ -706,6 +758,10 @@ (label 15) (parent 14) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (c c) (m m) (hash hash) (nb nb) (nc nc) (nm nm)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo
tst/epmo_acctnum-key-hash.tst view
@@ -2,7 +2,7 @@ "Electronic Purchase with Money Order Protocol Variant with Key Hashing" (comment "This version includes account numbers in exchanges")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/epmo_acctnum-key-hash.scm") (defprotocol epmo_acctnum basic@@ -96,6 +96,10 @@ (send (enc (enc "hash" (cat b m nb nm)) (privk m))))) (label 0) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (goods goods)+ (price price)))) (origs (nm (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -124,6 +128,10 @@ (label 1) (parent 0) (unrealized (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (goods goods)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -157,6 +165,10 @@ (label 2) (parent 1) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (goods goods)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -190,6 +202,10 @@ (label 3) (parent 2) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (goods goods)+ (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -222,6 +238,10 @@ (label 4) (parent 3) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (goods goods)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -260,6 +280,10 @@ (label 5) (parent 3) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (goods goods)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -340,6 +364,10 @@ (label 7) (parent 5) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (goods goods)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -386,6 +414,10 @@ (seen-ops (6 (operation generalization deleted (2 0)) (strand-map 0 1 3))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm-0) (nc nc) (nb nb) (goods goods)+ (price price-0)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")@@ -481,6 +513,10 @@ (recv (enc (enc "hash" (cat b m nb nm)) (privk m))))) (label 9) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (acctnum acctnum)+ (price price)))) (origs (nb (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -511,6 +547,10 @@ (label 10) (parent 9) (unrealized (1 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (acctnum acctnum)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -539,6 +579,10 @@ (label 11) (parent 10) (unrealized (0 0) (1 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (acctnum acctnum)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -581,6 +625,10 @@ (label 12) (parent 11) (unrealized (0 0) (2 3))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (acctnum acctnum)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -621,6 +669,10 @@ (label 13) (parent 12) (unrealized (0 0) (2 1))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (acctnum acctnum)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -661,6 +713,10 @@ (label 14) (parent 13) (unrealized (0 0) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (acctnum acctnum)+ (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -700,6 +756,10 @@ (label 15) (parent 14) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (acctnum acctnum)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -745,6 +805,10 @@ (label 16) (parent 14) (unrealized (0 0) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (acctnum acctnum)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -784,6 +848,10 @@ (label 17) (parent 15) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (acctnum acctnum)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -828,6 +896,10 @@ (label 18) (parent 16) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (acctnum acctnum)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -916,6 +988,10 @@ (label 20) (parent 18) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (acctnum acctnum)+ (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -962,6 +1038,10 @@ (seen-ops (19 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (acctnum acctnum)+ (price price)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
tst/epmo_acctnum.tst view
@@ -2,7 +2,7 @@ (bound 12) (limit 5000) (comment "This version includes account numbers in exchanges")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/epmo_acctnum.lsp") (comment "Step count limited to 5000") @@ -102,6 +102,10 @@ (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))) (label 0) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (origs (nm (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -131,6 +135,10 @@ (label 1) (parent 0) (unrealized (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -165,6 +173,10 @@ (label 2) (parent 1) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -199,6 +211,10 @@ (label 3) (parent 2) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -243,6 +259,10 @@ (label 4) (parent 2) (unrealized (0 0) (0 2) (1 0) (3 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -276,6 +296,10 @@ (label 5) (parent 3) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -315,6 +339,10 @@ (label 6) (parent 3) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -358,6 +386,10 @@ (label 7) (parent 4) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -442,6 +474,10 @@ (label 9) (parent 6) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -485,6 +521,10 @@ (label 10) (parent 7) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -530,6 +570,10 @@ (label 11) (parent 7) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -587,6 +631,10 @@ (operation nonce-test (displaced 5 2 customer 3) nm (4 0) (enc nc nm m price (pubk c))) (strand-map 0 1 2 3 3))) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -635,6 +683,10 @@ (seen-ops (8 (operation generalization deleted (2 0)) (strand-map 0 1 3))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -677,6 +729,10 @@ (label 14) (parent 10) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -723,6 +779,10 @@ (label 15) (parent 10) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -767,6 +827,10 @@ (label 16) (parent 11) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -819,6 +883,10 @@ (label 17) (parent 11) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -872,6 +940,10 @@ (label 18) (parent 11) (unrealized (0 0) (0 2) (1 0) (3 3))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -923,6 +995,10 @@ (seen-ops (8 (operation generalization deleted (2 0)) (strand-map 0 1 3))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -969,6 +1045,10 @@ (label 20) (parent 15) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -1010,6 +1090,10 @@ (label 21) (parent 16) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -1056,6 +1140,10 @@ (label 22) (parent 16) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -1115,6 +1203,10 @@ (enc c nc nb-1 acctnum-0 price (pubk b-0))) (strand-map 0 1 2 3 3))) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -1167,6 +1259,10 @@ (label 24) (parent 18) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -1227,6 +1323,10 @@ (label 25) (parent 18) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -1282,6 +1382,10 @@ (seen-ops (13 (operation generalization deleted (2 0)) (strand-map 0 1 3 4))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -1332,6 +1436,10 @@ (seen-ops (8 (operation generalization deleted (2 0)) (strand-map 0 1 3))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -1378,6 +1486,10 @@ (label 28) (parent 22) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -1430,6 +1542,10 @@ (label 29) (parent 24) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -1491,6 +1607,10 @@ (label 30) (parent 24) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -1550,6 +1670,10 @@ (label 31) (parent 24) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -1609,6 +1733,10 @@ (label 32) (parent 25) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -1664,6 +1792,10 @@ (seen-ops (13 (operation generalization deleted (2 0)) (strand-map 0 1 3 4))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -1714,6 +1846,10 @@ (parent 29) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -1768,6 +1904,10 @@ (label 35) (parent 29) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -1826,6 +1966,10 @@ (label 36) (parent 30) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -1888,6 +2032,10 @@ (operation nonce-test (displaced 5 4 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -1960,6 +2108,10 @@ (operation nonce-test (displaced 6 3 customer 3) nb-0 (5 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5))) (unrealized (0 0) (0 2) (1 0) (5 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -2019,6 +2171,10 @@ (label 39) (parent 32) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -2087,6 +2243,10 @@ (enc c nc nb-0 acctnum-0 price (pubk b-0))) (strand-map 0 1 2 3 2))) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -2155,6 +2315,10 @@ (label 41) (parent 32) (unrealized (0 0) (0 2) (1 0) (4 0) (5 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -2210,6 +2374,10 @@ (parent 35) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -2272,6 +2440,10 @@ (label 43) (parent 36) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -2348,6 +2520,10 @@ (operation nonce-test (displaced 6 3 customer 3) nb-0 (5 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 4))) (unrealized (0 0) (0 2) (1 0) (5 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -2416,6 +2592,10 @@ (label 45) (parent 36) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -2471,6 +2651,10 @@ (parent 37) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -2531,6 +2715,10 @@ (label 47) (parent 37) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -2590,6 +2778,10 @@ (label 48) (parent 39) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -2659,6 +2851,10 @@ (label 49) (parent 39) (unrealized (0 0) (0 2) (1 0) (5 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -2726,6 +2922,10 @@ (label 50) (parent 39) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -2793,6 +2993,10 @@ (label 51) (parent 41) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "4 in cohort - 4 not yet seen")) (defskeleton epmo_acctnum@@ -2852,6 +3056,10 @@ (parent 43) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -2915,6 +3123,10 @@ (label 53) (parent 43) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -2987,6 +3199,10 @@ (operation nonce-test (displaced 6 5 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -3068,6 +3284,10 @@ (operation nonce-test (displaced 7 3 customer 3) nb-0 (6 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 4))) (unrealized (0 0) (0 2) (1 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -3128,6 +3348,10 @@ (parent 47) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -3191,6 +3415,10 @@ (label 57) (parent 47) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -3248,6 +3476,10 @@ (parent 48) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -3310,6 +3542,10 @@ (label 59) (parent 48) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -3376,6 +3612,10 @@ (label 60) (parent 49) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -3446,6 +3686,10 @@ (operation nonce-test (displaced 6 5 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -3525,6 +3769,10 @@ (operation nonce-test (displaced 7 3 customer 3) nb-0 (6 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6))) (unrealized (0 0) (0 2) (1 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -3594,6 +3842,10 @@ (label 63) (parent 51) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -3662,6 +3914,10 @@ (label 64) (parent 51) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -3731,6 +3987,10 @@ (label 65) (parent 51) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -3812,6 +4072,10 @@ (operation nonce-test (displaced 7 3 customer 3) nb-0 (6 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 5))) (unrealized (0 0) (0 2) (1 0) (4 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -3876,6 +4140,10 @@ (parent 53) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -3940,6 +4208,10 @@ (parent 54) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -4008,6 +4280,10 @@ (label 69) (parent 54) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -4073,6 +4349,10 @@ (parent 57) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -4136,6 +4416,10 @@ (parent 59) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -4206,6 +4490,10 @@ (label 72) (parent 60) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -4289,6 +4577,10 @@ (operation nonce-test (displaced 7 3 customer 3) nb-0 (6 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 5))) (unrealized (0 0) (0 2) (1 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -4364,6 +4656,10 @@ (label 74) (parent 60) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -4427,6 +4723,10 @@ (parent 61) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -4494,6 +4794,10 @@ (label 76) (parent 61) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -4562,6 +4866,10 @@ (label 77) (parent 63) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -4631,6 +4939,10 @@ (label 78) (parent 63) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -4707,6 +5019,10 @@ (label 79) (parent 63) (unrealized (0 0) (0 2) (1 0) (4 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -4777,6 +5093,10 @@ (label 80) (parent 64) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -4855,6 +5175,10 @@ (label 81) (parent 64) (unrealized (0 0) (0 2) (1 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -4930,6 +5254,10 @@ (label 82) (parent 64) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -4999,6 +5327,10 @@ (label 83) (parent 65) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -5081,6 +5413,10 @@ (operation nonce-test (displaced 7 3 customer 3) nb-0 (6 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 5))) (unrealized (0 0) (0 2) (1 0) (4 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -5150,6 +5486,10 @@ (parent 69) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -5221,6 +5561,10 @@ (label 86) (parent 69) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -5288,6 +5632,10 @@ (parent 72) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -5358,6 +5706,10 @@ (label 88) (parent 72) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -5437,6 +5789,10 @@ (operation nonce-test (displaced 7 6 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -5526,6 +5882,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 5))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -5593,6 +5953,10 @@ (parent 76) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -5663,6 +6027,10 @@ (label 92) (parent 76) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -5732,6 +6100,10 @@ (label 93) (parent 77) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -5809,6 +6181,10 @@ (label 94) (parent 77) (unrealized (0 0) (0 2) (1 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -5884,6 +6260,10 @@ (label 95) (parent 77) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -5953,6 +6333,10 @@ (label 96) (parent 78) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -6030,6 +6414,10 @@ (label 97) (parent 78) (unrealized (0 0) (0 2) (1 0) (4 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -6113,6 +6501,10 @@ (enc c nc nb-1 acctnum-0 price (pubk b-0))) (strand-map 0 1 2 3 4 5 5))) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -6180,6 +6572,10 @@ (parent 80) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -6250,6 +6646,10 @@ (label 100) (parent 80) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -6324,6 +6724,10 @@ (label 101) (parent 81) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -6403,6 +6807,10 @@ (operation nonce-test (displaced 7 6 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -6492,6 +6900,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 7))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -6562,6 +6974,10 @@ (label 104) (parent 83) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -6640,6 +7056,10 @@ (label 105) (parent 83) (unrealized (0 0) (0 2) (1 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -6715,6 +7135,10 @@ (label 106) (parent 83) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -6788,6 +7212,10 @@ (parent 86) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -6859,6 +7287,10 @@ (parent 88) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -6930,6 +7362,10 @@ (parent 89) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -7006,6 +7442,10 @@ (label 110) (parent 89) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -7078,6 +7518,10 @@ (parent 92) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -7145,6 +7589,10 @@ (parent 93) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -7215,6 +7663,10 @@ (label 113) (parent 93) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -7288,6 +7740,10 @@ (label 114) (parent 94) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -7367,6 +7823,10 @@ (operation nonce-test (displaced 7 6 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -7455,6 +7915,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 7))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -7524,6 +7988,10 @@ (label 117) (parent 96) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -7601,6 +8069,10 @@ (label 118) (parent 96) (unrealized (0 0) (0 2) (1 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -7676,6 +8148,10 @@ (label 119) (parent 96) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -7760,6 +8236,10 @@ (enc c nc nb-1 acctnum-0 price (pubk b-0))) (strand-map 0 1 2 3 4 5 5))) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -7831,6 +8311,10 @@ (parent 100) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -7909,6 +8393,10 @@ (label 122) (parent 101) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -8001,6 +8489,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 6))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -8085,6 +8577,10 @@ (label 124) (parent 101) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -8156,6 +8652,10 @@ (parent 102) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -8231,6 +8731,10 @@ (label 126) (parent 102) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -8298,6 +8802,10 @@ (parent 104) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -8368,6 +8876,10 @@ (label 128) (parent 104) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -8442,6 +8954,10 @@ (label 129) (parent 105) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -8521,6 +9037,10 @@ (operation nonce-test (displaced 7 6 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -8610,6 +9130,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 7))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -8687,6 +9211,10 @@ (parent 110) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -8766,6 +9294,10 @@ (label 133) (parent 110) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -8837,6 +9369,10 @@ (parent 113) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -8915,6 +9451,10 @@ (label 135) (parent 114) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -9007,6 +9547,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 6))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -9091,6 +9635,10 @@ (label 137) (parent 114) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -9162,6 +9710,10 @@ (parent 115) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -9237,6 +9789,10 @@ (label 139) (parent 115) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -9304,6 +9860,10 @@ (parent 117) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -9374,6 +9934,10 @@ (label 141) (parent 117) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -9447,6 +10011,10 @@ (label 142) (parent 118) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -9526,6 +10094,10 @@ (operation nonce-test (displaced 7 6 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -9614,6 +10186,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 7))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -9688,6 +10264,10 @@ (parent 122) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -9766,6 +10346,10 @@ (label 146) (parent 122) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -9855,6 +10439,10 @@ (operation nonce-test (displaced 8 7 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6 7))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -9953,6 +10541,10 @@ (operation nonce-test (displaced 9 3 customer 3) nb-0 (8 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 7 6))) (unrealized (0 0) (0 2) (1 0) (8 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -10029,6 +10621,10 @@ (parent 126) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -10107,6 +10703,10 @@ (label 150) (parent 126) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -10178,6 +10778,10 @@ (parent 128) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -10256,6 +10860,10 @@ (label 152) (parent 129) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -10348,6 +10956,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 6))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -10432,6 +11044,10 @@ (label 154) (parent 129) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -10503,6 +11119,10 @@ (parent 130) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -10578,6 +11198,10 @@ (label 156) (parent 130) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -10659,6 +11283,10 @@ (parent 133) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -10733,6 +11361,10 @@ (parent 135) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -10810,6 +11442,10 @@ (label 159) (parent 135) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -10898,6 +11534,10 @@ (operation nonce-test (displaced 8 7 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6 7))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -10995,6 +11635,10 @@ (operation nonce-test (displaced 9 3 customer 3) nb-0 (8 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 7 6))) (unrealized (0 0) (0 2) (1 0) (8 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -11070,6 +11714,10 @@ (parent 139) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -11148,6 +11796,10 @@ (label 163) (parent 139) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -11219,6 +11871,10 @@ (parent 141) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -11297,6 +11953,10 @@ (label 165) (parent 142) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -11389,6 +12049,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 6))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -11473,6 +12137,10 @@ (label 167) (parent 142) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -11544,6 +12212,10 @@ (parent 143) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -11619,6 +12291,10 @@ (label 169) (parent 143) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -11697,6 +12373,10 @@ (parent 146) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -11776,6 +12456,10 @@ (parent 147) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -11859,6 +12543,10 @@ (label 172) (parent 147) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -11939,6 +12627,10 @@ (parent 150) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -12013,6 +12705,10 @@ (parent 152) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -12091,6 +12787,10 @@ (label 175) (parent 152) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -12180,6 +12880,10 @@ (operation nonce-test (displaced 8 7 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6 7))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -12278,6 +12982,10 @@ (operation nonce-test (displaced 9 3 customer 3) nb-0 (8 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 7 6))) (unrealized (0 0) (0 2) (1 0) (8 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -12354,6 +13062,10 @@ (parent 156) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -12432,6 +13144,10 @@ (label 179) (parent 156) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -12510,6 +13226,10 @@ (parent 159) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -12589,6 +13309,10 @@ (parent 160) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -12672,6 +13396,10 @@ (label 182) (parent 160) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -12752,6 +13480,10 @@ (parent 163) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -12826,6 +13558,10 @@ (parent 165) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -12903,6 +13639,10 @@ (label 185) (parent 165) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -12991,6 +13731,10 @@ (operation nonce-test (displaced 8 7 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6 7))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -13088,6 +13832,10 @@ (operation nonce-test (displaced 9 3 customer 3) nb-0 (8 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 7 6))) (unrealized (0 0) (0 2) (1 0) (8 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -13163,6 +13911,10 @@ (parent 169) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -13241,6 +13993,10 @@ (label 189) (parent 169) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -13325,6 +14081,10 @@ (parent 172) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -13411,6 +14171,10 @@ (label 191) (parent 172) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -13489,6 +14253,10 @@ (parent 175) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -13568,6 +14336,10 @@ (parent 176) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -13651,6 +14423,10 @@ (label 194) (parent 176) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -13731,6 +14507,10 @@ (parent 179) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -13815,6 +14595,10 @@ (parent 182) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -13901,6 +14685,10 @@ (label 197) (parent 182) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -13979,6 +14767,10 @@ (parent 185) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -14058,6 +14850,10 @@ (parent 186) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -14141,6 +14937,10 @@ (label 200) (parent 186) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -14221,6 +15021,10 @@ (parent 189) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -14310,6 +15114,10 @@ (parent 191) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -14394,6 +15202,10 @@ (parent 194) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -14480,6 +15292,10 @@ (label 204) (parent 194) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -14568,6 +15384,10 @@ (parent 197) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -14652,6 +15472,10 @@ (parent 200) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -14738,6 +15562,10 @@ (label 207) (parent 200) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -14827,6 +15655,10 @@ (parent 204) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton epmo_acctnum@@ -14915,6 +15747,10 @@ (parent 207) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc price-0) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -15014,6 +15850,10 @@ (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))) (label 210) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (origs (nb (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -15046,6 +15886,10 @@ (label 211) (parent 210) (unrealized (1 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -15076,6 +15920,10 @@ (label 212) (parent 211) (unrealized (0 0) (1 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -15118,6 +15966,10 @@ (label 213) (parent 212) (unrealized (0 0) (2 1) (2 3))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -15160,6 +16012,10 @@ (label 214) (parent 213) (unrealized (0 0) (1 0) (2 3))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -15202,6 +16058,10 @@ (label 215) (parent 214) (unrealized (0 0) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -15243,6 +16103,10 @@ (label 216) (parent 215) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -15290,6 +16154,10 @@ (label 217) (parent 215) (unrealized (0 0) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -15331,6 +16199,10 @@ (label 218) (parent 216) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -15377,6 +16249,10 @@ (label 219) (parent 217) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -15472,6 +16348,10 @@ (label 221) (parent 218) (unrealized (0 0) (3 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -15518,6 +16398,10 @@ (label 222) (parent 219) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -15567,6 +16451,10 @@ (label 223) (parent 221) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -15616,6 +16504,10 @@ (seen-ops (220 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -15670,6 +16562,10 @@ (label 225) (parent 222) (unrealized (0 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -15723,6 +16619,10 @@ (seen-ops (220 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -15773,6 +16673,10 @@ (label 227) (parent 223) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -15837,6 +16741,10 @@ (operation nonce-test (displaced 5 2 customer 3) nm (4 0) (enc nc nm m price (pubk c))) (strand-map 0 1 2 3 3))) (unrealized (0 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -15890,6 +16798,10 @@ (label 229) (parent 225) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton epmo_acctnum@@ -15943,6 +16855,10 @@ (seen-ops (220 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -16003,6 +16919,10 @@ (label 231) (parent 227) (unrealized (0 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -16060,6 +16980,10 @@ (seen-ops (226 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -16115,6 +17039,10 @@ (label 233) (parent 229) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton epmo_acctnum@@ -16184,6 +17112,10 @@ (operation nonce-test (displaced 6 2 customer 3) nm (5 0) (enc nc nm m price (pubk c))) (strand-map 0 1 2 3 4 4))) (unrealized (0 0) (5 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -16251,6 +17183,10 @@ (enc c nc nb-1 acctnum-0 price (pubk b))) (strand-map 0 1 2 3 3))) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -16309,6 +17245,10 @@ (seen-ops (230 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton epmo_acctnum@@ -16373,6 +17313,10 @@ (label 237) (parent 233) (unrealized (0 0) (5 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton epmo_acctnum@@ -16444,6 +17388,10 @@ (enc c nc nb-1 acctnum-0 price (pubk b))) (strand-map 0 1 2 3 4 4))) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
tst/expand.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "Expanded macros") (herald expand (expand) (comment "test macro expansion"))
tst/facts.tst view
@@ -1,6 +1,6 @@ (herald facts) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/facts.scm") (defprotocol unilateral basic@@ -27,6 +27,7 @@ (traces ((send (enc n k)) (recv n))) (label 0) (unrealized (0 1))+ (maps ((0) ((k k) (n n)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -73,6 +74,7 @@ (traces ((recv (enc n k)) (send n))) (label 2) (unrealized (0 0))+ (maps ((0) ((n n) (k k)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -116,7 +118,7 @@ (defstrand init 2 (n n) (k k)) (non-orig (invk k)) (uniq-orig n)- (facts (foo 0 k) (bar 0 (invk k)))+ (facts (bar 0 (invk k)) (foo 0 k)) (goals (forall ((n text) (k akey) (z strd)) (implies@@ -129,6 +131,7 @@ (traces ((send (enc n k)) (recv n))) (label 4) (unrealized (0 1))+ (maps ((0) ((n n) (k k)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -139,7 +142,16 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk k)) (uniq-orig n)- (facts (foo 0 k) (bar 0 (invk k)))+ (facts (bar 0 (invk k)) (foo 0 k))+ (goals+ (forall ((n text) (k akey) (z strd))+ (implies+ (and (p "init" z 2) (p "init" "n" z n) (p "init" "k" z k)+ (non (invk k)) (uniq-at n z 0) (fact foo z k)+ (fact bar z (invk k)))+ (exists ((z-0 strd))+ (and (p "resp" z-0 2) (p "resp" "n" z-0 n)+ (p "resp" "k" z-0 k) (prec z 0 z-0 0) (prec z-0 1 z 1)))))) (operation nonce-test (added-strand resp 2) n (0 1) (enc n k)) (strand-map 0) (traces ((send (enc n k)) (recv n)) ((recv (enc n k)) (send n)))@@ -185,6 +197,7 @@ (traces ((recv (enc n k)) (send n))) (label 6) (unrealized (0 0))+ (maps ((0) ((n n) (k k)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -196,6 +209,15 @@ (non-orig (invk k)) (pen-non-orig n) (uniq-orig n)+ (goals+ (forall ((n text) (k akey) (z strd))+ (implies+ (and (p "resp" z 2) (p "resp" "n" z n) (p "resp" "k" z k)+ (non (invk k)) (pnon n))+ (exists ((k-0 akey) (z-0 strd))+ (and (p "init" z-0 1) (p "init" "n" z-0 n)+ (p "init" "k" z-0 k-0) (prec z-0 0 z 0)+ (uniq-at n z-0 0)))))) (operation nonce-test (added-strand init 1) n (0 0)) (strand-map 0) (traces ((recv (enc n k)) (send n)) ((send (enc n k-0))))@@ -238,6 +260,7 @@ (recv (cat na nb b t3 (enc na nb b t2 (privk b)))))) (label 8) (unrealized (0 1))+ (maps ((0) ((b b) (na na) (nb nb) (t1 t1) (t2 t2) (t3 t3)))) (origs (nb (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -298,6 +321,7 @@ (recv (cat na nb b t3 (enc na nb b t2 (privk b)))))) (label 10) (unrealized (0 1))+ (maps ((0) ((b b) (na na) (nb nb) (t1 t1) (t2 t2) (t3 t3)))) (origs (nb (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -308,6 +332,10 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig na nb)+ (goals+ (forall ((b name) (z strd))+ (implies (and (p "init" z 2) (p "init" "b" z b) (non (privk b)))+ (exists ((y strd)) (and (p "resp" y 2) (p "resp" "b" y b)))))) (operation encryption-test (added-strand resp 2) (enc na nb b t2 (privk b)) (0 1)) (strand-map 0)@@ -359,6 +387,7 @@ (recv (cat na nb b t3 (enc na nb b t2 (privk b)))))) (label 12) (unrealized (0 1))+ (maps ((0) ((b b) (na na) (nb nb) (t1 t1) (t2 t2) (t3 t3)))) (origs (nb (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -369,6 +398,10 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig na nb)+ (goals+ (forall ((b name) (z strd))+ (implies (and (p "init" z 2) (p "init" "b" z b) (non (privk b)))+ (false)))) (operation encryption-test (added-strand resp 2) (enc na nb b t2 (privk b)) (0 1)) (strand-map 0)
tst/factvar.tst view
@@ -1,6 +1,6 @@ (herald factvar) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/factvar.scm") (defprotocol free-fact-var basic@@ -26,6 +26,7 @@ (traces ((recv (enc n k)))) (label 0) (realized)+ (maps ((0) ((k k) (n n)))) (origs) (comment "Not closed under rules")) @@ -69,6 +70,7 @@ (traces ((recv (enc n k)))) (label 2) (unrealized (0 0))+ (maps ((0) ((n n) (k k)))) (origs) (comment "Not closed under rules")) @@ -84,6 +86,7 @@ (parent 2) (unrealized (0 0)) (dead)+ (maps ((0) ((n n) (k k)))) (origs) (comment "empty cohort"))
tst/ffgg.tst view
@@ -1,7 +1,7 @@ (herald "The ffgg Protocol" (comment "From A Necessarily Parallel Attack by Jon K. Millen")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/ffgg.scm") (defprotocol ffgg basic@@ -35,6 +35,7 @@ (label 0) (unrealized (1 0)) (preskeleton)+ (maps ((0 1) ((b b) (m m) (a a) (n1 n1) (n2 n2) (x x) (y y)))) (origs (m (0 2))) (comment "Not a skeleton")) @@ -51,6 +52,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0 1) ((b b) (m m) (a a) (n1 n1) (n2 n2) (x x) (y y)))) (origs (m (0 2))) (comment "1 in cohort - 1 not yet seen")) @@ -74,6 +76,7 @@ (label 2) (parent 1) (unrealized (1 0))+ (maps ((0 1) ((b b) (m m) (a a) (n1 n1) (n2 n2) (x x) (y y)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ffgg@@ -101,6 +104,7 @@ (label 3) (parent 2) (unrealized (3 2))+ (maps ((0 1) ((b b) (m m) (a a) (n1 n1) (n2 n2) (x x) (y y)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ffgg
tst/fluffy_draft03_gske.tst view
@@ -3,7 +3,7 @@ (comment "Based on the Internet-Draft: https://www.ietf.org/archive/id/draft-hardjono-ace-fluffy-03.txt")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/fluffy_draft03_gske.scm") (defprotocol fluffy basic@@ -40,6 +40,7 @@ (recv (cat "resp" b (enc s g nb gk (ltk s b)))))) (label 0) (unrealized (0 1))+ (maps ((0) ((b b) (s s) (nb nb) (gk gk) (g g)))) (origs (nb (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -52,6 +53,7 @@ (non-orig (ltk s b)) (uniq-orig nb) (uniq-gen gk)+ (comment "Service Principal's point-of-view") (operation encryption-test (added-strand keyserv 4) (enc s g nb gk (ltk s b)) (0 1)) (strand-map 0)@@ -78,6 +80,7 @@ (non-orig (ltk s b)) (uniq-orig nb) (uniq-gen gk)+ (comment "Service Principal's point-of-view") (operation encryption-test (added-strand keyserv 2) (enc s g nb gk (ltk s b)) (0 1)) (strand-map 0)@@ -132,6 +135,7 @@ (send (cat "deliver" a (enc s g na gk (ltk s a)))))) (label 3) (unrealized (0 0) (0 2))+ (maps ((0) ((a a) (b b) (s s) (nb nb) (na na) (gk gk) (g g)))) (origs) (ugens (gk (0 1))) (comment "2 in cohort - 2 not yet seen"))@@ -143,6 +147,7 @@ (precedes ((1 0) (0 0))) (non-orig (ltk s a) (ltk s b)) (uniq-gen gk)+ (comment "SKDC's point-of-view") (operation encryption-test (added-strand sp 1) (enc b nb (ltk s b)) (0 0)) (strand-map 0)@@ -155,6 +160,7 @@ (label 4) (parent 3) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (s s) (nb nb) (na na) (gk gk) (g g)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton fluffy@@ -164,6 +170,7 @@ (precedes ((1 0) (0 0))) (non-orig (ltk s a) (ltk s b)) (uniq-gen gk)+ (comment "SKDC's point-of-view") (operation encryption-test (added-strand client 1) (enc b nb (ltk s b)) (0 0)) (strand-map 0)@@ -176,6 +183,7 @@ (label 5) (parent 3) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (s s) (nb nb) (na na) (gk gk) (g g)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton fluffy@@ -185,6 +193,7 @@ (precedes ((1 0) (0 0))) (non-orig (ltk s b)) (uniq-gen gk)+ (comment "SKDC's point-of-view") (operation encryption-test (displaced 2 1 sp 1) (enc a na (ltk s a)) (0 2)) (strand-map 0 1)@@ -210,6 +219,7 @@ (precedes ((1 0) (0 0)) ((2 0) (0 2))) (non-orig (ltk s a) (ltk s b)) (uniq-gen gk)+ (comment "SKDC's point-of-view") (operation encryption-test (added-strand sp 1) (enc a na (ltk s a)) (0 2)) (strand-map 0 1)@@ -236,6 +246,7 @@ (precedes ((1 0) (0 0)) ((2 0) (0 2))) (non-orig (ltk s a) (ltk s b)) (uniq-gen gk)+ (comment "SKDC's point-of-view") (operation encryption-test (added-strand client 1) (enc a na (ltk s a)) (0 2)) (strand-map 0 1)@@ -262,6 +273,7 @@ (precedes ((1 0) (0 0)) ((2 0) (0 2))) (non-orig (ltk s a) (ltk s b)) (uniq-gen gk)+ (comment "SKDC's point-of-view") (operation encryption-test (added-strand sp 1) (enc a na (ltk s a)) (0 2)) (strand-map 0 1)@@ -287,6 +299,7 @@ (precedes ((1 0) (0 0))) (non-orig (ltk s b)) (uniq-gen gk)+ (comment "SKDC's point-of-view") (operation encryption-test (displaced 2 1 client 1) (enc a na (ltk s a)) (0 2)) (strand-map 0 1)@@ -312,6 +325,7 @@ (precedes ((1 0) (0 0)) ((2 0) (0 2))) (non-orig (ltk s a) (ltk s b)) (uniq-gen gk)+ (comment "SKDC's point-of-view") (operation encryption-test (added-strand client 1) (enc a na (ltk s a)) (0 2)) (strand-map 0 1)@@ -366,6 +380,7 @@ (recv (cat "deliver" a (enc s g na gk (ltk s a)))))) (label 12) (unrealized (0 1))+ (maps ((0) ((a a) (s s) (na na) (gk gk) (g g)))) (origs (na (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -377,6 +392,7 @@ (non-orig (ltk s a)) (uniq-orig na) (uniq-gen gk)+ (comment "Clients's point-of-view") (operation encryption-test (added-strand keyserv 4) (enc s g na gk (ltk s a)) (0 1)) (strand-map 0)@@ -403,6 +419,7 @@ (non-orig (ltk s a)) (uniq-orig na) (uniq-gen gk)+ (comment "Clients's point-of-view") (operation encryption-test (added-strand keyserv 2) (enc s g na gk (ltk s a)) (0 1)) (strand-map 0)@@ -440,16 +457,16 @@ (defrule client-no-request (forall ((a s name) (y z strd)) (implies- (and (p "client" z (idx 1)) (p "client" "s" z s)- (p "client" "a" z a) (p "keyserv" y (idx 1))- (p "keyserv" "s" y s) (p "keyserv" "b" y a))+ (and (p "keyserv" y (idx 1)) (p "client" z (idx 1))+ (p "keyserv" "b" y a) (p "keyserv" "s" y s)+ (p "client" "a" z a) (p "client" "s" z s)) (false)))) (defrule sp-no-fetch (forall ((b s name) (y z strd)) (implies- (and (p "sp" z (idx 1)) (p "sp" "s" z s) (p "sp" "b" z b)- (p "keyserv" y (idx 3)) (p "keyserv" "s" y s)- (p "keyserv" "a" y b))+ (and (p "keyserv" y (idx 3)) (p "sp" z (idx 1))+ (p "keyserv" "a" y b) (p "keyserv" "s" y s) (p "sp" "b" z b)+ (p "sp" "s" z s)) (false)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -469,6 +486,7 @@ (recv (cat "resp" b (enc s g nb gk (ltk s b)))))) (label 15) (unrealized (0 1))+ (maps ((0) ((b b) (s s) (nb nb) (gk gk) (g g)))) (origs (nb (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -480,6 +498,7 @@ (non-orig (ltk s b)) (uniq-orig nb) (uniq-gen gk)+ (comment "Service Principal's point-of-view") (operation encryption-test (added-strand keyserv 2) (enc s g nb gk (ltk s b)) (0 1)) (strand-map 0)@@ -517,16 +536,16 @@ (defrule client-no-request (forall ((a s name) (y z strd)) (implies- (and (p "client" z (idx 1)) (p "client" "s" z s)- (p "client" "a" z a) (p "keyserv" y (idx 1))- (p "keyserv" "s" y s) (p "keyserv" "b" y a))+ (and (p "keyserv" y (idx 1)) (p "client" z (idx 1))+ (p "keyserv" "b" y a) (p "keyserv" "s" y s)+ (p "client" "a" z a) (p "client" "s" z s)) (false)))) (defrule sp-no-fetch (forall ((b s name) (y z strd)) (implies- (and (p "sp" z (idx 1)) (p "sp" "s" z s) (p "sp" "b" z b)- (p "keyserv" y (idx 3)) (p "keyserv" "s" y s)- (p "keyserv" "a" y b))+ (and (p "keyserv" y (idx 3)) (p "sp" z (idx 1))+ (p "keyserv" "a" y b) (p "keyserv" "s" y s) (p "sp" "b" z b)+ (p "sp" "s" z s)) (false)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -548,6 +567,7 @@ (send (cat "deliver" a (enc s g na gk (ltk s a)))))) (label 17) (unrealized (0 0) (0 2))+ (maps ((0) ((a a) (b b) (s s) (nb nb) (na na) (gk gk) (g g)))) (origs) (ugens (gk (0 1))) (comment "1 in cohort - 1 not yet seen"))@@ -559,6 +579,7 @@ (precedes ((1 0) (0 0))) (non-orig (ltk s a) (ltk s b)) (uniq-gen gk)+ (comment "SKDC's point-of-view") (operation encryption-test (added-strand sp 1) (enc b nb (ltk s b)) (0 0)) (strand-map 0)@@ -571,6 +592,7 @@ (label 18) (parent 17) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (s s) (nb nb) (na na) (gk gk) (g g)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fluffy-rule@@ -581,6 +603,7 @@ (precedes ((1 0) (0 0)) ((2 0) (0 2))) (non-orig (ltk s a) (ltk s b)) (uniq-gen gk)+ (comment "SKDC's point-of-view") (operation encryption-test (added-strand client 1) (enc a na (ltk s a)) (0 2)) (strand-map 0 1)@@ -620,16 +643,16 @@ (defrule client-no-request (forall ((a s name) (y z strd)) (implies- (and (p "client" z (idx 1)) (p "client" "s" z s)- (p "client" "a" z a) (p "keyserv" y (idx 1))- (p "keyserv" "s" y s) (p "keyserv" "b" y a))+ (and (p "keyserv" y (idx 1)) (p "client" z (idx 1))+ (p "keyserv" "b" y a) (p "keyserv" "s" y s)+ (p "client" "a" z a) (p "client" "s" z s)) (false)))) (defrule sp-no-fetch (forall ((b s name) (y z strd)) (implies- (and (p "sp" z (idx 1)) (p "sp" "s" z s) (p "sp" "b" z b)- (p "keyserv" y (idx 3)) (p "keyserv" "s" y s)- (p "keyserv" "a" y b))+ (and (p "keyserv" y (idx 3)) (p "sp" z (idx 1))+ (p "keyserv" "a" y b) (p "keyserv" "s" y s) (p "sp" "b" z b)+ (p "sp" "s" z s)) (false)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -649,6 +672,7 @@ (recv (cat "deliver" a (enc s g na gk (ltk s a)))))) (label 20) (unrealized (0 1))+ (maps ((0) ((a a) (s s) (na na) (gk gk) (g g)))) (origs (na (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -660,6 +684,7 @@ (non-orig (ltk s a)) (uniq-orig na) (uniq-gen gk)+ (comment "Clients's point-of-view") (operation encryption-test (added-strand keyserv 4) (enc s g na gk (ltk s a)) (0 1)) (strand-map 0)
tst/fragile_pruning.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/fragile_pruning.scm") (defprotocol fragile_pruning basic@@ -34,6 +34,7 @@ (recv (enc n n1 n2 n3 n k)))) (label 0) (unrealized (0 1) (0 2) (0 3) (0 5))+ (maps ((0) ((k k) (n n) (n1 n1) (n2 n2) (n3 n3)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -54,6 +55,7 @@ (label 1) (parent 0) (unrealized (0 1) (0 2) (0 3) (0 5))+ (maps ((0) ((k k) (n n) (n1 n1) (n2 n2) (n3 n3)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -74,6 +76,7 @@ (label 2) (parent 1) (unrealized (0 2) (0 3) (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 n2) (n3 n3)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -94,6 +97,7 @@ (label 3) (parent 2) (unrealized (0 3) (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 n3)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -116,6 +120,7 @@ (label 4) (parent 2) (unrealized (0 2) (0 3) (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 n2) (n3 n3)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -136,6 +141,7 @@ (label 5) (parent 3) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -158,6 +164,7 @@ (label 6) (parent 3) (unrealized (0 3) (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 n3)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -180,6 +187,7 @@ (label 7) (parent 4) (unrealized (0 3) (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 n3)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton fragile_pruning@@ -202,6 +210,7 @@ (label 8) (parent 4) (unrealized (0 3) (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 n3)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton fragile_pruning@@ -224,6 +233,7 @@ (label 9) (parent 5) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -246,6 +256,7 @@ (label 10) (parent 5) (unrealized (2 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -268,6 +279,7 @@ (label 11) (parent 6) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -290,6 +302,7 @@ (label 12) (parent 6) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -312,6 +325,7 @@ (label 13) (parent 7) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -334,6 +348,7 @@ (label 14) (parent 7) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -359,6 +374,7 @@ (label 15) (parent 7) (unrealized (0 3) (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 n3)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton fragile_pruning@@ -381,6 +397,7 @@ (label 16) (parent 8) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -403,6 +420,7 @@ (label 17) (parent 8) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -428,6 +446,7 @@ (label 18) (parent 8) (unrealized (0 3) (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 n3)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton fragile_pruning@@ -458,6 +477,7 @@ (operation nonce-test (displaced 4 2 adder 2) n (3 0) (enc n k) (enc n new k)) (strand-map 0 1 2 3))) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -507,6 +527,7 @@ (label 21) (parent 10) (unrealized (2 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -532,6 +553,7 @@ (label 22) (parent 11) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -557,6 +579,7 @@ (label 23) (parent 11) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -582,6 +605,7 @@ (label 24) (parent 12) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -607,6 +631,7 @@ (label 25) (parent 12) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -632,6 +657,7 @@ (label 26) (parent 13) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -657,6 +683,7 @@ (label 27) (parent 13) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -682,6 +709,7 @@ (label 28) (parent 14) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -707,6 +735,7 @@ (label 29) (parent 14) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -732,6 +761,7 @@ (label 30) (parent 15) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -757,6 +787,7 @@ (label 31) (parent 15) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -782,6 +813,7 @@ (label 32) (parent 15) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -807,6 +839,7 @@ (label 33) (parent 16) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -832,6 +865,7 @@ (label 34) (parent 16) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -857,6 +891,7 @@ (label 35) (parent 17) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -883,6 +918,7 @@ (label 36) (parent 17) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -908,6 +944,7 @@ (label 37) (parent 18) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -933,6 +970,7 @@ (label 38) (parent 18) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -958,6 +996,7 @@ (label 39) (parent 18) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -986,6 +1025,7 @@ (seen-ops (20 (operation generalization deleted (2 0)) (strand-map 0 1 3))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -1013,6 +1053,7 @@ (label 41) (parent 19) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -1041,6 +1082,7 @@ (seen-ops (20 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -1073,6 +1115,7 @@ (operation nonce-test (displaced 5 3 adder 2) n (4 0) (enc n k) (enc n new k)) (strand-map 0 1 2 3 4))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -1098,6 +1141,7 @@ (label 44) (parent 23) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -1130,6 +1174,7 @@ (operation nonce-test (displaced 5 2 adder 2) n (3 0) (enc n k) (enc n new k) (enc n new-1 k)) (strand-map 0 1 2 3 4))) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -1164,6 +1209,7 @@ (operation nonce-test (displaced 5 3 adder 2) n (4 0) (enc n k) (enc n new k) (enc n new-0 k)) (strand-map 0 1 2 3 4))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -1219,6 +1265,7 @@ (label 48) (parent 25) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -1251,6 +1298,7 @@ (operation nonce-test (displaced 5 3 adder 2) n (4 0) (enc n k) (enc n new k)) (strand-map 0 1 2 3 4))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -1276,6 +1324,7 @@ (label 50) (parent 27) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -1308,6 +1357,7 @@ (operation nonce-test (displaced 5 2 adder 2) n (3 0) (enc n k) (enc n new k) (enc n new-1 k)) (strand-map 0 1 2 3 4))) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -1342,6 +1392,7 @@ (operation nonce-test (displaced 5 3 adder 2) n (4 0) (enc n k) (enc n new k) (enc n new-0 k)) (strand-map 0 1 2 3 4))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -1371,6 +1422,7 @@ (47 (operation generalization weakened ((2 1) (0 2))) (strand-map 0 1 2 3))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -1399,6 +1451,7 @@ (label 54) (parent 29) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -1426,6 +1479,7 @@ (label 55) (parent 30) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -1453,6 +1507,7 @@ (label 56) (parent 30) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton fragile_pruning@@ -1481,6 +1536,7 @@ (label 57) (parent 31) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -1510,6 +1566,7 @@ (label 58) (parent 31) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -1538,6 +1595,7 @@ (label 59) (parent 32) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -1567,6 +1625,7 @@ (label 60) (parent 32) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -1601,6 +1660,7 @@ (operation nonce-test (displaced 5 3 adder 2) n (4 0) (enc n k) (enc n new k) (enc n new-0 k)) (strand-map 0 1 2 3 4))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -1656,6 +1716,7 @@ (label 63) (parent 34) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -1691,6 +1752,7 @@ (operation nonce-test (displaced 5 3 adder 2) n (4 0) (enc n k) (enc n new k) (enc n new-0 k)) (strand-map 0 1 2 3 4))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -1748,6 +1810,7 @@ (label 66) (parent 36) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -1776,6 +1839,7 @@ (label 67) (parent 37) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -1805,6 +1869,7 @@ (label 68) (parent 37) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -1833,6 +1898,7 @@ (label 69) (parent 38) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -1863,6 +1929,7 @@ (label 70) (parent 38) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -1891,6 +1958,7 @@ (label 71) (parent 39) (unrealized (0 5))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -1921,6 +1989,7 @@ (label 72) (parent 39) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -1951,6 +2020,7 @@ (seen-ops (42 (operation generalization deleted (2 0)) (strand-map 0 1 3 4))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -1984,6 +2054,7 @@ (operation nonce-test (displaced 5 3 adder 2) n (4 0) (enc n k) (enc n new k) (enc n new-0 k)) (strand-map 0 1 2 3 4))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -2019,6 +2090,7 @@ (operation nonce-test (displaced 6 2 adder 2) n (4 0) (enc n k) (enc n new k) (enc n new-2 k)) (strand-map 0 1 2 3 4 5))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -2047,6 +2119,7 @@ (seen-ops (20 (operation generalization deleted (2 0)) (strand-map 0 1 3))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -2075,6 +2148,7 @@ (label 77) (parent 44) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -2105,6 +2179,7 @@ (seen-ops (47 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -2135,6 +2210,7 @@ (label 79) (parent 46) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -2165,6 +2241,7 @@ (seen-ops (47 (operation generalization deleted (4 0)) (strand-map 0 1 2 3))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -2198,6 +2275,7 @@ (operation nonce-test (displaced 5 3 adder 2) n (4 0) (enc n k) (enc n new k) (enc n new-0 k)) (strand-map 0 1 2 3 4))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -2233,6 +2311,7 @@ (operation nonce-test (displaced 6 2 adder 2) n (4 0) (enc n k) (enc n new k) (enc n new-2 k)) (strand-map 0 1 2 3 4 5))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -2261,6 +2340,7 @@ (seen-ops (20 (operation generalization deleted (2 0)) (strand-map 0 1 3))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -2289,6 +2369,7 @@ (label 84) (parent 50) (unrealized (3 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -2319,6 +2400,7 @@ (seen-ops (53 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -2349,6 +2431,7 @@ (label 86) (parent 52) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -2379,6 +2462,7 @@ (seen-ops (53 (operation generalization deleted (4 0)) (strand-map 0 1 2 3))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -2415,6 +2499,7 @@ (operation nonce-test (displaced 6 4 adder 2) n (5 0) (enc n k) (enc n new k)) (strand-map 0 1 2 3 4 5))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "4 in cohort - 3 not yet seen")) (defskeleton fragile_pruning@@ -2443,6 +2528,7 @@ (label 89) (parent 56) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -2476,6 +2562,7 @@ (operation nonce-test (displaced 5 2 adder 2) n (4 0) (enc n k) (enc n new k) (enc n new-1 k)) (strand-map 0 1 2 3 4))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "2 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -2514,6 +2601,7 @@ (operation nonce-test (displaced 6 3 adder 2) n (4 0) (enc n k) (enc n new k) (enc n new-2 k)) (strand-map 0 1 2 3 4 5))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "2 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -2550,6 +2638,7 @@ (operation nonce-test (displaced 6 4 adder 2) n (5 0) (enc n k) (enc n new k) (enc n new-0 k)) (strand-map 0 1 2 3 4 5))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -2578,6 +2667,7 @@ (label 93) (parent 58) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -2614,6 +2704,7 @@ (enc n new k) (enc n new-0 k) (enc n new-2 k)) (strand-map 0 1 2 3 4 5))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -2650,6 +2741,7 @@ (operation nonce-test (displaced 6 4 adder 2) n (5 0) (enc n k) (enc n new k) (enc n new-1 k)) (strand-map 0 1 2 3 4 5))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-1)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -2678,6 +2770,7 @@ (label 96) (parent 60) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -2714,6 +2807,7 @@ (enc n new k) (enc n new-1 k) (enc n new-2 k)) (strand-map 0 1 2 3 4 5))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-1)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -2744,6 +2838,7 @@ (seen-ops (62 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -2774,6 +2869,7 @@ (label 99) (parent 61) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -2804,6 +2900,7 @@ (seen-ops (62 (operation generalization deleted (4 0)) (strand-map 0 1 2 3))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -2835,6 +2932,7 @@ (seen-ops (65 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -2866,6 +2964,7 @@ (label 102) (parent 64) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -2897,6 +2996,7 @@ (seen-ops (65 (operation generalization deleted (4 0)) (strand-map 0 1 2 3))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -2933,6 +3033,7 @@ (operation nonce-test (displaced 6 4 adder 2) n (5 0) (enc n k) (enc n new k) (enc n new-0 k)) (strand-map 0 1 2 3 4 5))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -2961,6 +3062,7 @@ (label 105) (parent 68) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -2997,6 +3099,7 @@ (enc n new k) (enc n new-0 k) (enc n new-2 k)) (strand-map 0 1 2 3 4 5))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -3034,6 +3137,7 @@ (operation nonce-test (displaced 6 4 adder 2) n (5 0) (enc n k) (enc n new k) (enc n new-0 k)) (strand-map 0 1 2 3 4 5))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -3063,6 +3167,7 @@ (label 108) (parent 70) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -3100,6 +3205,7 @@ (enc n new k) (enc n new-0 k) (enc n new-2 k)) (strand-map 0 1 2 3 4 5))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -3138,6 +3244,7 @@ (enc n new k) (enc n new-0 k) (enc n new-1 k)) (strand-map 0 1 2 3 4 5))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-1)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -3199,6 +3306,7 @@ (label 112) (parent 72) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -3229,6 +3337,7 @@ (seen-ops (40 (operation generalization deleted (2 0)) (strand-map 0 1 3 4))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -3259,6 +3368,7 @@ (label 114) (parent 74) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -3289,6 +3399,7 @@ (seen-ops (42 (operation generalization deleted (2 0)) (strand-map 0 1 3 4))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -3323,6 +3434,7 @@ (80 (operation generalization deleted (3 0)) (strand-map 0 1 2 4 5))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -3353,6 +3465,7 @@ (seen-ops (40 (operation generalization deleted (2 0)) (strand-map 0 1 3 4))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -3383,6 +3496,7 @@ (label 118) (parent 81) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -3413,6 +3527,7 @@ (seen-ops (42 (operation generalization deleted (2 0)) (strand-map 0 1 3 4))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -3447,6 +3562,7 @@ (87 (operation generalization deleted (3 0)) (strand-map 0 1 2 4 5))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -3482,6 +3598,7 @@ (operation nonce-test (displaced 6 4 adder 2) n (5 0) (enc n k) (enc n new k) (enc n new-1 k)) (strand-map 0 1 2 3 4 5))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -3520,6 +3637,7 @@ (operation nonce-test (displaced 6 3 adder 2) n (5 0) (enc n k) (enc n new k) (enc n new-0 k)) (strand-map 0 1 2 3 4 5))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "3 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -3560,6 +3678,7 @@ (operation nonce-test (displaced 7 2 adder 2) n (5 0) (enc n k) (enc n new k) (enc n new-3 k)) (strand-map 0 1 2 3 4 5 6))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "2 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -3588,6 +3707,7 @@ (label 124) (parent 89) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -3624,6 +3744,7 @@ (enc n new k) (enc n new-0 k) (enc n new-2 k)) (strand-map 0 1 2 3 4 5))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -3660,6 +3781,7 @@ (enc n new k) (enc n new-1 k) (enc n new-2 k)) (strand-map 0 1 2 3 4 5))) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -3696,6 +3818,7 @@ (enc n new k) (enc n new-0 k) (enc n new-1 k)) (strand-map 0 1 2 3 4 5))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -3735,6 +3858,7 @@ (enc n new k) (enc n new-0 k) (enc n new-3 k)) (strand-map 0 1 2 3 4 5 6))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -3765,6 +3889,7 @@ (seen-ops (53 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -3795,6 +3920,7 @@ (label 130) (parent 93) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -3831,6 +3957,7 @@ (enc n new k) (enc n new-0 k) (enc n new-1 k)) (strand-map 0 1 2 3 4 5))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-1)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -3870,6 +3997,7 @@ (enc n new k) (enc n new-1 k) (enc n new-3 k)) (strand-map 0 1 2 3 4 5 6))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-1)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -3900,6 +4028,7 @@ (seen-ops (47 (operation generalization deleted (2 0)) (strand-map 0 1 3 4))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-1)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -3930,6 +4059,7 @@ (label 134) (parent 96) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -3964,6 +4094,7 @@ (100 (operation generalization deleted (3 0)) (strand-map 0 1 2 4 5))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -3999,6 +4130,7 @@ (103 (operation generalization deleted (3 0)) (strand-map 0 1 2 4 5))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4035,6 +4167,7 @@ (enc n new k) (enc n new-0 k) (enc n new-1 k)) (strand-map 0 1 2 3 4 5))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -4074,6 +4207,7 @@ (enc n new k) (enc n new-0 k) (enc n new-3 k)) (strand-map 0 1 2 3 4 5 6))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4104,6 +4238,7 @@ (seen-ops (62 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4134,6 +4269,7 @@ (label 140) (parent 105) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -4171,6 +4307,7 @@ (enc n new k) (enc n new-0 k) (enc n new-1 k)) (strand-map 0 1 2 3 4 5))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -4211,6 +4348,7 @@ (enc n new k) (enc n new-0 k) (enc n new-3 k)) (strand-map 0 1 2 3 4 5 6))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4242,6 +4380,7 @@ (seen-ops (65 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4273,6 +4412,7 @@ (label 144) (parent 108) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -4308,6 +4448,7 @@ (111 (operation generalization deleted (4 0)) (strand-map 0 1 2 3 5))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-1)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4342,6 +4483,7 @@ (label 146) (parent 110) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -4377,6 +4519,7 @@ (111 (operation generalization deleted (5 0)) (strand-map 0 1 2 3 4))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-1)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4411,6 +4554,7 @@ (73 (operation generalization deleted (2 0)) (strand-map 0 1 3 4 5))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4445,6 +4589,7 @@ (73 (operation generalization deleted (2 0)) (strand-map 0 1 3 4 5))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4481,6 +4626,7 @@ (enc n new k) (enc n new-0 k) (enc n new-1 k)) (strand-map 0 1 2 3 4 5))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton fragile_pruning@@ -4520,6 +4666,7 @@ (enc n new k) (enc n new-1 k) (enc n new-3 k)) (strand-map 0 1 2 3 4 5 6))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4559,6 +4706,7 @@ (enc n new k) (enc n new-0 k) (enc n new-3 k)) (strand-map 0 1 2 3 4 5 6))) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4589,6 +4737,7 @@ (seen-ops (76 (operation generalization deleted (2 0)) (strand-map 0 1 3 4))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4619,6 +4768,7 @@ (label 154) (parent 124) (unrealized (4 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -4653,6 +4803,7 @@ (85 (operation generalization deleted (3 0)) (strand-map 0 1 2 4 5))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4686,6 +4837,7 @@ (label 156) (parent 127) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -4720,6 +4872,7 @@ (87 (operation generalization deleted (3 0)) (strand-map 0 1 2 4 5))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4754,6 +4907,7 @@ (78 (operation generalization deleted (2 0)) (strand-map 0 1 3 4 5))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-1)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4787,6 +4941,7 @@ (label 159) (parent 131) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -4821,6 +4976,7 @@ (80 (operation generalization deleted (2 0)) (strand-map 0 1 3 4 5))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-1)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4855,6 +5011,7 @@ (98 (operation generalization deleted (3 0)) (strand-map 0 1 2 4 5))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4888,6 +5045,7 @@ (label 162) (parent 137) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -4922,6 +5080,7 @@ (100 (operation generalization deleted (3 0)) (strand-map 0 1 2 4 5))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4957,6 +5116,7 @@ (101 (operation generalization deleted (3 0)) (strand-map 0 1 2 4 5))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -4991,6 +5151,7 @@ (label 165) (parent 141) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -5026,6 +5187,7 @@ (103 (operation generalization deleted (3 0)) (strand-map 0 1 2 4 5))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -5063,6 +5225,7 @@ (147 (operation generalization deleted (4 0)) (strand-map 0 1 2 3 5 6))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-1)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -5097,6 +5260,7 @@ (113 (operation generalization deleted (2 0)) (strand-map 0 1 3 4 5))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -5130,6 +5294,7 @@ (label 169) (parent 150) (unrealized (5 0))+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton fragile_pruning@@ -5164,6 +5329,7 @@ (115 (operation generalization deleted (2 0)) (strand-map 0 1 3 4 5))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -5200,6 +5366,7 @@ (120 (operation generalization deleted (3 0)) (strand-map 0 1 2 4 5 6))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -5236,6 +5403,7 @@ (116 (operation generalization deleted (2 0)) (strand-map 0 1 3 4 5 6))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new-1)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -5272,6 +5440,7 @@ (135 (operation generalization deleted (3 0)) (strand-map 0 1 2 4 5 6))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -5309,6 +5478,7 @@ (136 (operation generalization deleted (3 0)) (strand-map 0 1 2 4 5 6))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new-0) (n3 new-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton fragile_pruning@@ -5345,6 +5515,7 @@ (148 (operation generalization deleted (2 0)) (strand-map 0 1 3 4 5 6))) (realized)+ (maps ((0) ((k k) (n n) (n1 new) (n2 new) (n3 new)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
tst/goals.tst view
@@ -1,6 +1,6 @@ (herald goals) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/goals.scm") (defprotocol ns basic@@ -39,6 +39,7 @@ (send (enc n2 (pubk b))))) (label 0) (unrealized (0 1))+ (maps ((0) ((b b) (n1 n1) (a a) (n2 n2)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -49,6 +50,15 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig n1)+ (goals+ (forall ((b name) (n1 text) (z0 strd))+ (implies+ (and (p "init" z0 3) (p "init" "n1" z0 n1) (p "init" "b" z0 b)+ (non (privk b)) (uniq n1))+ (exists ((z1 strd))+ (and (p "resp" z1 2) (p "resp" "b" z1 b))))))+ (comment "Initiator point of view"+ "Authentication goal: agreement on name b") (operation nonce-test (added-strand resp 2) n1 (0 1) (enc n1 a (pubk b))) (strand-map 0)@@ -101,6 +111,7 @@ (send (enc n2 (pubk b))))) (label 2) (unrealized (0 1))+ (maps ((0) ((b b) (n1 n1) (a a) (n2 n2)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -111,6 +122,14 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig n1)+ (goals+ (forall ((b name) (n1 text) (z0 strd))+ (implies+ (and (p "init" z0 3) (p "init" "n1" z0 n1) (p "init" "b" z0 b)+ (non (privk b)) (uniq n1))+ (exists ((z1 strd))+ (and (p "resp" z1 2) (p "resp" "b" z1 b) (prec z1 1 z0 2))))))+ (comment "Prec example") (operation nonce-test (added-strand resp 2) n1 (0 1) (enc n1 a (pubk b))) (strand-map 0)@@ -164,6 +183,7 @@ (recv (enc n2 (pubk b))))) (label 4) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (origs (n2 (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -174,6 +194,15 @@ (precedes ((0 1) (1 1)) ((1 2) (0 2))) (non-orig (privk a)) (uniq-orig n2)+ (goals+ (forall ((a b name) (n2 text) (z0 strd))+ (implies+ (and (p "resp" z0 3) (p "resp" "n2" z0 n2) (p "resp" "a" z0 a)+ (p "resp" "b" z0 b) (non (privk a)) (uniq n2))+ (exists ((z1 strd))+ (and (p "init" z1 2) (p "init" "b" z1 b))))))+ (comment "Responder point of view"+ "Failed authentication goal: agreement on name b") (operation nonce-test (added-strand init 3) n2 (0 2) (enc n1 n2 (pubk a))) (strand-map 0)@@ -229,6 +258,7 @@ (recv (enc n2 (pubk b))))) (label 6) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (origs (n2 (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -239,6 +269,15 @@ (precedes ((0 1) (1 1)) ((1 2) (0 2))) (non-orig (privk a)) (uniq-orig n2)+ (goals+ (forall ((a b name) (n2 text) (z0 strd))+ (implies+ (and (p "resp" z0 3) (p "resp" "n2" z0 n2) (p "resp" "a" z0 a)+ (p "resp" "b" z0 b) (non (privk a)) (uniq n2))+ (exists ((z1 strd))+ (and (p "init" z1 2) (p "init" "b" z1 b))))))+ (comment "Responder point of view"+ "Authentication goal: agreement on name b") (operation nonce-test (added-strand init 3) n2 (0 2) (enc n1 n2 b (pubk a))) (strand-map 0)@@ -276,8 +315,8 @@ (defskeleton ns (vars (n1 n2 text) (a b name))- (deflistener n1) (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (deflistener n1) (non-orig (privk a) (privk b)) (uniq-orig n1) (goals@@ -288,190 +327,130 @@ (non (privk a)) (non (privk b)) (uniq n1)) (false)))) (comment "Initiator point of view" "Secrecy goal: nonce n1 not revealed")- (traces ((recv n1))+ (traces ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))- (send (enc n2 (pubk b)))))+ (send (enc n2 (pubk b)))) ((recv n1))) (label 8)- (unrealized (0 0) (1 1))+ (unrealized (0 1) (1 0)) (preskeleton)- (origs (n1 (1 0)))+ (maps)+ (origs (n1 (0 0))) (comment "Not a skeleton")) (defskeleton ns (vars (n1 n2 text) (a b name))- (deflistener n1) (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))- (precedes ((1 0) (0 0)))+ (deflistener n1)+ (precedes ((0 0) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n1)- (traces ((recv n1))+ (goals+ (forall ((a b name) (n1 text) (z0 z1 strd))+ (implies+ (and (p "init" z0 3) (p "init" "n1" z0 n1) (p "init" "a" z0 a)+ (p "init" "b" z0 b) (p "" z1 1) (p "" "x" z1 n1)+ (non (privk a)) (non (privk b)) (uniq n1)) (false))))+ (comment "Initiator point of view"+ "Secrecy goal: nonce n1 not revealed")+ (traces ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))- (send (enc n2 (pubk b)))))+ (send (enc n2 (pubk b)))) ((recv n1))) (label 9) (parent 8)- (unrealized (0 0) (1 1))- (origs (n1 (1 0)))+ (unrealized (0 1) (1 0))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n2 n2))))+ (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns (vars (n1 n2 n2-0 text) (a b name))- (deflistener n1) (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (deflistener n1) (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))- (precedes ((1 0) (0 0)) ((1 0) (2 0)) ((2 1) (1 1)))+ (precedes ((0 0) (2 0)) ((2 1) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n1)- (operation nonce-test (added-strand resp 2) n1 (1 1)+ (goals+ (forall ((a b name) (n1 text) (z0 z1 strd))+ (implies+ (and (p "init" z0 3) (p "init" "n1" z0 n1) (p "init" "a" z0 a)+ (p "init" "b" z0 b) (p "" z1 1) (p "" "x" z1 n1)+ (non (privk a)) (non (privk b)) (uniq n1)) (false))))+ (comment "Initiator point of view"+ "Secrecy goal: nonce n1 not revealed")+ (operation nonce-test (added-strand resp 2) n1 (1 0) (enc n1 a (pubk b))) (strand-map 0 1)- (traces ((recv n1))+ (traces ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))- (send (enc n2 (pubk b))))+ (send (enc n2 (pubk b)))) ((recv n1)) ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 (pubk a))))) (label 10) (parent 9)- (unrealized (0 0) (1 1))+ (unrealized (0 1) (1 0))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n2 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns- (vars (n1 n2 text) (a b name))- (deflistener n1)- (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))- (defstrand resp 2 (n2 n2) (n1 n1) (b b) (a a))- (precedes ((1 0) (0 0)) ((1 0) (2 0)) ((2 1) (1 1)))- (non-orig (privk a) (privk b))- (uniq-orig n1)- (operation nonce-test (contracted (n2-0 n2)) n1 (1 1)- (enc n1 n2 (pubk a)) (enc n1 a (pubk b)))- (strand-map 0 1 2)- (traces ((recv n1))- ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))- (send (enc n2 (pubk b))))- ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))))- (label 11)- (parent 10)- (unrealized (0 0))- (comment "2 in cohort - 2 not yet seen"))--(defskeleton ns- (vars (n1 n2 text) (a b name))- (deflistener n1)- (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))- (defstrand resp 2 (n2 n2) (n1 n1) (b b) (a a))- (precedes ((1 0) (2 0)) ((2 1) (0 0)) ((2 1) (1 1)))- (non-orig (privk a) (privk b))- (uniq-orig n1)- (operation nonce-test (displaced 3 2 resp 2) n1 (0 0)- (enc n1 a (pubk b)))- (strand-map 0 1 2)- (traces ((recv n1))- ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))- (send (enc n2 (pubk b))))- ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))))- (label 12)- (parent 11)- (unrealized (0 0))- (comment "2 in cohort - 2 not yet seen"))--(defskeleton ns- (vars (n1 n2 n2-0 text) (a b name))- (deflistener n1)- (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))- (defstrand resp 2 (n2 n2) (n1 n1) (b b) (a a))- (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))- (precedes ((1 0) (2 0)) ((1 0) (3 0)) ((2 1) (1 1)) ((3 1) (0 0)))- (non-orig (privk a) (privk b))- (uniq-orig n1)- (operation nonce-test (added-strand resp 2) n1 (0 0)- (enc n1 a (pubk b)))- (strand-map 0 1 2)- (traces ((recv n1))- ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))- (send (enc n2 (pubk b))))- ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a))))- ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 (pubk a)))))- (label 13)- (parent 11)- (seen 15)- (seen-ops- (15- (operation nonce-test (displaced 4 2 resp 2) n1 (0 0)- (enc n1 n2-0 (pubk a)) (enc n1 a (pubk b)))- (strand-map 0 1 2 3)))- (unrealized (0 0))- (comment "1 in cohort - 0 not yet seen"))--(defskeleton ns (vars (n2 text) (a b name))- (deflistener n2) (defstrand init 3 (n1 n2) (n2 n2) (a a) (b b))+ (deflistener n2) (defstrand resp 2 (n2 n2) (n1 n2) (b b) (a a))- (precedes ((1 0) (2 0)) ((1 2) (0 0)) ((2 1) (1 1)))+ (precedes ((0 0) (2 0)) ((0 2) (1 0)) ((2 1) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n2)- (operation nonce-test (displaced 3 1 init 3) n2 (0 0)- (enc n2 n2 (pubk a)) (enc n2 a (pubk b)))+ (goals+ (forall ((a b name) (n1 text) (z0 z1 strd))+ (implies+ (and (p "init" z0 3) (p "init" "n1" z0 n1) (p "init" "a" z0 a)+ (p "init" "b" z0 b) (p "" z1 1) (p "" "x" z1 n1)+ (non (privk a)) (non (privk b)) (uniq n1)) (false))))+ (comment "Initiator point of view"+ "Secrecy goal: nonce n1 not revealed")+ (operation nonce-test (displaced 3 0 init 3) n2-0 (1 0)+ (enc n2-0 n2-0 (pubk a)) (enc n2-0 a (pubk b))) (strand-map 0 1 2)- (traces ((recv n2))+ (traces ((send (enc n2 a (pubk b))) (recv (enc n2 n2 (pubk a)))- (send (enc n2 (pubk b))))+ (send (enc n2 (pubk b)))) ((recv n2)) ((recv (enc n2 a (pubk b))) (send (enc n2 n2 (pubk a)))))- (label 14)- (parent 12)- (unrealized (0 0))+ (label 11)+ (parent 10)+ (unrealized (0 1) (1 0))+ (maps ((0 1) ((a a) (b b) (n1 n2) (n2 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns- (vars (n1 n2 n2-0 text) (a b name))- (deflistener n1)- (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))- (defstrand resp 2 (n2 n2) (n1 n1) (b b) (a a))- (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))- (precedes ((1 0) (2 0)) ((1 0) (3 0)) ((2 1) (0 0)) ((2 1) (1 1))- ((3 1) (0 0)))- (non-orig (privk a) (privk b))- (uniq-orig n1)- (operation nonce-test (added-strand resp 2) n1 (0 0)- (enc n1 n2 (pubk a)) (enc n1 a (pubk b)))- (strand-map 0 1 2)- (traces ((recv n1))- ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))- (send (enc n2 (pubk b))))- ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a))))- ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 (pubk a)))))- (label 15)- (parent 12)- (seen 16)- (seen-ops- (16- (operation nonce-test (displaced 4 1 init 3) n2 (0 0)- (enc n2 n2 (pubk a)) (enc n2 n2-0 (pubk a)) (enc n2 a (pubk b)))- (strand-map 0 1 2 3)))- (unrealized (0 0))- (comment "1 in cohort - 0 not yet seen"))--(defskeleton ns (vars (n2 n2-0 text) (a b name))- (deflistener n2) (defstrand init 3 (n1 n2) (n2 n2) (a a) (b b))+ (deflistener n2) (defstrand resp 2 (n2 n2) (n1 n2) (b b) (a a)) (defstrand resp 2 (n2 n2-0) (n1 n2) (b b) (a a))- (precedes ((1 0) (2 0)) ((1 0) (3 0)) ((1 2) (0 0)) ((2 1) (1 1))- ((3 1) (0 0)))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 2) (1 0)) ((2 1) (1 0))+ ((3 1) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n2)- (operation nonce-test (added-strand resp 2) n2 (0 0) (enc n2 (pubk b))+ (goals+ (forall ((a b name) (n1 text) (z0 z1 strd))+ (implies+ (and (p "init" z0 3) (p "init" "n1" z0 n1) (p "init" "a" z0 a)+ (p "init" "b" z0 b) (p "" z1 1) (p "" "x" z1 n1)+ (non (privk a)) (non (privk b)) (uniq n1)) (false))))+ (comment "Initiator point of view"+ "Secrecy goal: nonce n1 not revealed")+ (operation nonce-test (added-strand resp 2) n2 (1 0) (enc n2 (pubk b)) (enc n2 n2 (pubk a)) (enc n2 a (pubk b))) (strand-map 0 1 2)- (traces ((recv n2))+ (traces ((send (enc n2 a (pubk b))) (recv (enc n2 n2 (pubk a)))- (send (enc n2 (pubk b))))+ (send (enc n2 (pubk b)))) ((recv n2)) ((recv (enc n2 a (pubk b))) (send (enc n2 n2 (pubk a)))) ((recv (enc n2 a (pubk b))) (send (enc n2 n2-0 (pubk a)))))- (label 16)- (parent 14)- (unrealized (0 0))+ (label 12)+ (parent 11)+ (unrealized (0 1) (1 0)) (dead)+ (maps ((0 1) ((a a) (b b) (n1 n2) (n2 n2)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -505,8 +484,9 @@ (and (p "resp" z1 2) (p "resp" "a" z1 a)))))) (comment "Unilateral authentication goal") (traces ((send (enc n (pubk a))) (recv n)))- (label 17)+ (label 13) (unrealized (0 1))+ (maps ((0) ((a a) (n n)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -517,12 +497,20 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk a)) (uniq-orig n)+ (goals+ (forall ((a name) (n text) (z0 strd))+ (implies+ (and (p "init" z0 2) (p "init" "n" z0 n) (p "init" "a" z0 a)+ (non (privk a)) (uniq n))+ (exists ((z1 strd))+ (and (p "resp" z1 2) (p "resp" "a" z1 a))))))+ (comment "Unilateral authentication goal") (operation nonce-test (added-strand resp 2) n (0 1) (enc n (pubk a))) (strand-map 0) (traces ((send (enc n (pubk a))) (recv n)) ((recv (enc n (pubk a))) (send n)))- (label 18)- (parent 17)+ (label 14)+ (parent 13) (realized) (shape) (satisfies yes)@@ -565,8 +553,9 @@ (p "init" "n") "->" (p "init" "n1") "and" (p "init" "a") "->" (p "init" "b") "and" (p "resp" "a") "->" (p "resp" "b")) (traces ((send (enc n a-0 (pubk a))) (recv (enc n n2 (pubk a-0)))))- (label 19)+ (label 15) (unrealized (0 1))+ (maps ((0) ((a a) (n n) (a-0 a-0) (n2 n2)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -577,13 +566,24 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk a)) (uniq-orig n)+ (goals+ (forall ((a name) (n text) (z0 strd))+ (implies+ (and (p "init" z0 2) (p "init" "n1" z0 n) (p "init" "b" z0 a)+ (non (privk a)) (uniq n))+ (exists ((z1 strd))+ (and (p "resp" z1 2) (p "resp" "b" z1 a))))))+ (comment "Initiator authentication goal"+ "Same as unilateral goal under the predicate mapping:"+ (p "init" "n") "->" (p "init" "n1") "and" (p "init" "a") "->"+ (p "init" "b") "and" (p "resp" "a") "->" (p "resp" "b")) (operation nonce-test (added-strand resp 2) n (0 1) (enc n a-0 (pubk a))) (strand-map 0) (traces ((send (enc n a-0 (pubk a))) (recv (enc n n2 (pubk a-0)))) ((recv (enc n a-0 (pubk a))) (send (enc n n2-0 (pubk a-0)))))- (label 20)- (parent 19)+ (label 16)+ (parent 15) (realized) (shape) (satisfies yes)@@ -629,8 +629,9 @@ (traces ((recv (enc n1 a (pubk b))) (send (enc n1 n (pubk a))) (recv (enc n (pubk b)))))- (label 21)+ (label 17) (unrealized (0 2))+ (maps ((0) ((a a) (n n) (b b) (n1 n1)))) (origs (n (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -641,6 +642,18 @@ (precedes ((0 1) (1 1)) ((1 2) (0 2))) (non-orig (privk a)) (uniq-orig n)+ (goals+ (forall ((a name) (n text) (z0 strd))+ (implies+ (and (p "resp" z0 3) (p "resp" "n2" z0 n) (p "resp" "a" z0 a)+ (non (privk a)) (uniq n))+ (exists ((z1 strd))+ (and (p "init" z1 3) (p "init" "a" z1 a))))))+ (comment "Responder authentication goal"+ "Same as unilateral goal under the predicate mapping:" (p "init" 1)+ "->" (p "resp" 2) "and" (p "init" "n") "->" (p "resp" "n2") "and"+ (p "init" "a") "->" (p "resp" "a") "and" (p "resp" 1) "->"+ (p "init" 2) "and" (p "resp" "a") "->" (p "init" "a")) (operation nonce-test (added-strand init 3) n (0 2) (enc n1 n (pubk a))) (strand-map 0)@@ -649,8 +662,8 @@ (recv (enc n (pubk b)))) ((send (enc n1 a (pubk b-0))) (recv (enc n1 n (pubk a))) (send (enc n (pubk b-0)))))- (label 22)- (parent 21)+ (label 18)+ (parent 17) (realized) (shape) (satisfies yes)@@ -695,8 +708,9 @@ (and (p "resp" z1 2) (p "resp" "a" z1 a)))))) (comment "Two initiator authentication goals") (traces ((send (enc n a (pubk b))) (recv (enc n n2 (pubk a)))))- (label 23)+ (label 19) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n n) (n2 n2)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -707,14 +721,28 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n)+ (goals+ (forall ((a b name) (n text) (z0 strd))+ (implies+ (and (p "init" z0 2) (p "init" "n1" z0 n) (p "init" "a" z0 a)+ (p "init" "b" z0 b) (non (privk a)) (non (privk b)) (uniq n))+ (exists ((z1 strd)) (and (p "resp" z1 2) (p "resp" "b" z1 b)))))+ (forall ((a b name) (n text) (z0 strd))+ (implies+ (and (p "init" z0 2) (p "init" "n1" z0 n) (p "init" "a" z0 a)+ (p "init" "b" z0 b) (non (privk a)) (non (privk b)) (uniq n))+ (exists ((z1 strd))+ (and (p "resp" z1 2) (p "resp" "a" z1 a))))))+ (comment "Two initiator authentication goals") (operation nonce-test (added-strand resp 2) n (0 1) (enc n a (pubk b))) (strand-map 0) (traces ((send (enc n a (pubk b))) (recv (enc n n2 (pubk a)))) ((recv (enc n a (pubk b))) (send (enc n n2-0 (pubk a)))))- (label 24)- (parent 23)+ (label 20)+ (parent 19) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n n) (n2 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -724,16 +752,29 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n)+ (goals+ (forall ((a b name) (n text) (z0 strd))+ (implies+ (and (p "init" z0 2) (p "init" "n1" z0 n) (p "init" "a" z0 a)+ (p "init" "b" z0 b) (non (privk a)) (non (privk b)) (uniq n))+ (exists ((z1 strd)) (and (p "resp" z1 2) (p "resp" "b" z1 b)))))+ (forall ((a b name) (n text) (z0 strd))+ (implies+ (and (p "init" z0 2) (p "init" "n1" z0 n) (p "init" "a" z0 a)+ (p "init" "b" z0 b) (non (privk a)) (non (privk b)) (uniq n))+ (exists ((z1 strd))+ (and (p "resp" z1 2) (p "resp" "a" z1 a))))))+ (comment "Two initiator authentication goals") (operation nonce-test (contracted (n2-0 n2)) n (0 1) (enc n n2 (pubk a)) (enc n a (pubk b))) (strand-map 0 1) (traces ((send (enc n a (pubk b))) (recv (enc n n2 (pubk a)))) ((recv (enc n a (pubk b))) (send (enc n n2 (pubk a)))))- (label 25)- (parent 24)+ (label 21)+ (parent 20) (realized) (shape)- (satisfies yes yes)+ (satisfies yes) (maps ((0) ((a a) (b b) (n n) (n2 n2)))) (origs (n (0 0)))) @@ -775,8 +816,9 @@ (traces ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a))) (send (enc n2 (pubk b)))))- (label 26)+ (label 22) (unrealized (0 1))+ (maps ((0) ((n1 n1) (n2 n2) (b b) (a a)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -787,6 +829,17 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig n1)+ (goals+ (forall ((n1 n2 text) (b a name) (z strd))+ (implies+ (and (p "init" z 3) (p "init" "n1" z n1) (p "init" "n2" z n2)+ (p "init" "a" z a) (p "init" "b" z b) (non (privk b))+ (uniq-at n1 z 0))+ (exists ((n2-0 text) (z-0 strd))+ (and (p "resp" z-0 2) (p "resp" "n2" z-0 n2-0)+ (p "resp" "n1" z-0 n1) (p "resp" "b" z-0 b)+ (p "resp" "a" z-0 a) (prec z 0 z-0 0) (prec z-0 1 z 1))))))+ (comment "Shape analysis sentence") (operation nonce-test (added-strand resp 2) n1 (0 1) (enc n1 a (pubk b))) (strand-map 0)@@ -794,8 +847,8 @@ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a))) (send (enc n2 (pubk b)))) ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 (pubk a)))))- (label 27)- (parent 26)+ (label 23)+ (parent 22) (realized) (shape) (satisfies yes)@@ -823,8 +876,8 @@ (defskeleton ns (vars (n2 n1 text) (a b name))- (deflistener n2) (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))+ (deflistener n2) (non-orig (privk a) (privk b)) (uniq-orig n2) (goals@@ -835,102 +888,137 @@ (non (privk a)) (non (privk b)) (uniq n2)) (false)))) (comment "Responder point of view" "Failed secrecy goal: nonce n2 not revealed")- (traces ((recv n2))+ (traces ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))- (recv (enc n2 (pubk b)))))- (label 28)- (unrealized (0 0) (1 2))+ (recv (enc n2 (pubk b)))) ((recv n2)))+ (label 24)+ (unrealized (0 2) (1 0)) (preskeleton)- (origs (n2 (1 1)))+ (maps)+ (origs (n2 (0 1))) (comment "Not a skeleton")) (defskeleton ns (vars (n2 n1 text) (a b name))- (deflistener n2) (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))- (precedes ((1 1) (0 0)))+ (deflistener n2)+ (precedes ((0 1) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n2)- (traces ((recv n2))+ (goals+ (forall ((a b name) (n2 text) (z0 z1 strd))+ (implies+ (and (p "resp" z0 3) (p "resp" "n2" z0 n2) (p "resp" "a" z0 a)+ (p "resp" "b" z0 b) (p "" z1 1) (p "" "x" z1 n2)+ (non (privk a)) (non (privk b)) (uniq n2)) (false))))+ (comment "Responder point of view"+ "Failed secrecy goal: nonce n2 not revealed")+ (traces ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))- (recv (enc n2 (pubk b)))))- (label 29)- (parent 28)- (unrealized (0 0) (1 2))- (origs (n2 (1 1)))+ (recv (enc n2 (pubk b)))) ((recv n2)))+ (label 25)+ (parent 24)+ (unrealized (0 2) (1 0))+ (maps ((0 1) ((a a) (b b) (n2 n2) (n1 n1))))+ (origs (n2 (0 1))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns (vars (n2 n1 text) (a b b-0 name))- (deflistener n2) (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))+ (deflistener n2) (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b-0))- (precedes ((1 1) (0 0)) ((1 1) (2 1)) ((2 2) (1 2)))+ (precedes ((0 1) (2 1)) ((2 2) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n2)- (operation nonce-test (added-strand init 3) n2 (1 2)+ (goals+ (forall ((a b name) (n2 text) (z0 z1 strd))+ (implies+ (and (p "resp" z0 3) (p "resp" "n2" z0 n2) (p "resp" "a" z0 a)+ (p "resp" "b" z0 b) (p "" z1 1) (p "" "x" z1 n2)+ (non (privk a)) (non (privk b)) (uniq n2)) (false))))+ (comment "Responder point of view"+ "Failed secrecy goal: nonce n2 not revealed")+ (operation nonce-test (added-strand init 3) n2 (1 0) (enc n1 n2 (pubk a))) (strand-map 0 1)- (traces ((recv n2))+ (traces ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))- (recv (enc n2 (pubk b))))+ (recv (enc n2 (pubk b)))) ((recv n2)) ((send (enc n1 a (pubk b-0))) (recv (enc n1 n2 (pubk a))) (send (enc n2 (pubk b-0)))))- (label 30)- (parent 29)- (unrealized (0 0))+ (label 26)+ (parent 25)+ (unrealized (0 2))+ (maps ((0 1) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton ns (vars (n2 n1 text) (a b b-0 name))- (deflistener n2) (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))+ (deflistener n2) (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b-0))- (precedes ((1 1) (2 1)) ((2 2) (0 0)) ((2 2) (1 2)))+ (precedes ((0 1) (2 1)) ((2 2) (0 2)) ((2 2) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n2)- (operation nonce-test (displaced 3 2 init 3) n2 (0 0)+ (goals+ (forall ((a b name) (n2 text) (z0 z1 strd))+ (implies+ (and (p "resp" z0 3) (p "resp" "n2" z0 n2) (p "resp" "a" z0 a)+ (p "resp" "b" z0 b) (p "" z1 1) (p "" "x" z1 n2)+ (non (privk a)) (non (privk b)) (uniq n2)) (false))))+ (comment "Responder point of view"+ "Failed secrecy goal: nonce n2 not revealed")+ (operation nonce-test (displaced 3 2 init 3) n2 (0 2) (enc n1 n2 (pubk a))) (strand-map 0 1 2)- (traces ((recv n2))+ (traces ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))- (recv (enc n2 (pubk b))))+ (recv (enc n2 (pubk b)))) ((recv n2)) ((send (enc n1 a (pubk b-0))) (recv (enc n1 n2 (pubk a))) (send (enc n2 (pubk b-0)))))- (label 31)- (parent 30)+ (label 27)+ (parent 26) (realized) (shape)- (satisfies (no (fact false) (a a) (b b) (n2 n2) (z0 1) (z1 0)))+ (satisfies (no (fact false) (a a) (b b) (n2 n2) (z0 0) (z1 1))) (maps ((0 1) ((a a) (b b) (n2 n2) (n1 n1))))- (origs (n2 (1 1))))+ (origs (n2 (0 1)))) (defskeleton ns (vars (n2 n1 text) (a b b-0 b-1 name))- (deflistener n2) (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))+ (deflistener n2) (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b-0)) (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b-1))- (precedes ((1 1) (2 1)) ((1 1) (3 1)) ((2 2) (1 2)) ((3 2) (0 0)))+ (precedes ((0 1) (2 1)) ((0 1) (3 1)) ((2 2) (1 0)) ((3 2) (0 2))) (non-orig (privk a) (privk b)) (uniq-orig n2)- (operation nonce-test (added-strand init 3) n2 (0 0)+ (goals+ (forall ((a b name) (n2 text) (z0 z1 strd))+ (implies+ (and (p "resp" z0 3) (p "resp" "n2" z0 n2) (p "resp" "a" z0 a)+ (p "resp" "b" z0 b) (p "" z1 1) (p "" "x" z1 n2)+ (non (privk a)) (non (privk b)) (uniq n2)) (false))))+ (comment "Responder point of view"+ "Failed secrecy goal: nonce n2 not revealed")+ (operation nonce-test (added-strand init 3) n2 (0 2) (enc n1 n2 (pubk a))) (strand-map 0 1 2)- (traces ((recv n2))+ (traces ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))- (recv (enc n2 (pubk b))))+ (recv (enc n2 (pubk b)))) ((recv n2)) ((send (enc n1 a (pubk b-0))) (recv (enc n1 n2 (pubk a))) (send (enc n2 (pubk b-0)))) ((send (enc n1 a (pubk b-1))) (recv (enc n1 n2 (pubk a))) (send (enc n2 (pubk b-1)))))- (label 32)- (parent 30)+ (label 28)+ (parent 26) (realized) (shape)- (satisfies (no (fact false) (a a) (b b) (n2 n2) (z0 1) (z1 0)))+ (satisfies (no (fact false) (a a) (b b) (n2 n2) (z0 0) (z1 1))) (maps ((0 1) ((a a) (b b) (n2 n2) (n1 n1))))- (origs (n2 (1 1))))+ (origs (n2 (0 1)))) (comment "Nothing left to do") @@ -972,8 +1060,9 @@ (send (enc n2 (pubk b)))) ((send (enc n1-0 a (pubk b))) (recv (enc n1-0 n2-0 (pubk a))) (send (enc n2-0 (pubk b)))))- (label 33)+ (label 29) (unrealized (0 1) (1 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0)))) (origs (n1 (0 0)) (n1-0 (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -982,14 +1071,25 @@ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b)) (non-orig (privk a) (privk b)) (uniq-orig n1)+ (goals+ (forall ((n1 n1-0 n2 n2-0 text) (a b name) (z z-0 strd))+ (implies+ (and (p "init" z 3) (p "init" z-0 3) (p "init" "n1" z n1)+ (p "init" "n2" z n2) (p "init" "a" z a) (p "init" "b" z b)+ (p "init" "n1" z-0 n1-0) (p "init" "n2" z-0 n2-0)+ (p "init" "a" z-0 a) (p "init" "b" z-0 b) (non (privk a))+ (non (privk b)) (uniq-at n1 z 0) (uniq-at n1-0 z-0 0))+ (= z z-0))))+ (comment "Double initiator point of view") (operation collapsed 1 0) (strand-map 0 0) (traces ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a))) (send (enc n2 (pubk b)))))- (label 34)- (parent 33)+ (label 30)+ (parent 29) (unrealized (0 1))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n1-0 n1) (n2 n2) (n2-0 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -1000,6 +1100,16 @@ (precedes ((1 0) (2 0)) ((2 1) (1 1))) (non-orig (privk a) (privk b)) (uniq-orig n1 n1-0)+ (goals+ (forall ((n1 n1-0 n2 n2-0 text) (a b name) (z z-0 strd))+ (implies+ (and (p "init" z 3) (p "init" z-0 3) (p "init" "n1" z n1)+ (p "init" "n2" z n2) (p "init" "a" z a) (p "init" "b" z b)+ (p "init" "n1" z-0 n1-0) (p "init" "n2" z-0 n2-0)+ (p "init" "a" z-0 a) (p "init" "b" z-0 b) (non (privk a))+ (non (privk b)) (uniq-at n1 z 0) (uniq-at n1-0 z-0 0))+ (= z z-0))))+ (comment "Double initiator point of view") (operation nonce-test (added-strand resp 2) n1-0 (1 1) (enc n1-0 a (pubk b))) (strand-map 0 1)@@ -1009,9 +1119,10 @@ ((send (enc n1-0 a (pubk b))) (recv (enc n1-0 n2-0 (pubk a))) (send (enc n2-0 (pubk b)))) ((recv (enc n1-0 a (pubk b))) (send (enc n1-0 n2-1 (pubk a)))))- (label 35)- (parent 33)+ (label 31)+ (parent 29) (unrealized (0 1) (1 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -1021,6 +1132,16 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1)+ (goals+ (forall ((n1 n1-0 n2 n2-0 text) (a b name) (z z-0 strd))+ (implies+ (and (p "init" z 3) (p "init" z-0 3) (p "init" "n1" z n1)+ (p "init" "n2" z n2) (p "init" "a" z a) (p "init" "b" z b)+ (p "init" "n1" z-0 n1-0) (p "init" "n2" z-0 n2-0)+ (p "init" "a" z-0 a) (p "init" "b" z-0 b) (non (privk a))+ (non (privk b)) (uniq-at n1 z 0) (uniq-at n1-0 z-0 0))+ (= z z-0))))+ (comment "Double initiator point of view") (operation nonce-test (added-strand resp 2) n1 (0 1) (enc n1 a (pubk b))) (strand-map 0)@@ -1028,9 +1149,10 @@ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a))) (send (enc n2 (pubk b)))) ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 (pubk a)))))- (label 36)- (parent 34)+ (label 32)+ (parent 30) (unrealized (0 1))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n1-0 n1) (n2 n2) (n2-0 n2)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -1042,6 +1164,16 @@ (precedes ((1 0) (2 0)) ((2 1) (1 1))) (non-orig (privk a) (privk b)) (uniq-orig n1 n1-0)+ (goals+ (forall ((n1 n1-0 n2 n2-0 text) (a b name) (z z-0 strd))+ (implies+ (and (p "init" z 3) (p "init" z-0 3) (p "init" "n1" z n1)+ (p "init" "n2" z n2) (p "init" "a" z a) (p "init" "b" z b)+ (p "init" "n1" z-0 n1-0) (p "init" "n2" z-0 n2-0)+ (p "init" "a" z-0 a) (p "init" "b" z-0 b) (non (privk a))+ (non (privk b)) (uniq-at n1 z 0) (uniq-at n1-0 z-0 0))+ (= z z-0))))+ (comment "Double initiator point of view") (operation nonce-test (contracted (n2-1 n2-0)) n1-0 (1 1) (enc n1-0 n2-0 (pubk a)) (enc n1-0 a (pubk b))) (strand-map 0 1 2)@@ -1051,9 +1183,10 @@ ((send (enc n1-0 a (pubk b))) (recv (enc n1-0 n2-0 (pubk a))) (send (enc n2-0 (pubk b)))) ((recv (enc n1-0 a (pubk b))) (send (enc n1-0 n2-0 (pubk a)))))- (label 37)- (parent 35)+ (label 33)+ (parent 31) (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -1063,6 +1196,16 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1)+ (goals+ (forall ((n1 n1-0 n2 n2-0 text) (a b name) (z z-0 strd))+ (implies+ (and (p "init" z 3) (p "init" z-0 3) (p "init" "n1" z n1)+ (p "init" "n2" z n2) (p "init" "a" z a) (p "init" "b" z b)+ (p "init" "n1" z-0 n1-0) (p "init" "n2" z-0 n2-0)+ (p "init" "a" z-0 a) (p "init" "b" z-0 b) (non (privk a))+ (non (privk b)) (uniq-at n1 z 0) (uniq-at n1-0 z-0 0))+ (= z z-0))))+ (comment "Double initiator point of view") (operation nonce-test (contracted (n2-0 n2)) n1 (0 1) (enc n1 n2 (pubk a)) (enc n1 a (pubk b))) (strand-map 0 1)@@ -1070,8 +1213,8 @@ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a))) (send (enc n2 (pubk b)))) ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))))- (label 38)- (parent 36)+ (label 34)+ (parent 32) (realized) (shape) (satisfies yes)@@ -1087,6 +1230,16 @@ (precedes ((0 0) (3 0)) ((1 0) (2 0)) ((2 1) (1 1)) ((3 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1 n1-0)+ (goals+ (forall ((n1 n1-0 n2 n2-0 text) (a b name) (z z-0 strd))+ (implies+ (and (p "init" z 3) (p "init" z-0 3) (p "init" "n1" z n1)+ (p "init" "n2" z n2) (p "init" "a" z a) (p "init" "b" z b)+ (p "init" "n1" z-0 n1-0) (p "init" "n2" z-0 n2-0)+ (p "init" "a" z-0 a) (p "init" "b" z-0 b) (non (privk a))+ (non (privk b)) (uniq-at n1 z 0) (uniq-at n1-0 z-0 0))+ (= z z-0))))+ (comment "Double initiator point of view") (operation nonce-test (added-strand resp 2) n1 (0 1) (enc n1 a (pubk b))) (strand-map 0 1 2)@@ -1097,9 +1250,10 @@ (send (enc n2-0 (pubk b)))) ((recv (enc n1-0 a (pubk b))) (send (enc n1-0 n2-0 (pubk a)))) ((recv (enc n1 a (pubk b))) (send (enc n1 n2-1 (pubk a)))))- (label 39)- (parent 37)+ (label 35)+ (parent 33) (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -1111,6 +1265,16 @@ (precedes ((0 0) (3 0)) ((1 0) (2 0)) ((2 1) (1 1)) ((3 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1 n1-0)+ (goals+ (forall ((n1 n1-0 n2 n2-0 text) (a b name) (z z-0 strd))+ (implies+ (and (p "init" z 3) (p "init" z-0 3) (p "init" "n1" z n1)+ (p "init" "n2" z n2) (p "init" "a" z a) (p "init" "b" z b)+ (p "init" "n1" z-0 n1-0) (p "init" "n2" z-0 n2-0)+ (p "init" "a" z-0 a) (p "init" "b" z-0 b) (non (privk a))+ (non (privk b)) (uniq-at n1 z 0) (uniq-at n1-0 z-0 0))+ (= z z-0))))+ (comment "Double initiator point of view") (operation nonce-test (contracted (n2-1 n2-0)) n1 (0 1) (enc n1 n2-0 (pubk a)) (enc n1 a (pubk b))) (strand-map 0 1 2 3)@@ -1121,13 +1285,13 @@ (send (enc n2 (pubk b)))) ((recv (enc n1-0 a (pubk b))) (send (enc n1-0 n2 (pubk a)))) ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 (pubk a)))))- (label 40)- (parent 39)+ (label 36)+ (parent 35) (realized) (shape) (satisfies- (no (= z z-0) (n1 n1) (n1-0 n1-0) (n2 n2-0) (n2-0 n2) (a a) (b b)- (z 0) (z-0 1)))+ (no (= z z-0) (n1 n1-0) (n1-0 n1) (n2 n2) (n2-0 n2-0) (a a) (b b)+ (z 1) (z-0 0))) (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2-0) (n2-0 n2)))) (origs (n1 (0 0)) (n1-0 (1 0)))) @@ -1152,8 +1316,8 @@ (defskeleton nsl-typeless (vars (n1 mesg) (n2 text) (a b name))- (deflistener n2) (defstrand resp 2 (n1 n1) (n2 n2) (b b) (a a))+ (deflistener n2) (non-orig (privk a) (privk b)) (uniq-orig n2) (goals@@ -1163,71 +1327,95 @@ (p "resp" "b" z b) (p "resp" "a" z a) (p "" "x" z-0 n2) (non (privk a)) (non (privk b)) (uniq n2)) (false)))) (comment "Shows typeflaw in typeless NSL")- (traces ((recv n2))- ((recv (enc a n1 (pubk b))) (send (enc n1 n2 b (pubk a)))))- (label 41)- (unrealized (0 0))+ (traces ((recv (enc a n1 (pubk b))) (send (enc n1 n2 b (pubk a))))+ ((recv n2)))+ (label 37)+ (unrealized (1 0)) (preskeleton)- (origs (n2 (1 1)))+ (maps)+ (origs (n2 (0 1))) (comment "Not a skeleton")) (defskeleton nsl-typeless (vars (n1 mesg) (n2 text) (a b name))- (deflistener n2) (defstrand resp 2 (n1 n1) (n2 n2) (b b) (a a))- (precedes ((1 1) (0 0)))+ (deflistener n2)+ (precedes ((0 1) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n2)- (traces ((recv n2))- ((recv (enc a n1 (pubk b))) (send (enc n1 n2 b (pubk a)))))- (label 42)- (parent 41)- (unrealized (0 0))- (origs (n2 (1 1)))+ (goals+ (forall ((n2 text) (a b name) (z z-0 strd))+ (implies+ (and (p "resp" z 2) (p "" z-0 1) (p "resp" "n2" z n2)+ (p "resp" "b" z b) (p "resp" "a" z a) (p "" "x" z-0 n2)+ (non (privk a)) (non (privk b)) (uniq n2)) (false))))+ (comment "Shows typeflaw in typeless NSL")+ (traces ((recv (enc a n1 (pubk b))) (send (enc n1 n2 b (pubk a))))+ ((recv n2)))+ (label 38)+ (parent 37)+ (unrealized (1 0))+ (maps ((0 1) ((n2 n2) (a a) (b b) (n1 n1))))+ (origs (n2 (0 1))) (comment "2 in cohort - 2 not yet seen")) (defskeleton nsl-typeless (vars (n2 n1 text) (a b name))- (deflistener n2) (defstrand resp 2 (n1 n1) (n2 n2) (b b) (a a))+ (deflistener n2) (defstrand init 3 (n2 n2) (n1 n1) (a a) (b b))- (precedes ((1 1) (2 1)) ((2 2) (0 0)))+ (precedes ((0 1) (2 1)) ((2 2) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n2)- (operation nonce-test (added-strand init 3) n2 (0 0)+ (goals+ (forall ((n2 text) (a b name) (z z-0 strd))+ (implies+ (and (p "resp" z 2) (p "" z-0 1) (p "resp" "n2" z n2)+ (p "resp" "b" z b) (p "resp" "a" z a) (p "" "x" z-0 n2)+ (non (privk a)) (non (privk b)) (uniq n2)) (false))))+ (comment "Shows typeflaw in typeless NSL")+ (operation nonce-test (added-strand init 3) n2 (1 0) (enc n1 n2 b (pubk a))) (strand-map 0 1)- (traces ((recv n2))- ((recv (enc a n1 (pubk b))) (send (enc n1 n2 b (pubk a))))+ (traces ((recv (enc a n1 (pubk b))) (send (enc n1 n2 b (pubk a))))+ ((recv n2)) ((send (enc a n1 (pubk b))) (recv (enc n1 n2 b (pubk a))) (send (enc n2 (pubk b)))))- (label 43)- (parent 42)- (unrealized (0 0))+ (label 39)+ (parent 38)+ (unrealized (1 0)) (dead)+ (maps ((0 1) ((n2 n2) (a a) (b b) (n1 n1)))) (comment "empty cohort")) (defskeleton nsl-typeless (vars (n2 n2-0 text) (a b a-0 name))- (deflistener n2) (defstrand resp 2 (n1 a-0) (n2 n2) (b b) (a a))+ (deflistener n2) (defstrand resp 2 (n1 (cat n2 b)) (n2 n2-0) (b a) (a a-0))- (precedes ((1 1) (2 0)) ((2 1) (0 0)))+ (precedes ((0 1) (2 0)) ((2 1) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n2)- (operation nonce-test (added-strand resp 2) n2 (0 0)+ (goals+ (forall ((n2 text) (a b name) (z z-0 strd))+ (implies+ (and (p "resp" z 2) (p "" z-0 1) (p "resp" "n2" z n2)+ (p "resp" "b" z b) (p "resp" "a" z a) (p "" "x" z-0 n2)+ (non (privk a)) (non (privk b)) (uniq n2)) (false))))+ (comment "Shows typeflaw in typeless NSL")+ (operation nonce-test (added-strand resp 2) n2 (1 0) (enc a-0 n2 b (pubk a))) (strand-map 0 1)- (traces ((recv n2))- ((recv (enc a a-0 (pubk b))) (send (enc a-0 n2 b (pubk a))))+ (traces ((recv (enc a a-0 (pubk b))) (send (enc a-0 n2 b (pubk a))))+ ((recv n2)) ((recv (enc a-0 n2 b (pubk a))) (send (enc (cat n2 b) n2-0 a (pubk a-0)))))- (label 44)- (parent 42)+ (label 40)+ (parent 38) (realized) (shape)- (satisfies (no (fact false) (n2 n2) (a a) (b b) (z 1) (z-0 0)))+ (satisfies (no (fact false) (n2 n2) (a a) (b b) (z 0) (z-0 1))) (maps ((0 1) ((n2 n2) (a a) (b b) (n1 a-0))))- (origs (n2 (1 1))))+ (origs (n2 (0 1)))) (comment "Nothing left to do")
+ tst/goalsvar.scm view
@@ -0,0 +1,229 @@+(herald goalsvar)++;;; Section 1 --- Examples from CPSA and Formal Security Goals++;;; Needham-Schroeder from Section 10 of the CPSA Primer++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace+ (send (enc n1 a (pubk b)))+ (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace+ (recv (enc n1 a (pubk b)))+ (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b)))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defgoal ns+ (forall ((b name) (n1 text) (z0 strd))+ (implies+ (and + (strand init z0 3 (n1 n1) (b b))+ (non (privk b)) (uniq n1))+ (exists ((z1 strd))+ (strand resp z1 2 (b b)))))+ (comment "Initiator point of view")+ (comment "Authentication goal: agreement on name b"))++(defgoal ns+ (forall ((b name) (n1 text) (z0 strd))+ (implies+ (and (strand init z0 3 (n1 n1) (b b))+ (non (privk b)) (uniq n1))+ (exists ((z1 strd))+ (and + (strand resp z1 2 (b b))+ (prec z1 1 z0 2)))))+ (comment "Prec example"))++(defgoal ns+ (forall ((a b name) (n2 text) (z0 strd))+ (implies+ (and (strand resp z0 3 (n2 n2) (a a) (b b))+ (non (privk a)) (uniq n2))+ (exists ((z1 strd))+ (strand init z1 2 (b b)))))+ (comment "Responder point of view")+ (comment "Failed authentication goal: agreement on name b"))++(defprotocol nsl basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace+ (send (enc n1 a (pubk b)))+ (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace+ (recv (enc n1 a (pubk b)))+ (send (enc n1 n2 b (pubk a)))+ (recv (enc n2 (pubk b)))))+ (comment "Needham-Schroeder-Lowe with no role origination assumptions"))++(defgoal nsl+ (forall ((a b name) (n2 text) (z0 strd))+ (implies+ (and (strand resp z0 3 (n2 n2) (a a) (b b))+ (non (privk a)) (uniq n2))+ (exists ((z1 strd))+ (strand init z1 2 (b b)))))+ (comment "Responder point of view")+ (comment "Authentication goal: agreement on name b"))++(defgoal ns+ (forall ((a b name) (n1 text) (z0 z1 strd))+ (implies+ (and (strand init z0 3 (n1 n1) (a a) (b b))+ (listener z1 n1)+ (non (privk a)) (non (privk b)) (uniq n1))+ (false)))+ (comment "Initiator point of view")+ (comment "Secrecy goal: nonce n1 not revealed"))++(defprotocol unilateral basic+ (defrole init+ (vars (a name) (n text))+ (trace+ (send (enc n (pubk a)))+ (recv n)))+ (defrole resp+ (vars (a name) (n text))+ (trace+ (recv (enc n (pubk a)))+ (send n)))+ (comment "Unilateral authentication"))++(defgoal unilateral+ (forall ((a name) (n text)+ (z0 strd))+ (implies+ (and (strand init z0 2 (n n) (a a))+ (non (privk a)) (uniq n))+ (exists ((z1 strd))+ (strand resp z1 2 (a a)))))+ (comment "Unilateral authentication goal"))++;;; Does initiator satisfy the unilateral authentication goal?++;;; Note that the goal requires translation of some of the role+;;; specific predicates.+(defgoal ns+ (forall ((a name) (n text) (z0 strd))+ (implies+ (and (strand init z0 2 (n1 n) (b a))+ (non (privk a)) (uniq n))+ (exists ((z1 strd))+ (strand resp z1 2 (b a)))))+ (comment "Initiator authentication goal")+ (comment "Same as unilateral goal under the predicate mapping:")+ (comment (p "init" "n") "->" (p "init" "n1") "and")+ (comment (p "init" "a") "->" (p "init" "b") "and")+ (comment (p "resp" "a") "->" (p "resp" "b")))++;;; Does responder satisfy the unilateral authentication goal?++(defgoal ns+ (forall ((a name) (n text) (z0 strd))+ (implies+ (and (strand resp z0 3 (n2 n) (a a))+ (non (privk a)) (uniq n))+ (exists ((z1 strd))+ (strand init z1 3 (a a)))))+ (comment "Responder authentication goal")+ (comment "Same as unilateral goal under the predicate mapping:")+ (comment (p "init" 1) "->" (p "resp" 2) "and")+ (comment (p "init" "n") "->" (p "resp" "n2") "and")+ (comment (p "init" "a") "->" (p "resp" "a") "and")+ (comment (p "resp" 1) "->" (p "init" 2) "and")+ (comment (p "resp" "a") "->" (p "init" "a")))++(defgoal ns+ (forall ((a b name) (n text) (z0 strd))+ (implies+ (and (strand init z0 2 (n1 n) (a a) (b b))+ (non (privk a)) (non (privk b)) (uniq n))+ (exists ((z1 strd))+ (strand resp z1 2 (b b)))))+ (forall ((a b name) (n text) (z0 strd))+ (implies+ (and (strand init z0 2 (n1 n) (a a) (b b))+ (non (privk a)) (non (privk b)) (uniq n))+ (exists ((z1 strd))+ (strand resp z1 2 (a a)))))+ (comment "Two initiator authentication goals"))++;;; The shape analysis sentence as input (kind of useless)++(defgoal ns+ (forall ((n1 n2 text) (b a name) (z strd))+ (implies+ (and (strand init z 3 (n1 n1) (n2 n2) (a a) (b b))+ (non (privk b))+ (uniq-at n1 z 0))+ (exists ((n2-0 text) (z-0 strd))+ (and (strand resp z-0 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (prec z 0 z-0 0) (prec z-0 1 z 1)))))+ (comment "Shape analysis sentence"))++;;; Section 2 --- Additional Examples++(defgoal ns+ (forall ((a b name) (n2 text) (z0 z1 strd))+ (implies+ (and+ (strand resp z0 3 (n2 n2) (a a) (b b))+ ;; Still have to add support for a listener formula: + (listener z1 n2)+ (non (privk a)) (non (privk b)) (uniq n2))+ (false)))+ (comment "Responder point of view")+ (comment "Failed secrecy goal: nonce n2 not revealed"))++;;; Double initiator point of view+(defskeleton ns+ (vars (a b name) (n1 n1-0 text))+ (defstrand init 3 (a a) (b b) (n1 n1))+ (defstrand init 3 (a a) (b b) (n1 n1-0))+ (non-orig (privk b) (privk a))+ (uniq-orig n1 n1-0)+ (goals+ (forall ((n1 n1-0 n2 n2-0 text) (a b name) (z z-0 strd))+ (implies+ (and + (strand init z 3 (n1 n1) (n2 n2) (a a) (b b))+ (strand init z-0 3 (n1 n1-0) (n2 n2-0) (a a) (b b))+ (non (privk a))+ (non (privk b)) (uniq-at n1 z 0) (uniq-at n1-0 z-0 0))+ (= z z-0))))+ (comment "Double initiator point of view"))++(defprotocol nsl-typeless basic+ (defrole init+ (vars (a b name) (n1 text) (n2 mesg))+ (trace+ (send (enc a n1 (pubk b)))+ (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 text) (n1 mesg))+ (trace+ (recv (enc a n1 (pubk b)))+ (send (enc n1 n2 b (pubk a)))+ (recv (enc n2 (pubk b)))))+ (comment "Needham-Schroeder-Lowe with untyped nonces"))++;;; The responder point of view+(defgoal nsl-typeless+ (forall ((n2 text) (a b name) (z z-0 strd))+ (implies+ (and (strand resp z 2 (n2 n2) (b b) (a a))+ (listener z-0 n2)+ (non (privk a)) (non (privk b)) (uniq n2))+ (false)))+ (comment "Shows typeflaw in typeless NSL"))
+ tst/goalsvar.tst view
@@ -0,0 +1,1358 @@+(herald goalsvar)++(comment "CPSA 4.4.7")+(comment "All input read from tst/goalsvar.scm")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (n1 n2 text) (b a name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (non-orig (privk b))+ (uniq-orig n1)+ (goals+ (forall ((b name) (n1 text) (z0 strd))+ (implies+ (and (strand init z0 3 (n1 n1) (b b)) (non (privk b)) (uniq n1))+ (exists ((z1 strd)) (strand resp z1 2 (b b))))))+ (comment "Initiator point of view"+ "Authentication goal: agreement on name b")+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))))+ (label 0)+ (unrealized (0 1))+ (maps ((0) ((b b) (n1 n1) (a a) (n2 n2))))+ (origs (n1 (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 n2-0 text) (b a name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk b))+ (uniq-orig n1)+ (goals+ (forall ((b name) (n1 text) (z0 strd))+ (implies+ (and (strand init z0 3 (n1 n1) (b b)) (non (privk b)) (uniq n1))+ (exists ((z1 strd)) (strand resp z1 2 (b b))))))+ (comment "Initiator point of view"+ "Authentication goal: agreement on name b")+ (operation nonce-test (added-strand resp 2) n1 (0 1)+ (enc n1 a (pubk b)))+ (strand-map 0)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 (pubk a)))))+ (label 1)+ (parent 0)+ (realized)+ (shape)+ (satisfies yes)+ (maps ((0) ((b b) (n1 n1) (a a) (n2 n2))))+ (origs (n1 (0 0))))++(comment "Nothing left to do")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (n1 n2 text) (b a name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (non-orig (privk b))+ (uniq-orig n1)+ (goals+ (forall ((b name) (n1 text) (z0 strd))+ (implies+ (and (strand init z0 3 (n1 n1) (b b)) (non (privk b)) (uniq n1))+ (exists ((z1 strd))+ (and (strand resp z1 2 (b b)) (prec z1 1 z0 2))))))+ (comment "Prec example")+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))))+ (label 2)+ (unrealized (0 1))+ (maps ((0) ((b b) (n1 n1) (a a) (n2 n2))))+ (origs (n1 (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 n2-0 text) (b a name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk b))+ (uniq-orig n1)+ (goals+ (forall ((b name) (n1 text) (z0 strd))+ (implies+ (and (strand init z0 3 (n1 n1) (b b)) (non (privk b)) (uniq n1))+ (exists ((z1 strd))+ (and (strand resp z1 2 (b b)) (prec z1 1 z0 2))))))+ (comment "Prec example")+ (operation nonce-test (added-strand resp 2) n1 (0 1)+ (enc n1 a (pubk b)))+ (strand-map 0)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 (pubk a)))))+ (label 3)+ (parent 2)+ (realized)+ (shape)+ (satisfies yes)+ (maps ((0) ((b b) (n1 n1) (a a) (n2 n2))))+ (origs (n1 (0 0))))++(comment "Nothing left to do")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (n2 n1 text) (a b name))+ (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))+ (non-orig (privk a))+ (uniq-orig n2)+ (goals+ (forall ((a b name) (n2 text) (z0 strd))+ (implies+ (and (strand resp z0 3 (n2 n2) (a a) (b b)) (non (privk a))+ (uniq n2)) (exists ((z1 strd)) (strand init z1 2 (b b))))))+ (comment "Responder point of view"+ "Failed authentication goal: agreement on name b")+ (traces+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b)))))+ (label 4)+ (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))+ (origs (n2 (0 1)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n2 n1 text) (a b b-0 name))+ (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b-0))+ (precedes ((0 1) (1 1)) ((1 2) (0 2)))+ (non-orig (privk a))+ (uniq-orig n2)+ (goals+ (forall ((a b name) (n2 text) (z0 strd))+ (implies+ (and (strand resp z0 3 (n2 n2) (a a) (b b)) (non (privk a))+ (uniq n2)) (exists ((z1 strd)) (strand init z1 2 (b b))))))+ (comment "Responder point of view"+ "Failed authentication goal: agreement on name b")+ (operation nonce-test (added-strand init 3) n2 (0 2)+ (enc n1 n2 (pubk a)))+ (strand-map 0)+ (traces+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b))))+ ((send (enc n1 a (pubk b-0))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b-0)))))+ (label 5)+ (parent 4)+ (realized)+ (shape)+ (satisfies (no (p "init" "b" z1 b) (a a) (b b) (n2 n2) (z0 0)))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))+ (origs (n2 (0 1))))++(comment "Nothing left to do")++(defprotocol nsl basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment+ "Needham-Schroeder-Lowe with no role origination assumptions"))++(defskeleton nsl+ (vars (n2 n1 text) (a b name))+ (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))+ (non-orig (privk a))+ (uniq-orig n2)+ (goals+ (forall ((a b name) (n2 text) (z0 strd))+ (implies+ (and (strand resp z0 3 (n2 n2) (a a) (b b)) (non (privk a))+ (uniq n2)) (exists ((z1 strd)) (strand init z1 2 (b b))))))+ (comment "Responder point of view"+ "Authentication goal: agreement on name b")+ (traces+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))+ (recv (enc n2 (pubk b)))))+ (label 6)+ (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))+ (origs (n2 (0 1)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton nsl+ (vars (n2 n1 text) (a b name))+ (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (precedes ((0 1) (1 1)) ((1 2) (0 2)))+ (non-orig (privk a))+ (uniq-orig n2)+ (goals+ (forall ((a b name) (n2 text) (z0 strd))+ (implies+ (and (strand resp z0 3 (n2 n2) (a a) (b b)) (non (privk a))+ (uniq n2)) (exists ((z1 strd)) (strand init z1 2 (b b))))))+ (comment "Responder point of view"+ "Authentication goal: agreement on name b")+ (operation nonce-test (added-strand init 3) n2 (0 2)+ (enc n1 n2 b (pubk a)))+ (strand-map 0)+ (traces+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))+ (recv (enc n2 (pubk b))))+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (label 7)+ (parent 6)+ (realized)+ (shape)+ (satisfies yes)+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))+ (origs (n2 (0 1))))++(comment "Nothing left to do")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (deflistener n1)+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (goals+ (forall ((a b name) (n1 text) (z0 z1 strd))+ (implies+ (and (strand init z0 3 (n1 n1) (a a) (b b)) (listener z1 n1)+ (non (privk a)) (non (privk b)) (uniq n1)) (false))))+ (comment "Initiator point of view"+ "Secrecy goal: nonce n1 not revealed")+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))) ((recv n1) (send n1)))+ (label 8)+ (unrealized (0 1) (1 0))+ (preskeleton)+ (maps)+ (origs (n1 (0 0)))+ (comment "Not a skeleton"))++(defskeleton ns+ (vars (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (deflistener n1)+ (precedes ((0 0) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (goals+ (forall ((a b name) (n1 text) (z0 z1 strd))+ (implies+ (and (strand init z0 3 (n1 n1) (a a) (b b)) (listener z1 n1)+ (non (privk a)) (non (privk b)) (uniq n1)) (false))))+ (comment "Initiator point of view"+ "Secrecy goal: nonce n1 not revealed")+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))) ((recv n1) (send n1)))+ (label 9)+ (parent 8)+ (unrealized (0 1) (1 0))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n2 n2))))+ (origs (n1 (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (deflistener n1)+ (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (precedes ((0 0) (2 0)) ((2 1) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (goals+ (forall ((a b name) (n1 text) (z0 z1 strd))+ (implies+ (and (strand init z0 3 (n1 n1) (a a) (b b)) (listener z1 n1)+ (non (privk a)) (non (privk b)) (uniq n1)) (false))))+ (comment "Initiator point of view"+ "Secrecy goal: nonce n1 not revealed")+ (operation nonce-test (added-strand resp 2) n1 (1 0)+ (enc n1 a (pubk b)))+ (strand-map 0 1)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))) ((recv n1) (send n1))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 (pubk a)))))+ (label 10)+ (parent 9)+ (unrealized (0 1) (1 0))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n2 n2))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n2 text) (a b name))+ (defstrand init 3 (n1 n2) (n2 n2) (a a) (b b))+ (deflistener n2)+ (defstrand resp 2 (n2 n2) (n1 n2) (b b) (a a))+ (precedes ((0 0) (2 0)) ((0 2) (1 0)) ((2 1) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-orig n2)+ (goals+ (forall ((a b name) (n1 text) (z0 z1 strd))+ (implies+ (and (strand init z0 3 (n1 n1) (a a) (b b)) (listener z1 n1)+ (non (privk a)) (non (privk b)) (uniq n1)) (false))))+ (comment "Initiator point of view"+ "Secrecy goal: nonce n1 not revealed")+ (operation nonce-test (displaced 3 0 init 3) n2-0 (1 0)+ (enc n2-0 n2-0 (pubk a)) (enc n2-0 a (pubk b)))+ (strand-map 0 1 2)+ (traces+ ((send (enc n2 a (pubk b))) (recv (enc n2 n2 (pubk a)))+ (send (enc n2 (pubk b)))) ((recv n2) (send n2))+ ((recv (enc n2 a (pubk b))) (send (enc n2 n2 (pubk a)))))+ (label 11)+ (parent 10)+ (unrealized (0 1) (1 0))+ (maps ((0 1) ((a a) (b b) (n1 n2) (n2 n2))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n2) (n2 n2) (a a) (b b))+ (deflistener n2)+ (defstrand resp 2 (n2 n2) (n1 n2) (b b) (a a))+ (defstrand resp 2 (n2 n2-0) (n1 n2) (b b) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 2) (1 0)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-orig n2)+ (goals+ (forall ((a b name) (n1 text) (z0 z1 strd))+ (implies+ (and (strand init z0 3 (n1 n1) (a a) (b b)) (listener z1 n1)+ (non (privk a)) (non (privk b)) (uniq n1)) (false))))+ (comment "Initiator point of view"+ "Secrecy goal: nonce n1 not revealed")+ (operation nonce-test (added-strand resp 2) n2 (1 0) (enc n2 (pubk b))+ (enc n2 n2 (pubk a)) (enc n2 a (pubk b)))+ (strand-map 0 1 2)+ (traces+ ((send (enc n2 a (pubk b))) (recv (enc n2 n2 (pubk a)))+ (send (enc n2 (pubk b)))) ((recv n2) (send n2))+ ((recv (enc n2 a (pubk b))) (send (enc n2 n2 (pubk a))))+ ((recv (enc n2 a (pubk b))) (send (enc n2 n2-0 (pubk a)))))+ (label 12)+ (parent 11)+ (unrealized (0 1) (1 0))+ (dead)+ (maps ((0 1) ((a a) (b b) (n1 n2) (n2 n2))))+ (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol unilateral basic+ (defrole init+ (vars (a name) (n text))+ (trace (send (enc n (pubk a))) (recv n)))+ (defrole resp+ (vars (a name) (n text))+ (trace (recv (enc n (pubk a))) (send n)))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Unilateral authentication"))++(defskeleton unilateral+ (vars (n text) (a name))+ (defstrand init 2 (n n) (a a))+ (non-orig (privk a))+ (uniq-orig n)+ (goals+ (forall ((a name) (n text) (z0 strd))+ (implies+ (and (strand init z0 2 (n n) (a a)) (non (privk a)) (uniq n))+ (exists ((z1 strd)) (strand resp z1 2 (a a))))))+ (comment "Unilateral authentication goal")+ (traces ((send (enc n (pubk a))) (recv n)))+ (label 13)+ (unrealized (0 1))+ (maps ((0) ((a a) (n n))))+ (origs (n (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton unilateral+ (vars (n text) (a name))+ (defstrand init 2 (n n) (a a))+ (defstrand resp 2 (n n) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig n)+ (goals+ (forall ((a name) (n text) (z0 strd))+ (implies+ (and (strand init z0 2 (n n) (a a)) (non (privk a)) (uniq n))+ (exists ((z1 strd)) (strand resp z1 2 (a a))))))+ (comment "Unilateral authentication goal")+ (operation nonce-test (added-strand resp 2) n (0 1) (enc n (pubk a)))+ (strand-map 0)+ (traces ((send (enc n (pubk a))) (recv n))+ ((recv (enc n (pubk a))) (send n)))+ (label 14)+ (parent 13)+ (realized)+ (shape)+ (satisfies yes)+ (maps ((0) ((a a) (n n))))+ (origs (n (0 0))))++(comment "Nothing left to do")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (n n2 text) (a a-0 name))+ (defstrand init 2 (n1 n) (n2 n2) (a a-0) (b a))+ (non-orig (privk a))+ (uniq-orig n)+ (goals+ (forall ((a name) (n text) (z0 strd))+ (implies+ (and (strand init z0 2 (n1 n) (b a)) (non (privk a)) (uniq n))+ (exists ((z1 strd)) (strand resp z1 2 (b a))))))+ (comment "Initiator authentication goal"+ "Same as unilateral goal under the predicate mapping:"+ (p "init" "n") "->" (p "init" "n1") "and" (p "init" "a") "->"+ (p "init" "b") "and" (p "resp" "a") "->" (p "resp" "b"))+ (traces ((send (enc n a-0 (pubk a))) (recv (enc n n2 (pubk a-0)))))+ (label 15)+ (unrealized (0 1))+ (maps ((0) ((a a) (n n) (a-0 a-0) (n2 n2))))+ (origs (n (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n n2 n2-0 text) (a a-0 name))+ (defstrand init 2 (n1 n) (n2 n2) (a a-0) (b a))+ (defstrand resp 2 (n2 n2-0) (n1 n) (b a) (a a-0))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig n)+ (goals+ (forall ((a name) (n text) (z0 strd))+ (implies+ (and (strand init z0 2 (n1 n) (b a)) (non (privk a)) (uniq n))+ (exists ((z1 strd)) (strand resp z1 2 (b a))))))+ (comment "Initiator authentication goal"+ "Same as unilateral goal under the predicate mapping:"+ (p "init" "n") "->" (p "init" "n1") "and" (p "init" "a") "->"+ (p "init" "b") "and" (p "resp" "a") "->" (p "resp" "b"))+ (operation nonce-test (added-strand resp 2) n (0 1)+ (enc n a-0 (pubk a)))+ (strand-map 0)+ (traces ((send (enc n a-0 (pubk a))) (recv (enc n n2 (pubk a-0))))+ ((recv (enc n a-0 (pubk a))) (send (enc n n2-0 (pubk a-0)))))+ (label 16)+ (parent 15)+ (realized)+ (shape)+ (satisfies yes)+ (maps ((0) ((a a) (n n) (a-0 a-0) (n2 n2))))+ (origs (n (0 0))))++(comment "Nothing left to do")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (n n1 text) (a b name))+ (defstrand resp 3 (n2 n) (n1 n1) (b b) (a a))+ (non-orig (privk a))+ (uniq-orig n)+ (goals+ (forall ((a name) (n text) (z0 strd))+ (implies+ (and (strand resp z0 3 (n2 n) (a a)) (non (privk a)) (uniq n))+ (exists ((z1 strd)) (strand init z1 3 (a a))))))+ (comment "Responder authentication goal"+ "Same as unilateral goal under the predicate mapping:" (p "init" 1)+ "->" (p "resp" 2) "and" (p "init" "n") "->" (p "resp" "n2") "and"+ (p "init" "a") "->" (p "resp" "a") "and" (p "resp" 1) "->"+ (p "init" 2) "and" (p "resp" "a") "->" (p "init" "a"))+ (traces+ ((recv (enc n1 a (pubk b))) (send (enc n1 n (pubk a)))+ (recv (enc n (pubk b)))))+ (label 17)+ (unrealized (0 2))+ (maps ((0) ((a a) (n n) (b b) (n1 n1))))+ (origs (n (0 1)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n n1 text) (a b b-0 name))+ (defstrand resp 3 (n2 n) (n1 n1) (b b) (a a))+ (defstrand init 3 (n1 n1) (n2 n) (a a) (b b-0))+ (precedes ((0 1) (1 1)) ((1 2) (0 2)))+ (non-orig (privk a))+ (uniq-orig n)+ (goals+ (forall ((a name) (n text) (z0 strd))+ (implies+ (and (strand resp z0 3 (n2 n) (a a)) (non (privk a)) (uniq n))+ (exists ((z1 strd)) (strand init z1 3 (a a))))))+ (comment "Responder authentication goal"+ "Same as unilateral goal under the predicate mapping:" (p "init" 1)+ "->" (p "resp" 2) "and" (p "init" "n") "->" (p "resp" "n2") "and"+ (p "init" "a") "->" (p "resp" "a") "and" (p "resp" 1) "->"+ (p "init" 2) "and" (p "resp" "a") "->" (p "init" "a"))+ (operation nonce-test (added-strand init 3) n (0 2)+ (enc n1 n (pubk a)))+ (strand-map 0)+ (traces+ ((recv (enc n1 a (pubk b))) (send (enc n1 n (pubk a)))+ (recv (enc n (pubk b))))+ ((send (enc n1 a (pubk b-0))) (recv (enc n1 n (pubk a)))+ (send (enc n (pubk b-0)))))+ (label 18)+ (parent 17)+ (realized)+ (shape)+ (satisfies yes)+ (maps ((0) ((a a) (n n) (b b) (n1 n1))))+ (origs (n (0 1))))++(comment "Nothing left to do")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (n n2 text) (a b name))+ (defstrand init 2 (n1 n) (n2 n2) (a a) (b b))+ (non-orig (privk a) (privk b))+ (uniq-orig n)+ (goals+ (forall ((a b name) (n text) (z0 strd))+ (implies+ (and (strand init z0 2 (n1 n) (a a) (b b)) (non (privk a))+ (non (privk b)) (uniq n))+ (exists ((z1 strd)) (strand resp z1 2 (b b)))))+ (forall ((a b name) (n text) (z0 strd))+ (implies+ (and (strand init z0 2 (n1 n) (a a) (b b)) (non (privk a))+ (non (privk b)) (uniq n))+ (exists ((z1 strd)) (strand resp z1 2 (a a))))))+ (comment "Two initiator authentication goals")+ (traces ((send (enc n a (pubk b))) (recv (enc n n2 (pubk a)))))+ (label 19)+ (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n n) (n2 n2))))+ (origs (n (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n n2 n2-0 text) (a b name))+ (defstrand init 2 (n1 n) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2-0) (n1 n) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n)+ (goals+ (forall ((a b name) (n text) (z0 strd))+ (implies+ (and (strand init z0 2 (n1 n) (a a) (b b)) (non (privk a))+ (non (privk b)) (uniq n))+ (exists ((z1 strd)) (strand resp z1 2 (b b)))))+ (forall ((a b name) (n text) (z0 strd))+ (implies+ (and (strand init z0 2 (n1 n) (a a) (b b)) (non (privk a))+ (non (privk b)) (uniq n))+ (exists ((z1 strd)) (strand resp z1 2 (a a))))))+ (comment "Two initiator authentication goals")+ (operation nonce-test (added-strand resp 2) n (0 1)+ (enc n a (pubk b)))+ (strand-map 0)+ (traces ((send (enc n a (pubk b))) (recv (enc n n2 (pubk a))))+ ((recv (enc n a (pubk b))) (send (enc n n2-0 (pubk a)))))+ (label 20)+ (parent 19)+ (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n n) (n2 n2))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n n2 text) (a b name))+ (defstrand init 2 (n1 n) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2) (n1 n) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n)+ (goals+ (forall ((a b name) (n text) (z0 strd))+ (implies+ (and (strand init z0 2 (n1 n) (a a) (b b)) (non (privk a))+ (non (privk b)) (uniq n))+ (exists ((z1 strd)) (strand resp z1 2 (b b)))))+ (forall ((a b name) (n text) (z0 strd))+ (implies+ (and (strand init z0 2 (n1 n) (a a) (b b)) (non (privk a))+ (non (privk b)) (uniq n))+ (exists ((z1 strd)) (strand resp z1 2 (a a))))))+ (comment "Two initiator authentication goals")+ (operation nonce-test (contracted (n2-0 n2)) n (0 1)+ (enc n n2 (pubk a)) (enc n a (pubk b)))+ (strand-map 0 1)+ (traces ((send (enc n a (pubk b))) (recv (enc n n2 (pubk a))))+ ((recv (enc n a (pubk b))) (send (enc n n2 (pubk a)))))+ (label 21)+ (parent 20)+ (realized)+ (shape)+ (satisfies yes)+ (maps ((0) ((a a) (b b) (n n) (n2 n2))))+ (origs (n (0 0))))++(comment "Nothing left to do")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (n1 n2 text) (b a name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (non-orig (privk b))+ (uniq-orig n1)+ (goals+ (forall ((n1 n2 text) (b a name) (z strd))+ (implies+ (and (strand init z 3 (n1 n1) (n2 n2) (a a) (b b))+ (non (privk b)) (uniq-at n1 z 0))+ (exists ((n2-0 text) (z-0 strd))+ (and (strand resp z-0 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (prec z 0 z-0 0) (prec z-0 1 z 1))))))+ (comment "Shape analysis sentence")+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))))+ (label 22)+ (unrealized (0 1))+ (maps ((0) ((n1 n1) (n2 n2) (b b) (a a))))+ (origs (n1 (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 n2-0 text) (b a name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk b))+ (uniq-orig n1)+ (goals+ (forall ((n1 n2 text) (b a name) (z strd))+ (implies+ (and (strand init z 3 (n1 n1) (n2 n2) (a a) (b b))+ (non (privk b)) (uniq-at n1 z 0))+ (exists ((n2-0 text) (z-0 strd))+ (and (strand resp z-0 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (prec z 0 z-0 0) (prec z-0 1 z 1))))))+ (comment "Shape analysis sentence")+ (operation nonce-test (added-strand resp 2) n1 (0 1)+ (enc n1 a (pubk b)))+ (strand-map 0)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 (pubk a)))))+ (label 23)+ (parent 22)+ (realized)+ (shape)+ (satisfies yes)+ (maps ((0) ((n1 n1) (n2 n2) (b b) (a a))))+ (origs (n1 (0 0))))++(comment "Nothing left to do")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (n2 n1 text) (a b name))+ (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))+ (deflistener n2)+ (non-orig (privk a) (privk b))+ (uniq-orig n2)+ (goals+ (forall ((a b name) (n2 text) (z0 z1 strd))+ (implies+ (and (strand resp z0 3 (n2 n2) (a a) (b b)) (listener z1 n2)+ (non (privk a)) (non (privk b)) (uniq n2)) (false))))+ (comment "Responder point of view"+ "Failed secrecy goal: nonce n2 not revealed")+ (traces+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b)))) ((recv n2) (send n2)))+ (label 24)+ (unrealized (0 2) (1 0))+ (preskeleton)+ (maps)+ (origs (n2 (0 1)))+ (comment "Not a skeleton"))++(defskeleton ns+ (vars (n2 n1 text) (a b name))+ (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))+ (deflistener n2)+ (precedes ((0 1) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-orig n2)+ (goals+ (forall ((a b name) (n2 text) (z0 z1 strd))+ (implies+ (and (strand resp z0 3 (n2 n2) (a a) (b b)) (listener z1 n2)+ (non (privk a)) (non (privk b)) (uniq n2)) (false))))+ (comment "Responder point of view"+ "Failed secrecy goal: nonce n2 not revealed")+ (traces+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b)))) ((recv n2) (send n2)))+ (label 25)+ (parent 24)+ (unrealized (0 2) (1 0))+ (maps ((0 1) ((a a) (b b) (n2 n2) (n1 n1))))+ (origs (n2 (0 1)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n2 n1 text) (a b b-0 name))+ (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))+ (deflistener n2)+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b-0))+ (precedes ((0 1) (2 1)) ((2 2) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-orig n2)+ (goals+ (forall ((a b name) (n2 text) (z0 z1 strd))+ (implies+ (and (strand resp z0 3 (n2 n2) (a a) (b b)) (listener z1 n2)+ (non (privk a)) (non (privk b)) (uniq n2)) (false))))+ (comment "Responder point of view"+ "Failed secrecy goal: nonce n2 not revealed")+ (operation nonce-test (added-strand init 3) n2 (1 0)+ (enc n1 n2 (pubk a)))+ (strand-map 0 1)+ (traces+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b)))) ((recv n2) (send n2))+ ((send (enc n1 a (pubk b-0))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b-0)))))+ (label 26)+ (parent 25)+ (unrealized (0 2))+ (maps ((0 1) ((a a) (b b) (n2 n2) (n1 n1))))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton ns+ (vars (n2 n1 text) (a b b-0 name))+ (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))+ (deflistener n2)+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b-0))+ (precedes ((0 1) (2 1)) ((2 2) (0 2)) ((2 2) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-orig n2)+ (goals+ (forall ((a b name) (n2 text) (z0 z1 strd))+ (implies+ (and (strand resp z0 3 (n2 n2) (a a) (b b)) (listener z1 n2)+ (non (privk a)) (non (privk b)) (uniq n2)) (false))))+ (comment "Responder point of view"+ "Failed secrecy goal: nonce n2 not revealed")+ (operation nonce-test (displaced 3 2 init 3) n2 (0 2)+ (enc n1 n2 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b)))) ((recv n2) (send n2))+ ((send (enc n1 a (pubk b-0))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b-0)))))+ (label 27)+ (parent 26)+ (realized)+ (shape)+ (satisfies (no (fact false) (a a) (b b) (n2 n2) (z0 0) (z1 1)))+ (maps ((0 1) ((a a) (b b) (n2 n2) (n1 n1))))+ (origs (n2 (0 1))))++(defskeleton ns+ (vars (n2 n1 text) (a b b-0 b-1 name))+ (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))+ (deflistener n2)+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b-0))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b-1))+ (precedes ((0 1) (2 1)) ((0 1) (3 1)) ((2 2) (1 0)) ((3 2) (0 2)))+ (non-orig (privk a) (privk b))+ (uniq-orig n2)+ (goals+ (forall ((a b name) (n2 text) (z0 z1 strd))+ (implies+ (and (strand resp z0 3 (n2 n2) (a a) (b b)) (listener z1 n2)+ (non (privk a)) (non (privk b)) (uniq n2)) (false))))+ (comment "Responder point of view"+ "Failed secrecy goal: nonce n2 not revealed")+ (operation nonce-test (added-strand init 3) n2 (0 2)+ (enc n1 n2 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b)))) ((recv n2) (send n2))+ ((send (enc n1 a (pubk b-0))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b-0))))+ ((send (enc n1 a (pubk b-1))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b-1)))))+ (label 28)+ (parent 26)+ (realized)+ (shape)+ (satisfies (no (fact false) (a a) (b b) (n2 n2) (z0 0) (z1 1)))+ (maps ((0 1) ((a a) (b b) (n2 n2) (n1 n1))))+ (origs (n2 (0 1))))++(comment "Nothing left to do")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (n1 n1-0 n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand init 3 (n1 n1-0) (n2 n2-0) (a a) (b b))+ (non-orig (privk a) (privk b))+ (uniq-orig n1 n1-0)+ (goals+ (forall ((n1 n1-0 n2 n2-0 text) (a b name) (z z-0 strd))+ (implies+ (and (strand init z 3 (n1 n1) (n2 n2) (a a) (b b))+ (strand init z-0 3 (n1 n1-0) (n2 n2-0) (a a) (b b))+ (non (privk a)) (non (privk b)) (uniq-at n1 z 0)+ (uniq-at n1-0 z-0 0)) (= z z-0))))+ (comment "Double initiator point of view")+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b))))+ ((send (enc n1-0 a (pubk b))) (recv (enc n1-0 n2-0 (pubk a)))+ (send (enc n2-0 (pubk b)))))+ (label 29)+ (unrealized (0 1) (1 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0))))+ (origs (n1 (0 0)) (n1-0 (1 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (goals+ (forall ((n1 n1-0 n2 n2-0 text) (a b name) (z z-0 strd))+ (implies+ (and (strand init z 3 (n1 n1) (n2 n2) (a a) (b b))+ (strand init z-0 3 (n1 n1-0) (n2 n2-0) (a a) (b b))+ (non (privk a)) (non (privk b)) (uniq-at n1 z 0)+ (uniq-at n1-0 z-0 0)) (= z z-0))))+ (comment "Double initiator point of view")+ (operation collapsed 1 0)+ (strand-map 0 0)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b)))))+ (label 30)+ (parent 29)+ (unrealized (0 1))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n1-0 n1) (n2 n2) (n2-0 n2))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n1-0 n2 n2-0 n2-1 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand init 3 (n1 n1-0) (n2 n2-0) (a a) (b b))+ (defstrand resp 2 (n2 n2-1) (n1 n1-0) (b b) (a a))+ (precedes ((1 0) (2 0)) ((2 1) (1 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1 n1-0)+ (goals+ (forall ((n1 n1-0 n2 n2-0 text) (a b name) (z z-0 strd))+ (implies+ (and (strand init z 3 (n1 n1) (n2 n2) (a a) (b b))+ (strand init z-0 3 (n1 n1-0) (n2 n2-0) (a a) (b b))+ (non (privk a)) (non (privk b)) (uniq-at n1 z 0)+ (uniq-at n1-0 z-0 0)) (= z z-0))))+ (comment "Double initiator point of view")+ (operation nonce-test (added-strand resp 2) n1-0 (1 1)+ (enc n1-0 a (pubk b)))+ (strand-map 0 1)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b))))+ ((send (enc n1-0 a (pubk b))) (recv (enc n1-0 n2-0 (pubk a)))+ (send (enc n2-0 (pubk b))))+ ((recv (enc n1-0 a (pubk b))) (send (enc n1-0 n2-1 (pubk a)))))+ (label 31)+ (parent 29)+ (unrealized (0 1) (1 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (goals+ (forall ((n1 n1-0 n2 n2-0 text) (a b name) (z z-0 strd))+ (implies+ (and (strand init z 3 (n1 n1) (n2 n2) (a a) (b b))+ (strand init z-0 3 (n1 n1-0) (n2 n2-0) (a a) (b b))+ (non (privk a)) (non (privk b)) (uniq-at n1 z 0)+ (uniq-at n1-0 z-0 0)) (= z z-0))))+ (comment "Double initiator point of view")+ (operation nonce-test (added-strand resp 2) n1 (0 1)+ (enc n1 a (pubk b)))+ (strand-map 0)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 (pubk a)))))+ (label 32)+ (parent 30)+ (unrealized (0 1))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n1-0 n1) (n2 n2) (n2-0 n2))))+ (origs (n1 (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n1-0 n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand init 3 (n1 n1-0) (n2 n2-0) (a a) (b b))+ (defstrand resp 2 (n2 n2-0) (n1 n1-0) (b b) (a a))+ (precedes ((1 0) (2 0)) ((2 1) (1 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1 n1-0)+ (goals+ (forall ((n1 n1-0 n2 n2-0 text) (a b name) (z z-0 strd))+ (implies+ (and (strand init z 3 (n1 n1) (n2 n2) (a a) (b b))+ (strand init z-0 3 (n1 n1-0) (n2 n2-0) (a a) (b b))+ (non (privk a)) (non (privk b)) (uniq-at n1 z 0)+ (uniq-at n1-0 z-0 0)) (= z z-0))))+ (comment "Double initiator point of view")+ (operation nonce-test (contracted (n2-1 n2-0)) n1-0 (1 1)+ (enc n1-0 n2-0 (pubk a)) (enc n1-0 a (pubk b)))+ (strand-map 0 1 2)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b))))+ ((send (enc n1-0 a (pubk b))) (recv (enc n1-0 n2-0 (pubk a)))+ (send (enc n2-0 (pubk b))))+ ((recv (enc n1-0 a (pubk b))) (send (enc n1-0 n2-0 (pubk a)))))+ (label 33)+ (parent 31)+ (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (goals+ (forall ((n1 n1-0 n2 n2-0 text) (a b name) (z z-0 strd))+ (implies+ (and (strand init z 3 (n1 n1) (n2 n2) (a a) (b b))+ (strand init z-0 3 (n1 n1-0) (n2 n2-0) (a a) (b b))+ (non (privk a)) (non (privk b)) (uniq-at n1 z 0)+ (uniq-at n1-0 z-0 0)) (= z z-0))))+ (comment "Double initiator point of view")+ (operation nonce-test (contracted (n2-0 n2)) n1 (0 1)+ (enc n1 n2 (pubk a)) (enc n1 a (pubk b)))+ (strand-map 0 1)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))))+ (label 34)+ (parent 32)+ (realized)+ (shape)+ (satisfies yes)+ (maps ((0 0) ((a a) (b b) (n1 n1) (n1-0 n1) (n2 n2) (n2-0 n2))))+ (origs (n1 (0 0))))++(defskeleton ns+ (vars (n1 n1-0 n2 n2-0 n2-1 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand init 3 (n1 n1-0) (n2 n2-0) (a a) (b b))+ (defstrand resp 2 (n2 n2-0) (n1 n1-0) (b b) (a a))+ (defstrand resp 2 (n2 n2-1) (n1 n1) (b b) (a a))+ (precedes ((0 0) (3 0)) ((1 0) (2 0)) ((2 1) (1 1)) ((3 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1 n1-0)+ (goals+ (forall ((n1 n1-0 n2 n2-0 text) (a b name) (z z-0 strd))+ (implies+ (and (strand init z 3 (n1 n1) (n2 n2) (a a) (b b))+ (strand init z-0 3 (n1 n1-0) (n2 n2-0) (a a) (b b))+ (non (privk a)) (non (privk b)) (uniq-at n1 z 0)+ (uniq-at n1-0 z-0 0)) (= z z-0))))+ (comment "Double initiator point of view")+ (operation nonce-test (added-strand resp 2) n1 (0 1)+ (enc n1 a (pubk b)))+ (strand-map 0 1 2)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+ (send (enc n2 (pubk b))))+ ((send (enc n1-0 a (pubk b))) (recv (enc n1-0 n2-0 (pubk a)))+ (send (enc n2-0 (pubk b))))+ ((recv (enc n1-0 a (pubk b))) (send (enc n1-0 n2-0 (pubk a))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2-1 (pubk a)))))+ (label 35)+ (parent 33)+ (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n1-0 n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))+ (defstrand init 3 (n1 n1-0) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2) (n1 n1-0) (b b) (a a))+ (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (precedes ((0 0) (3 0)) ((1 0) (2 0)) ((2 1) (1 1)) ((3 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1 n1-0)+ (goals+ (forall ((n1 n1-0 n2 n2-0 text) (a b name) (z z-0 strd))+ (implies+ (and (strand init z 3 (n1 n1) (n2 n2) (a a) (b b))+ (strand init z-0 3 (n1 n1-0) (n2 n2-0) (a a) (b b))+ (non (privk a)) (non (privk b)) (uniq-at n1 z 0)+ (uniq-at n1-0 z-0 0)) (= z z-0))))+ (comment "Double initiator point of view")+ (operation nonce-test (contracted (n2-1 n2-0)) n1 (0 1)+ (enc n1 n2-0 (pubk a)) (enc n1 a (pubk b)))+ (strand-map 0 1 2 3)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2-0 (pubk a)))+ (send (enc n2-0 (pubk b))))+ ((send (enc n1-0 a (pubk b))) (recv (enc n1-0 n2 (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1-0 a (pubk b))) (send (enc n1-0 n2 (pubk a))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 (pubk a)))))+ (label 36)+ (parent 35)+ (realized)+ (shape)+ (satisfies+ (no (= z z-0) (n1 n1-0) (n1-0 n1) (n2 n2) (n2-0 n2-0) (a a) (b b)+ (z 1) (z-0 0)))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2-0) (n2-0 n2))))+ (origs (n1 (0 0)) (n1-0 (1 0))))++(comment "Nothing left to do")++(defprotocol nsl-typeless basic+ (defrole init+ (vars (a b name) (n1 text) (n2 mesg))+ (trace (send (enc a n1 (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 text) (n1 mesg))+ (trace (recv (enc a n1 (pubk b))) (send (enc n1 n2 b (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder-Lowe with untyped nonces"))++(defskeleton nsl-typeless+ (vars (n1 mesg) (n2 text) (a b name))+ (defstrand resp 2 (n1 n1) (n2 n2) (b b) (a a))+ (deflistener n2)+ (non-orig (privk a) (privk b))+ (uniq-orig n2)+ (goals+ (forall ((n2 text) (a b name) (z z-0 strd))+ (implies+ (and (strand resp z 2 (n2 n2) (b b) (a a)) (listener z-0 n2)+ (non (privk a)) (non (privk b)) (uniq n2)) (false))))+ (comment "Shows typeflaw in typeless NSL")+ (traces ((recv (enc a n1 (pubk b))) (send (enc n1 n2 b (pubk a))))+ ((recv n2) (send n2)))+ (label 37)+ (unrealized (1 0))+ (preskeleton)+ (maps)+ (origs (n2 (0 1)))+ (comment "Not a skeleton"))++(defskeleton nsl-typeless+ (vars (n1 mesg) (n2 text) (a b name))+ (defstrand resp 2 (n1 n1) (n2 n2) (b b) (a a))+ (deflistener n2)+ (precedes ((0 1) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-orig n2)+ (goals+ (forall ((n2 text) (a b name) (z z-0 strd))+ (implies+ (and (strand resp z 2 (n2 n2) (b b) (a a)) (listener z-0 n2)+ (non (privk a)) (non (privk b)) (uniq n2)) (false))))+ (comment "Shows typeflaw in typeless NSL")+ (traces ((recv (enc a n1 (pubk b))) (send (enc n1 n2 b (pubk a))))+ ((recv n2) (send n2)))+ (label 38)+ (parent 37)+ (unrealized (1 0))+ (maps ((0 1) ((n2 n2) (a a) (b b) (n1 n1))))+ (origs (n2 (0 1)))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl-typeless+ (vars (n2 n1 text) (a b name))+ (defstrand resp 2 (n1 n1) (n2 n2) (b b) (a a))+ (deflistener n2)+ (defstrand init 3 (n2 n2) (n1 n1) (a a) (b b))+ (precedes ((0 1) (2 1)) ((2 2) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-orig n2)+ (goals+ (forall ((n2 text) (a b name) (z z-0 strd))+ (implies+ (and (strand resp z 2 (n2 n2) (b b) (a a)) (listener z-0 n2)+ (non (privk a)) (non (privk b)) (uniq n2)) (false))))+ (comment "Shows typeflaw in typeless NSL")+ (operation nonce-test (added-strand init 3) n2 (1 0)+ (enc n1 n2 b (pubk a)))+ (strand-map 0 1)+ (traces ((recv (enc a n1 (pubk b))) (send (enc n1 n2 b (pubk a))))+ ((recv n2) (send n2))+ ((send (enc a n1 (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (label 39)+ (parent 38)+ (unrealized (1 0))+ (dead)+ (maps ((0 1) ((n2 n2) (a a) (b b) (n1 n1))))+ (comment "empty cohort"))++(defskeleton nsl-typeless+ (vars (n2 n2-0 text) (a b a-0 name))+ (defstrand resp 2 (n1 a-0) (n2 n2) (b b) (a a))+ (deflistener n2)+ (defstrand resp 2 (n1 (cat n2 b)) (n2 n2-0) (b a) (a a-0))+ (precedes ((0 1) (2 0)) ((2 1) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-orig n2)+ (goals+ (forall ((n2 text) (a b name) (z z-0 strd))+ (implies+ (and (strand resp z 2 (n2 n2) (b b) (a a)) (listener z-0 n2)+ (non (privk a)) (non (privk b)) (uniq n2)) (false))))+ (comment "Shows typeflaw in typeless NSL")+ (operation nonce-test (added-strand resp 2) n2 (1 0)+ (enc a-0 n2 b (pubk a)))+ (strand-map 0 1)+ (traces ((recv (enc a a-0 (pubk b))) (send (enc a-0 n2 b (pubk a))))+ ((recv n2) (send n2))+ ((recv (enc a-0 n2 b (pubk a)))+ (send (enc (cat n2 b) n2-0 a (pubk a-0)))))+ (label 40)+ (parent 38)+ (realized)+ (shape)+ (satisfies (no (fact false) (n2 n2) (a a) (b b) (z 0) (z-0 1)))+ (maps ((0 1) ((n2 n2) (a a) (b b) (n1 a-0))))+ (origs (n2 (0 1))))++(comment "Nothing left to do")
tst/hashtest-key-hash.tst view
@@ -1,6 +1,6 @@ (herald "Hashtest") -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/hashtest-key-hash.scm") (defprotocol hashtest basic@@ -27,6 +27,7 @@ (traces ((send (enc n k)) (recv (enc "h" n)))) (label 0) (unrealized (0 1))+ (maps ((0) ((n n) (k k)))) (origs (n (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -44,6 +45,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0) ((n n) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton hashtest@@ -60,6 +62,7 @@ (parent 0) (unrealized (1 0)) (dead)+ (maps ((0) ((n n) (k k)))) (comment "empty cohort")) (defskeleton hashtest
tst/hashtest.tst view
@@ -1,6 +1,6 @@ (herald "Hashtest") -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/hashtest.scm") (defprotocol hashtest basic@@ -27,6 +27,7 @@ (traces ((send (enc n k)) (recv (hash n)))) (label 0) (unrealized (0 1))+ (maps ((0) ((n n) (k k)))) (origs (n (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -44,6 +45,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0) ((n n) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton hashtest@@ -60,6 +62,7 @@ (parent 0) (unrealized (1 0)) (dead)+ (maps ((0) ((n n) (k k)))) (comment "empty cohort")) (defskeleton hashtest
tst/incompleteness_example.tst view
@@ -1,7 +1,7 @@ (herald incompleteness-example (comment "Shows a shape not found by CPSA")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/incompleteness_example.scm") (defprotocol incompleteness-example basic@@ -28,6 +28,7 @@ (label 0) (unrealized (0 1)) (dead)+ (maps ((0) ((k k) (n n)))) (origs (n (0 0))) (comment "empty cohort"))
tst/isoreject-corrected.tst view
@@ -1,6 +1,6 @@ (herald isoreject-corrected) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/isoreject-corrected.scm") (defprotocol isofix basic@@ -30,6 +30,7 @@ (recv (enc "second" nc nb b (privk a))))) (label 0) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (na na) (nb nb) (nc nc)))) (origs (nb (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -51,6 +52,7 @@ (label 1) (parent 0) (unrealized (1 1))+ (maps ((0) ((a a) (b b) (na na) (nb nb) (nc nc)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton isofix@@ -103,6 +105,7 @@ (send (enc "second" nc nb b (privk a))))) (label 3) (unrealized (0 1))+ (maps ((0) ((b b) (a a) (na na) (nb nb) (nc nc)))) (origs) (comment "1 in cohort - 1 not yet seen"))
tst/isoreject.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/isoreject.scm") (defprotocol isoreject basic@@ -28,6 +28,7 @@ (recv (enc nc nb b (privk a))))) (label 0) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (na na) (nb nb) (nc nc)))) (origs (nb (0 1))) (comment "2 in cohort - 2 not yet seen")) @@ -49,6 +50,7 @@ (label 1) (parent 0) (unrealized (1 1))+ (maps ((0) ((a a) (b b) (na na) (nb nb) (nc nc)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton isoreject@@ -122,6 +124,7 @@ (send (enc nc nb b (privk a))))) (label 4) (unrealized (0 1))+ (maps ((0) ((b b) (a a) (na na) (nb nb) (nc nc)))) (origs) (comment "2 in cohort - 2 not yet seen"))
tst/kelly1.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/kelly1.scm") (defprotocol kelly1 basic@@ -47,6 +47,10 @@ (recv (cat A C (enc policy (pubk S) Ns (privk A)))))) (label 0) (unrealized (0 3))+ (maps+ ((0)+ ((A A) (C C) (S S) (Ns Ns) (request request) (Check Check)+ (policy policy) (response response)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -78,6 +82,10 @@ (label 1) (parent 0) (unrealized (1 2))+ (maps+ ((0)+ ((A A) (C C) (S S) (Ns Ns) (request request) (Check Check)+ (policy policy) (response response)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton kelly1@@ -114,6 +122,10 @@ (label 2) (parent 1) (unrealized (0 1))+ (maps+ ((0)+ ((A A) (C C) (S S) (Ns Ns) (request request) (Check Check)+ (policy policy) (response response)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton kelly1
tst/kerberos.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/kerberos.scm") (defprotocol kerberos basic@@ -36,6 +36,7 @@ (recv (enc t-prime k)))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -60,6 +61,7 @@ (label 1) (parent 0) (unrealized (0 3))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton kerberos@@ -83,6 +85,7 @@ (label 2) (parent 0) (unrealized (0 3))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton kerberos@@ -110,6 +113,7 @@ (label 3) (parent 1) (unrealized (2 0))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton kerberos@@ -135,6 +139,7 @@ (parent 1) (unrealized (2 0)) (dead)+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "empty cohort")) (defskeleton kerberos@@ -162,6 +167,7 @@ (label 5) (parent 2) (unrealized (2 0))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton kerberos@@ -187,6 +193,7 @@ (parent 2) (unrealized (2 0)) (dead)+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "empty cohort")) (defskeleton kerberos@@ -214,6 +221,7 @@ (label 7) (parent 3) (unrealized (2 0))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton kerberos@@ -248,6 +256,7 @@ (label 8) (parent 3) (unrealized (3 1))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton kerberos@@ -276,6 +285,7 @@ (parent 3) (unrealized (3 0)) (dead)+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "empty cohort")) (defskeleton kerberos@@ -303,6 +313,7 @@ (label 10) (parent 5) (unrealized (2 0))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton kerberos@@ -337,6 +348,7 @@ (label 11) (parent 5) (unrealized (3 1))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton kerberos@@ -365,6 +377,7 @@ (parent 5) (unrealized (3 0)) (dead)+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "empty cohort")) (defskeleton kerberos@@ -426,6 +439,7 @@ (label 14) (parent 8) (unrealized (2 0))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton kerberos@@ -458,6 +472,7 @@ (label 15) (parent 8) (unrealized (2 0))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton kerberos@@ -519,6 +534,7 @@ (label 17) (parent 11) (unrealized (2 0))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton kerberos@@ -551,6 +567,7 @@ (label 18) (parent 11) (unrealized (2 0))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton kerberos@@ -720,6 +737,7 @@ (send (enc t-prime k)))) (label 23) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -742,6 +760,7 @@ (label 24) (parent 23) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton kerberos@@ -763,6 +782,7 @@ (label 25) (parent 23) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton kerberos@@ -789,6 +809,7 @@ (label 26) (parent 24) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton kerberos@@ -812,6 +833,7 @@ (parent 24) (unrealized (2 0)) (dead)+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "empty cohort")) (defskeleton kerberos@@ -838,6 +860,7 @@ (label 28) (parent 25) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton kerberos@@ -861,6 +884,7 @@ (parent 25) (unrealized (2 0)) (dead)+ (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k)))) (comment "empty cohort")) (defskeleton kerberos
tst/locn_envelope.tst view
@@ -1,7 +1,7 @@ (herald "Envelope Protocol, location-based version" (bound 30) (limit 1200)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/locn_envelope.scm") (comment "Step count limited to 1200") (comment "Strand count bounded at 30")@@ -97,9 +97,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -146,6 +145,7 @@ (label 0) (unrealized (0 0) (1 2)) (preskeleton)+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -166,6 +166,7 @@ (label 1) (parent 0) (unrealized (1 2))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -194,6 +195,7 @@ (label 2) (parent 1) (unrealized (0 0) (2 0))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -222,6 +224,7 @@ (label 3) (parent 2) (unrealized (0 0))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -254,6 +257,7 @@ (label 4) (parent 3) (unrealized (3 1))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -290,6 +294,7 @@ (label 5) (parent 4) (unrealized (3 2))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -335,6 +340,7 @@ (label 6) (parent 5) (unrealized (4 1))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -383,6 +389,7 @@ (label 7) (parent 6) (unrealized (5 0))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -527,9 +534,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -583,6 +589,10 @@ (label 9) (unrealized (0 0) (1 2)) (preskeleton)+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -610,6 +620,10 @@ (label 10) (parent 9) (unrealized (0 0) (1 2))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -647,6 +661,10 @@ (label 11) (parent 10) (unrealized (0 0) (2 0))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -683,6 +701,10 @@ (label 12) (parent 11) (unrealized (0 0))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -730,6 +752,10 @@ (label 13) (parent 12) (unrealized (3 1))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -785,6 +811,10 @@ (label 14) (parent 13) (unrealized (4 1))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -843,6 +873,10 @@ (label 15) (parent 14) (unrealized (5 0))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1000,9 +1034,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -1057,6 +1090,10 @@ (label 17) (unrealized (0 0) (1 0) (2 2)) (preskeleton)+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (origs (v (2 3)) (n (2 0))) (comment "Not a skeleton")) @@ -1085,6 +1122,10 @@ (label 18) (parent 17) (unrealized (0 0) (2 2))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (origs (v (2 3)) (n (2 0))) (comment "1 in cohort - 1 not yet seen")) @@ -1123,6 +1164,10 @@ (label 19) (parent 18) (unrealized (0 0) (1 0) (3 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1160,6 +1205,10 @@ (label 20) (parent 19) (unrealized (0 0) (1 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1202,6 +1251,10 @@ (label 21) (parent 20) (unrealized (0 0) (4 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1248,6 +1301,10 @@ (label 22) (parent 21) (unrealized (0 0) (4 2))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1302,6 +1359,10 @@ (label 23) (parent 22) (unrealized (0 0) (5 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1359,6 +1420,10 @@ (label 24) (parent 23) (unrealized (0 0) (6 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1415,6 +1480,10 @@ (label 25) (parent 24) (unrealized (0 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1484,6 +1553,10 @@ (label 26) (parent 25) (unrealized (7 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1558,6 +1631,10 @@ (label 27) (parent 26) (unrealized (8 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1636,6 +1713,10 @@ (label 28) (parent 27) (unrealized (9 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1791,10 +1872,10 @@ (defrule ordered-extends (forall ((y z strd) (pcr locn)) (implies- (and (p "tpm-extend-enc" y (idx 3))- (p "tpm-extend-enc" z (idx 3))- (p "tpm-extend-enc" "pcr" y pcr)- (p "tpm-extend-enc" "pcr" z pcr))+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" "pcr" z pcr)+ (p "tpm-extend-enc" "pcr" y pcr)) (or (= y z) (prec y (idx 2) z (idx 1))@@ -1825,9 +1906,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -1874,6 +1954,7 @@ (label 30) (unrealized (0 0) (1 2)) (preskeleton)+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -1894,6 +1975,7 @@ (label 31) (parent 30) (unrealized (1 2))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -1922,6 +2004,7 @@ (label 32) (parent 31) (unrealized (0 0) (2 0))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -1950,6 +2033,7 @@ (label 33) (parent 32) (unrealized (0 0))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -1982,6 +2066,7 @@ (label 34) (parent 33) (unrealized (3 1))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -2018,6 +2103,7 @@ (label 35) (parent 34) (unrealized (3 2))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -2063,6 +2149,7 @@ (label 36) (parent 35) (unrealized (4 1))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -2111,6 +2198,7 @@ (label 37) (parent 36) (unrealized (5 0))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -2232,10 +2320,10 @@ (defrule ordered-extends (forall ((y z strd) (pcr locn)) (implies- (and (p "tpm-extend-enc" y (idx 3))- (p "tpm-extend-enc" z (idx 3))- (p "tpm-extend-enc" "pcr" y pcr)- (p "tpm-extend-enc" "pcr" z pcr))+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" "pcr" z pcr)+ (p "tpm-extend-enc" "pcr" y pcr)) (or (= y z) (prec y (idx 2) z (idx 1))@@ -2266,9 +2354,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -2322,6 +2409,10 @@ (label 39) (unrealized (0 0) (1 2)) (preskeleton)+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -2349,6 +2440,10 @@ (label 40) (parent 39) (unrealized (0 0) (1 2))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -2386,6 +2481,10 @@ (label 41) (parent 40) (unrealized (0 0) (2 0))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -2422,6 +2521,10 @@ (label 42) (parent 41) (unrealized (0 0))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -2469,6 +2572,10 @@ (label 43) (parent 42) (unrealized (3 1))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -2524,6 +2631,10 @@ (label 44) (parent 43) (unrealized (4 1))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -2582,6 +2693,10 @@ (label 45) (parent 44) (unrealized (5 0))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -2716,10 +2831,10 @@ (defrule ordered-extends (forall ((y z strd) (pcr locn)) (implies- (and (p "tpm-extend-enc" y (idx 3))- (p "tpm-extend-enc" z (idx 3))- (p "tpm-extend-enc" "pcr" y pcr)- (p "tpm-extend-enc" "pcr" z pcr))+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" "pcr" z pcr)+ (p "tpm-extend-enc" "pcr" y pcr)) (or (= y z) (prec y (idx 2) z (idx 1))@@ -2750,9 +2865,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -2807,6 +2921,10 @@ (label 47) (unrealized (0 0) (1 0) (2 2)) (preskeleton)+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (origs (v (2 3)) (n (2 0))) (comment "Not a skeleton")) @@ -2835,6 +2953,10 @@ (label 48) (parent 47) (unrealized (0 0) (2 2))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (origs (v (2 3)) (n (2 0))) (comment "1 in cohort - 1 not yet seen")) @@ -2873,6 +2995,10 @@ (label 49) (parent 48) (unrealized (0 0) (1 0) (3 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -2910,6 +3036,10 @@ (label 50) (parent 49) (unrealized (0 0) (1 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -2952,6 +3082,10 @@ (label 51) (parent 50) (unrealized (0 0) (4 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -2998,6 +3132,10 @@ (label 52) (parent 51) (unrealized (0 0) (4 2))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -3052,6 +3190,10 @@ (label 53) (parent 52) (unrealized (0 0) (5 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -3109,6 +3251,10 @@ (label 54) (parent 53) (unrealized (0 0) (6 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -3165,6 +3311,10 @@ (label 55) (parent 54) (unrealized (0 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -3234,6 +3384,10 @@ (label 56) (parent 55) (unrealized (7 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -3308,6 +3462,10 @@ (label 57) (parent 56) (unrealized (8 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -3386,6 +3544,10 @@ (label 58) (parent 57) (unrealized (9 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus@@ -3541,12 +3703,12 @@ (defrule pcr-id-identifies-pcr (forall ((y z strd) (pcr-id text) (pcr pcr-0 locn)) (implies- (and (p "tpm-extend-enc" y (idx 3))- (p "tpm-extend-enc" z (idx 3))- (p "tpm-extend-enc" "pcr-id" y pcr-id)- (p "tpm-extend-enc" "pcr-id" z pcr-id)+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" "pcr" z pcr-0) (p "tpm-extend-enc" "pcr" y pcr)- (p "tpm-extend-enc" "pcr" z pcr-0))+ (p "tpm-extend-enc" "pcr-id" z pcr-id)+ (p "tpm-extend-enc" "pcr-id" y pcr-id)) (= pcr pcr-0)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -3574,9 +3736,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -3623,6 +3784,7 @@ (label 60) (unrealized (0 0) (1 2)) (preskeleton)+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -3643,6 +3805,7 @@ (label 61) (parent 60) (unrealized (1 2))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -3671,6 +3834,7 @@ (label 62) (parent 61) (unrealized (0 0) (2 0))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -3699,6 +3863,7 @@ (label 63) (parent 62) (unrealized (0 0))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -3731,6 +3896,7 @@ (label 64) (parent 63) (unrealized (3 1))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -3767,6 +3933,7 @@ (label 65) (parent 64) (unrealized (3 2))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -3812,6 +3979,7 @@ (label 66) (parent 65) (unrealized (4 1))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -3860,6 +4028,7 @@ (label 67) (parent 66) (unrealized (5 0))+ (maps ((0 1) ((v v) (n n) (pcr-id pcr-id) (k k) (aik aik) (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -3981,12 +4150,12 @@ (defrule pcr-id-identifies-pcr (forall ((y z strd) (pcr-id text) (pcr pcr-0 locn)) (implies- (and (p "tpm-extend-enc" y (idx 3))- (p "tpm-extend-enc" z (idx 3))- (p "tpm-extend-enc" "pcr-id" y pcr-id)- (p "tpm-extend-enc" "pcr-id" z pcr-id)+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" "pcr" z pcr-0) (p "tpm-extend-enc" "pcr" y pcr)- (p "tpm-extend-enc" "pcr" z pcr-0))+ (p "tpm-extend-enc" "pcr-id" z pcr-id)+ (p "tpm-extend-enc" "pcr-id" y pcr-id)) (= pcr pcr-0)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -4014,9 +4183,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -4070,6 +4238,10 @@ (label 69) (unrealized (0 0) (1 2)) (preskeleton)+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (origs (v (1 3)) (n (1 0))) (comment "Not a skeleton")) @@ -4097,6 +4269,10 @@ (label 70) (parent 69) (unrealized (0 0) (1 2))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (origs (v (1 3)) (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -4134,6 +4310,10 @@ (label 71) (parent 70) (unrealized (0 0) (2 0))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -4170,6 +4350,10 @@ (label 72) (parent 71) (unrealized (0 0))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -4217,6 +4401,10 @@ (label 73) (parent 72) (unrealized (3 1))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -4272,6 +4460,10 @@ (label 74) (parent 73) (unrealized (4 1))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -4330,6 +4522,10 @@ (label 75) (parent 74) (unrealized (5 0))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -4464,12 +4660,12 @@ (defrule pcr-id-identifies-pcr (forall ((y z strd) (pcr-id text) (pcr pcr-0 locn)) (implies- (and (p "tpm-extend-enc" y (idx 3))- (p "tpm-extend-enc" z (idx 3))- (p "tpm-extend-enc" "pcr-id" y pcr-id)- (p "tpm-extend-enc" "pcr-id" z pcr-id)+ (and (p "tpm-extend-enc" z (idx 3))+ (p "tpm-extend-enc" y (idx 3))+ (p "tpm-extend-enc" "pcr" z pcr-0) (p "tpm-extend-enc" "pcr" y pcr)- (p "tpm-extend-enc" "pcr" z pcr-0))+ (p "tpm-extend-enc" "pcr-id" z pcr-id)+ (p "tpm-extend-enc" "pcr-id" y pcr-id)) (= pcr pcr-0)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -4497,9 +4693,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -4554,6 +4749,10 @@ (label 77) (unrealized (0 0) (1 0) (2 2)) (preskeleton)+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (origs (v (2 3)) (n (2 0))) (comment "Not a skeleton")) @@ -4582,6 +4781,10 @@ (label 78) (parent 77) (unrealized (0 0) (2 2))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (origs (v (2 3)) (n (2 0))) (comment "1 in cohort - 1 not yet seen")) @@ -4620,6 +4823,10 @@ (label 79) (parent 78) (unrealized (0 0) (1 0) (3 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -4657,6 +4864,10 @@ (label 80) (parent 79) (unrealized (0 0) (1 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -4699,6 +4910,10 @@ (label 81) (parent 80) (unrealized (0 0) (4 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -4745,6 +4960,10 @@ (label 82) (parent 81) (unrealized (0 0) (4 2))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -4799,6 +5018,10 @@ (label 83) (parent 82) (unrealized (0 0) (5 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -4856,6 +5079,10 @@ (label 84) (parent 83) (unrealized (0 0) (6 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -4912,6 +5139,10 @@ (label 85) (parent 84) (unrealized (0 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -4981,6 +5212,10 @@ (label 86) (parent 85) (unrealized (7 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -5055,6 +5290,10 @@ (label 87) (parent 86) (unrealized (8 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2@@ -5133,6 +5372,10 @@ (label 88) (parent 87) (unrealized (9 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (tpm tpm)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope-plus-2
tst/mass.tst view
@@ -1,6 +1,6 @@ (herald mass (bound 8)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/mass.lsp") (comment "Strand count bounded at 8") @@ -30,6 +30,7 @@ (recv (enc n2 (ltk a b))))) (label 0) (unrealized (0 4))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (origs (n2 (0 3))) (comment "2 in cohort - 2 not yet seen")) @@ -72,6 +73,7 @@ (label 2) (parent 0) (unrealized (1 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton mass@@ -141,6 +143,7 @@ (label 5) (parent 2) (unrealized (2 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton mass@@ -219,6 +222,7 @@ (label 8) (parent 5) (unrealized (3 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton mass@@ -309,6 +313,7 @@ (label 11) (parent 8) (unrealized (4 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton mass@@ -408,6 +413,7 @@ (label 14) (parent 11) (unrealized (5 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton mass@@ -516,6 +522,7 @@ (label 17) (parent 14) (unrealized (6 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton mass@@ -636,4 +643,5 @@ (parent 17) (unrealized (7 2)) (aborted)+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "aborted"))
tst/mass2.tst view
@@ -1,6 +1,6 @@ (herald mass2 (bound 8)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/mass2.lsp") (comment "Strand count bounded at 8") @@ -30,6 +30,7 @@ (recv (enc n1 (ltk a b))))) (label 0) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (origs (n1 (0 1))) (comment "2 in cohort - 2 not yet seen")) @@ -51,6 +52,7 @@ (label 1) (parent 0) (unrealized (1 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton mass2@@ -95,6 +97,7 @@ (label 3) (parent 1) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton mass2@@ -167,6 +170,7 @@ (label 6) (parent 3) (unrealized (3 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton mass2@@ -249,6 +253,7 @@ (label 9) (parent 6) (unrealized (4 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton mass2@@ -341,6 +346,7 @@ (label 12) (parent 9) (unrealized (5 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton mass2@@ -443,6 +449,7 @@ (label 15) (parent 12) (unrealized (6 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton mass2@@ -635,4 +642,5 @@ (parent 15) (unrealized (7 1)) (aborted)+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (comment "aborted"))
tst/missing_contraction.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/missing_contraction.scm") (defprotocol missing-contraction basic@@ -26,6 +26,7 @@ ((recv (enc a m (pubk c))))) (label 0) (unrealized (1 0))+ (maps ((0 1) ((m m) (a a) (c c) (n n) (b b)))) (origs (m (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -93,6 +94,7 @@ (label 3) (unrealized (1 0)) (preskeleton)+ (maps ((0 1) ((m m) (a a) (c c)))) (origs (m (0 0))) (comment "Not a skeleton")) @@ -108,6 +110,7 @@ (label 4) (parent 3) (unrealized (1 0))+ (maps ((0 1) ((m m) (a a) (c c)))) (origs (m (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -175,6 +178,7 @@ ((recv (enc a m (pubk c))))) (label 7) (unrealized (1 0))+ (maps ((0 1) ((m m) (a a) (b b) (c c) (n n)))) (origs (m (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -211,6 +215,7 @@ (label 9) (parent 7) (unrealized (1 0))+ (maps ((0 1) ((m n) (a a) (b b) (c c) (n n)))) (origs (n (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -232,6 +237,7 @@ (seen-ops (8 (operation generalization separated n-0) (strand-map 0 1))) (realized)+ (maps ((0 1) ((m n) (a a) (b b) (c a) (n n)))) (origs (n (0 0))) (comment "1 in cohort - 0 not yet seen"))
tst/neq_test.tst view
@@ -2,7 +2,7 @@ (comment "First skeleton should have a shape," "second should be dead.")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/neq_test.scm") (defprotocol neq-test basic@@ -27,6 +27,7 @@ (traces ((send (cat n1 (enc n1 n2 k))) (recv n2))) (label 0) (unrealized (0 1))+ (maps ((0) ((n1 n1) (n2 n2) (k k)))) (origs (n2 (0 0)) (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -71,6 +72,7 @@ (label 2) (unrealized (0 1)) (dead)+ (maps ((0) ((n1 n1) (n2 n2) (k k)))) (origs (n2 (0 0)) (n1 (0 0))) (comment "empty cohort"))
tst/neuman-stubblebine-reauth.tst view
@@ -1,20985 +1,22305 @@ (herald neuman-stubblebine-reauth (bound 8)) -(comment "CPSA 4.4.5")-(comment "All input read from tst/neuman-stubblebine-reauth.lsp")-(comment "Strand count bounded at 8")--(defprotocol neuman-stubblebine-reauth basic- (defrole init- (vars (a b ks name) (ra rb text) (k skey) (tb text))- (trace (send (cat a ra))- (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (defrole resp- (vars (a b ks name) (ra rb text) (k skey) (tb text))- (trace (recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (defrole init-reauth- (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text))- (trace (recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))- (defrole resp-reauth- (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text))- (trace (recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))))- (defrole keyserver- (vars (a b ks name) (ra rb text) (k skey) (tb text))- (trace (recv (cat b rb (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))- (uniq-orig k))- (defgenrule neqRl_indx- (forall ((x indx)) (implies (fact neq x x) (false))))- (defgenrule neqRl_strd- (forall ((x strd)) (implies (fact neq x x) (false))))- (defgenrule neqRl_mesg- (forall ((x mesg)) (implies (fact neq x x) (false)))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime tb-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))))- (label 0)- (unrealized (0 2) (1 0))- (origs (rb (0 1)) (rb-prime (1 1)))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (precedes ((2 1) (0 2)) ((2 1) (1 0)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand keyserver 2)- (enc a k tb-0 (ltk b ks)) (1 0))- (strand-map 0 1)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0))))- (label 1)- (parent 0)- (unrealized (0 2) (1 2) (2 0))- (comment "2 in cohort - 2 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((2 1) (0 2)) ((2 1) (1 0)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 3 0 resp 2)- (enc a ra-0 tb-0 (ltk b ks)) (2 0))- (strand-map 0 1 2)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0))))- (label 2)- (parent 1)- (unrealized (0 2) (1 2))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp 2)- (enc a ra-0 tb-0 (ltk b ks)) (2 0))- (strand-map 0 1 2)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))))- (label 3)- (parent 1)- (unrealized (0 2) (1 2))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((3 3) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc rb-prime k) (1 2))- (strand-map 0 1 2)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))- (label 4)- (parent 2)- (unrealized (0 2) (3 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))- ((3 2) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb-prime k)- (1 2))- (strand-map 0 1 2)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb-prime))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb-prime k)))))- (label 5)- (parent 2)- (unrealized (0 2) (3 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 2)) ((2 1) (1 0))- ((3 1) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc rb-prime k) (1 2))- (strand-map 0 1 2)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k)))))- (label 6)- (parent 2)- (unrealized (0 2) (3 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((3 1) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb-prime k) (1 2))- (strand-map 0 1 2)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv k) (send k)))- (label 7)- (parent 2)- (unrealized (0 2) (3 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 tb-1- text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-1) (a a-0) (b b-0) (ks ks-0))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((3 1) (2 0)) ((4 3) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc rb-prime k) (1 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))- (label 8)- (parent 3)- (unrealized (0 2) (4 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 tb-1 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb rb-prime) (tb tb-1) (a a-0)- (b b-0) (ks ks-0))- (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))- ((4 2) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb-prime k)- (1 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))- (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime))- (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc rb-prime k)))))- (label 9)- (parent 3)- (unrealized (0 2) (4 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 tb-1- text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb-1) (a a-0) (b b-0) (ks ks-0))- (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))- ((4 1) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc rb-prime k) (1 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k)))))- (label 10)- (parent 3)- (unrealized (0 2) (4 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((3 1) (2 0))- ((4 1) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb-prime k) (1 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv k) (send k)))- (label 11)- (parent 3)- (unrealized (0 2) (4 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((3 3) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (3 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))- (label 12)- (parent 4)- (unrealized (0 2) (3 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))- ((3 2) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (3 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))- (label 13)- (parent 5)- (unrealized (0 2) (3 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 2)) ((2 1) (1 0))- ((3 1) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (3 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k)))))- (label 14)- (parent 6)- (unrealized (0 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((3 1) (2 0)) ((4 3) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test- (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0)- (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))- (label 15)- (parent 8)- (unrealized (0 2) (4 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb rb-prime) (tb tb-0) (a a) (b b)- (ks ks))- (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))- ((4 2) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test- (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 1)- (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((send (cat a ra-1))- (recv- (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-prime))- (send (cat (enc a k tb-0 (ltk b ks)) (enc rb-prime k)))))- (label 16)- (parent 9)- (unrealized (0 2) (4 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))- ((4 1) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test- (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0)- (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (cat (enc a k tb-0 (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k)))))- (label 17)- (parent 10)- (unrealized (0 2))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 3) (3 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-0 k) (3 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))))- (label 18)- (parent 12)- (unrealized (0 2) (4 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 2) (3 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)- (3 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))- (label 19)- (parent 12)- (unrealized (0 2) (4 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (3 0))- ((3 1) (1 0)) ((3 3) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 4 1 resp-reauth 2)- (enc ra-prime-0 k) (3 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))- (label 20)- (parent 12)- (unrealized (0 2))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-0 k) (3 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k)))))- (label 21)- (parent 12)- (unrealized (0 2) (4 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-0 k)- (3 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv k) (send k)))- (label 22)- (parent 12)- (unrealized (0 2) (4 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))- ((3 0) (0 0)) ((3 2) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 4 2 keyserver 2)- (enc b ra-0 k tb (ltk a ks)) (3 1))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))- (label 23)- (parent 13)- (unrealized (0 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((3 1) (1 2)) ((4 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 24)- (parent 14)- (unrealized (4 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))- ((3 1) (1 2)) ((4 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 25)- (parent 14)- (unrealized (4 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb ra-prime rb-prime rb rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 0)) ((2 1) (1 0))- ((3 1) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra ra-prime rb-prime)- (operation encryption-test (displaced 4 1 resp-reauth 2) (enc rb-0 k)- (0 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k)))))- (label 26)- (parent 14)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 rb-prime-1 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((3 1) (1 2)) ((4 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-1 (enc rb k)))))- (label 27)- (parent 14)- (unrealized (4 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((3 1) (1 2)) ((4 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k)))) ((recv k) (send k)))- (label 28)- (parent 14)- (unrealized (4 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0- ra-prime-1 tb-1 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-1) (a a-0) (b b-0) (ks ks-0))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-0 k) (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))))- (label 29)- (parent 15)- (unrealized (0 2) (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-1- text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-0) (tb tb-1) (a a-0)- (b b-0) (ks ks-0))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)- (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))- (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))- (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))- (label 30)- (parent 15)- (unrealized (0 2) (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((3 1) (2 0))- ((4 1) (1 0)) ((4 3) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 5 1 resp-reauth 2)- (enc ra-prime-0 k) (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))- (label 31)- (parent 15)- (unrealized (0 2))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0- rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb-1) (a a-0) (b b-0) (ks ks-0))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-0 k) (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k)))))- (label 32)- (parent 15)- (unrealized (0 2) (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-0 k)- (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv k) (send k)))- (label 33)- (parent 15)- (unrealized (0 2) (5 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb-0) (a a) (b b)- (ks ks))- (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))- ((4 2) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 5 2 keyserver 2)- (enc b ra-1 k tb-0 (ltk a ks)) (4 1))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-prime))- (send (cat (enc a k tb-0 (ltk b ks)) (enc rb-prime k)))))- (label 34)- (parent 16)- (unrealized (0 2))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))- ((4 1) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 5 2 keyserver 2)- (enc a k tb-0 (ltk b ks)) (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k)))))- (label 35)- (parent 17)- (unrealized (0 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 3) (3 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))))- (label 36)- (parent 18)- (unrealized (0 2) (4 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 2) (3 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))- (label 37)- (parent 19)- (unrealized (0 2) (4 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 38)- (parent 20)- (unrealized (4 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))- ((3 1) (1 0)) ((3 3) (1 2)) ((4 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 39)- (parent 20)- (unrealized (4 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 40)- (parent 20)- (unrealized (4 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv k) (send k)))- (label 41)- (parent 20)- (unrealized (4 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k)))))- (label 42)- (parent 21)- (unrealized (0 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 43)- (parent 23)- (unrealized (4 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 1))- ((3 0) (0 0)) ((3 2) (1 2)) ((4 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 44)- (parent 23)- (unrealized (4 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb ra-prime rb-prime rb text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 1)) ((2 1) (1 0))- ((3 0) (0 0)) ((3 2) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra ra-prime rb-prime)- (operation encryption-test (displaced 4 1 resp-reauth 2) (enc rb-0 k)- (0 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))- (label 45)- (parent 23)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (3 0)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 46)- (parent 23)- (unrealized (4 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv k) (send k)))- (label 47)- (parent 23)- (unrealized (4 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((3 1) (1 2)) ((4 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 48)- (parent 24)- (unrealized (4 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))- ((3 1) (1 2)) ((4 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 49)- (parent 25)- (unrealized (4 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 rb-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((3 1) (1 2)) ((4 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) rb))- (send (cat rb-prime-1 (enc rb k)))))- (label 50)- (parent 27)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0- ra-prime-1 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test- (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0)- (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))))- (label 51)- (parent 29)- (unrealized (0 2) (5 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 ra-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a)- (b b) (ks ks))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test- (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 1)- (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-1))- (recv- (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-0 k)))))- (label 52)- (parent 30)- (unrealized (0 2) (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((3 1) (2 0))- ((4 1) (1 0)) ((4 3) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 5 2 keyserver 2)- (enc a k tb-0 (ltk b ks)) (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))- (label 53)- (parent 31)- (unrealized (0 2))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0- rb-prime-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test- (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0)- (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k)))))- (label 54)- (parent 32)- (unrealized (0 2))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))- ((4 2) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 5 2 keyserver 2)- (enc a k tb-0 (ltk b ks)) (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))- (label 55)- (parent 34)- (unrealized (0 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))- ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 56)- (parent 35)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-1 tb-0- text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))- ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 57)- (parent 35)- (unrealized (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra ra-prime rb-prime tb ra-0 rb rb-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 0)) ((2 1) (1 0))- ((3 1) (2 0)) ((4 1) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra ra-prime rb-prime)- (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-1 k)- (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))- ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k)))))- (label 58)- (parent 35)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))- ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-1 (enc rb k)))))- (label 59)- (parent 35)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0))- ((4 1) (1 2)) ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k)))) ((recv k) (send k)))- (label 60)- (parent 35)- (unrealized (5 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 3) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-1 k) (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 61)- (parent 36)- (unrealized (0 2) (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0- text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 2) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)- (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))- (label 62)- (parent 36)- (unrealized (0 2) (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (3 0))- ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 5 1 resp-reauth 2)- (enc ra-prime-1 k) (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k))))- (label 63)- (parent 36)- (unrealized (0 2))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-1 k) (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 64)- (parent 36)- (unrealized (0 2) (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-1 k)- (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))) ((recv k) (send k)))- (label 65)- (parent 36)- (unrealized (0 2) (5 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 0) (0 0))- ((4 2) (3 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 5 2 keyserver 2)- (enc b ra-0 k tb (ltk a ks)) (4 1))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))- (label 66)- (parent 37)- (unrealized (0 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 67)- (parent 38)- (unrealized (4 2))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))- ((3 1) (1 0)) ((3 3) (1 2)) ((4 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 68)- (parent 39)- (unrealized (4 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 69)- (parent 40)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (3 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))- ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))- (label 70)- (parent 42)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-0 tb-0- text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))- ((5 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 71)- (parent 42)- (unrealized (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb ra-prime rb-prime rb ra-prime-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra ra-prime rb-prime)- (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-0 k)- (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k)))))- (label 72)- (parent 42)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 rb-prime-1- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))- ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-1 (enc rb k)))))- (label 73)- (parent 42)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))- ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k)))) ((recv k) (send k)))- (label 74)- (parent 42)- (unrealized (5 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 75)- (parent 43)- (unrealized (4 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 1))- ((3 0) (0 0)) ((3 2) (1 2)) ((4 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 76)- (parent 44)- (unrealized (4 1))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 77)- (parent 46)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-0 k) (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))))- (label 78)- (parent 48)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-0 tb-0- text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 2) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)- (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))- (label 79)- (parent 48)- (unrealized (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((1 1) (4 2)) ((2 1) (4 0))- ((3 1) (1 2)) ((4 1) (1 0)) ((4 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 5 1 resp-reauth 2)- (enc ra-prime-0 k) (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb (enc ra-prime k))) (send (enc rb k))))- (label 80)- (parent 48)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 rb-prime-1- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-0 k) (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (send (cat rb-prime-1 (enc ra-prime-0 k)))))- (label 81)- (parent 48)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-0 k)- (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv k) (send k)))- (label 82)- (parent 48)- (unrealized (5 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))- ((3 1) (1 2)) ((4 0) (0 0)) ((4 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 5 2 keyserver 2)- (enc b ra-0 k tb (ltk a ks)) (4 1))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((send (cat a ra))- (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 83)- (parent 49)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0- ra-prime-1 ra-prime-2 tb-1 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-1) (a a-0) (b b-0) (ks ks-0))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 3) (4 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 84)- (parent 51)- (unrealized (0 2) (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0- ra-prime-1 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-1) (tb tb-1) (a a-0)- (b b-0) (ks ks-0))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 3) (4 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))- (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))- (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))- (label 85)- (parent 51)- (unrealized (0 2) (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (precedes ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 1 resp-reauth 2)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k))))- (label 86)- (parent 51)- (unrealized (0 2))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0- ra-prime-1 rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb-1) (a a-0) (b b-0) (ks ks-0))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 87)- (parent 51)- (unrealized (0 2) (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0- ra-prime-1 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-1 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))) ((recv k) (send k)))- (label 88)- (parent 51)- (unrealized (0 2) (6 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a)- (b b) (ks ks))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 2 keyserver 2)- (enc b ra-1 k tb-0 (ltk a ks)) (5 1))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-0 k)))))- (label 89)- (parent 52)- (unrealized (0 2))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 90)- (parent 53)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))- ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 91)- (parent 53)- (unrealized (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 0)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 92)- (parent 53)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 1) (2 0))- ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv k) (send k)))- (label 93)- (parent 53)- (unrealized (5 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 2 keyserver 2)- (enc a k tb-0 (ltk b ks)) (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k)))))- (label 94)- (parent 54)- (unrealized (0 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))- ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 95)- (parent 55)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))- ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 96)- (parent 55)- (unrealized (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra ra-prime rb-prime tb ra-0 rb rb-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 1)) ((2 1) (1 0))- ((3 1) (2 0)) ((4 2) (1 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra ra-prime rb-prime)- (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-1 k)- (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))- ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))- (label 97)- (parent 55)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))- ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 98)- (parent 55)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (deflistener k)- (precedes ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0))- ((4 2) (1 2)) ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv k) (send k)))- (label 99)- (parent 55)- (unrealized (5 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))- ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 100)- (parent 56)- (unrealized (5 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))- ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((send (cat a ra-1))- (recv- (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 101)- (parent 57)- (unrealized (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))- ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) rb))- (send (cat rb-prime-1 (enc rb k)))))- (label 102)- (parent 59)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 3) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 103)- (parent 61)- (unrealized (0 2) (5 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 2) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))- (label 104)- (parent 62)- (unrealized (0 2) (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))- ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))- (label 105)- (parent 63)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))- ((5 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 106)- (parent 63)- (unrealized (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))- ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 107)- (parent 63)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))- ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k))) ((recv k) (send k)))- (label 108)- (parent 63)- (unrealized (5 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 109)- (parent 64)- (unrealized (0 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))- ((4 2) (3 2)) ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))- (label 110)- (parent 66)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 0) (0 0))- ((4 2) (3 2)) ((5 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 111)- (parent 66)- (unrealized (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb ra-prime rb-prime rb ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 0) (0 0))- ((4 2) (3 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra ra-prime rb-prime)- (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-0 k)- (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))- (label 112)- (parent 66)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (4 0)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))- ((4 2) (3 2)) ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 113)- (parent 66)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))- ((4 2) (3 2)) ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv k) (send k)))- (label 114)- (parent 66)- (unrealized (5 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))- ((5 3) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-0 k) (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))))- (label 115)- (parent 67)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))- ((5 2) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)- (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))- (label 116)- (parent 67)- (unrealized (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))- ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-0 k) (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k)))))- (label 117)- (parent 67)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))- ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-0 k)- (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv k) (send k)))- (label 118)- (parent 67)- (unrealized (5 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))- ((3 1) (1 0)) ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 5 2 keyserver 2)- (enc b ra-0 k tb (ltk a ks)) (4 1))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 119)- (parent 68)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (ra-prime (3 1))- (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))- ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))- (label 120)- (parent 70)- (unrealized (5 2))- (comment "6 in cohort - 6 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))- ((5 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 121)- (parent 71)- (unrealized (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 rb-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))- ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (cat (enc a k tb (ltk b ks)) rb))- (send (cat rb-prime-1 (enc rb k)))))- (label 122)- (parent 73)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))- ((5 3) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-0 k) (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))))- (label 123)- (parent 75)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))- ((5 2) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)- (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))- (label 124)- (parent 75)- (unrealized (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((1 1) (4 2)) ((2 1) (4 0))- ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (1 0)) ((4 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 5 1 resp-reauth 2)- (enc ra-prime-0 k) (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb (enc ra-prime k))) (send (enc rb k))))- (label 125)- (parent 75)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (ra-prime (4 1))- (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))- ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-0 k) (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k)))))- (label 126)- (parent 75)- (unrealized (5 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))- ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-0 k)- (4 2))- (strand-map 0 1 2 3 4)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv k) (send k)))- (label 127)- (parent 75)- (unrealized (5 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))))- (label 128)- (parent 78)- (unrealized (5 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 2) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))- (label 129)- (parent 79)- (unrealized (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 rb-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-1 (enc ra-prime-0 k)))))- (label 130)- (parent 81)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0- ra-prime-1 ra-prime-2 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a) (b b) (ks ks))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 3) (4 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test- (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0)- (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 131)- (parent 84)- (unrealized (0 2) (6 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0- ra-prime-1 ra-1 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a)- (b b) (ks ks))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 3) (4 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test- (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 1)- (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra-1))- (recv- (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-1 k)))))- (label 132)- (parent 85)- (unrealized (0 2) (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 2 keyserver 2)- (enc a k tb-0 (ltk b ks)) (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k))))- (label 133)- (parent 86)- (unrealized (0 2))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0- ra-prime-1 rb-prime-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test- (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0)- (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 134)- (parent 87)- (unrealized (0 2))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 2 keyserver 2)- (enc a k tb-0 (ltk b ks)) (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))- (label 135)- (parent 89)- (unrealized (0 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 136)- (parent 90)- (unrealized (5 2))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))- ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((send (cat a ra-1))- (recv- (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 137)- (parent 91)- (unrealized (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 0)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 138)- (parent 92)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 1) (4 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))- (label 139)- (parent 94)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 1) (4 2)) ((6 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 140)- (parent 94)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra ra-prime rb-prime)- (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-1 k)- (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))- ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k)))))- (label 141)- (parent 94)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 1) (4 2)) ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-1 (enc rb k)))))- (label 142)- (parent 94)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2))- ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k)))) ((recv k) (send k)))- (label 143)- (parent 94)- (unrealized (6 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))- ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 144)- (parent 95)- (unrealized (5 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))- ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((send (cat a ra-1))- (recv- (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 145)- (parent 96)- (unrealized (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))- ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 146)- (parent 98)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0- ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))- ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-0 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))))- (label 147)- (parent 100)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0- ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))- ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))- (label 148)- (parent 100)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((1 1) (5 2)) ((2 1) (5 0))- ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (1 0)) ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 1 resp-reauth 2)- (enc ra-prime-0 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb (enc ra-prime k))) (send (enc rb k))))- (label 149)- (parent 100)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0- rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))- ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-0 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (send (cat rb-prime-1 (enc ra-prime-0 k)))))- (label 150)- (parent 100)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))- ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-0 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv k) (send k)))- (label 151)- (parent 100)- (unrealized (6 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))- ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 2 keyserver 2)- (enc b ra-1 k tb (ltk a ks)) (5 1))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 152)- (parent 101)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)- (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-2 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))- (recv (cat ra-prime-2 (enc ra-prime-3 k)))- (send (enc ra-prime-2 k))))- (label 153)- (parent 103)- (unrealized (0 2) (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))- (label 154)- (parent 103)- (unrealized (0 2) (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 3) (3 2))- ((5 1) (1 0)) ((5 3) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 1 resp-reauth 2)- (enc ra-prime-2 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k))))- (label 155)- (parent 103)- (unrealized (0 2))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-2 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat rb-prime-0 (enc ra-prime-2 k)))))- (label 156)- (parent 103)- (unrealized (0 2) (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-2 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))) ((recv k) (send k)))- (label 157)- (parent 103)- (unrealized (0 2) (6 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 2 keyserver 2)- (enc b ra-0 k tb (ltk a ks)) (5 1))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))- (label 158)- (parent 104)- (unrealized (0 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))- ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))- (label 159)- (parent 105)- (unrealized (5 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))- ((5 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 160)- (parent 106)- (unrealized (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))- ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 161)- (parent 107)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k))))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))- (label 162)- (parent 109)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (4 2)) ((6 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k))))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 163)- (parent 109)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb ra-prime rb-prime rb ra-prime-0 ra-prime-1 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra ra-prime rb-prime)- (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-0 k)- (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 164)- (parent 109)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k))))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-1 (enc rb k)))))- (label 165)- (parent 109)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))) ((recv k) (send k)))- (label 166)- (parent 109)- (unrealized (6 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))- ((4 2) (3 2)) ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))- (label 167)- (parent 110)- (unrealized (5 2))- (comment "6 in cohort - 6 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 0) (0 0))- ((4 2) (3 2)) ((5 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 168)- (parent 111)- (unrealized (5 1))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))- ((4 2) (3 2)) ((5 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (cat (enc a k tb (ltk b ks)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 169)- (parent 113)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))- ((5 3) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))))- (label 170)- (parent 115)- (unrealized (5 2))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))- ((5 2) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))- (label 171)- (parent 116)- (unrealized (5 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))- ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k)))))- (label 172)- (parent 117)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (3 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (5 2)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))- ((5 1) (1 0)) ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 1 resp-reauth 2)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb (enc ra-prime k))) (send (enc rb k))))- (label 173)- (parent 120)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1- ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 174)- (parent 120)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1- ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))- ((4 1) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))- (label 175)- (parent 120)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))- ((4 1) (5 2)) ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 4 resp-reauth 2)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 176)- (parent 120)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1- rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat rb-prime-1 (enc ra-prime-1 k)))))- (label 177)- (parent 120)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-1 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv k) (send k)))- (label 178)- (parent 120)- (unrealized (6 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))- ((5 0) (0 0)) ((5 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 2 keyserver 2)- (enc b ra-0 k tb (ltk a ks)) (5 1))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((send (cat a ra))- (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 179)- (parent 121)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))- ((5 3) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))))- (label 180)- (parent 123)- (unrealized (5 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))- ((5 2) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))- (label 181)- (parent 124)- (unrealized (5 1))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))- ((5 1) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k)))))- (label 182)- (parent 126)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1- ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))- ((5 3) (4 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 183)- (parent 128)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1- ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 2)) ((4 3) (0 2))- ((5 3) (4 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))- (label 184)- (parent 128)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((1 1) (5 2)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (1 0))- ((5 3) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 1 resp-reauth 2)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k))))- (label 185)- (parent 128)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1- rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))- ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat rb-prime-1 (enc ra-prime-1 k)))))- (label 186)- (parent 128)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))- ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-1 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))) ((recv k) (send k)))- (label 187)- (parent 128)- (unrealized (6 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 0) (0 0))- ((5 2) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 2 keyserver 2)- (enc b ra-0 k tb (ltk a ks)) (5 1))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))- (label 188)- (parent 129)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0- ra-prime-1 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb-0) (a a) (b b) (ks ks))- (precedes ((1 1) (6 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2))- ((6 1) (1 0)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 1 resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k))))- (label 191)- (parent 131)- (unrealized (0 2))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0- ra-prime-1 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a)- (b b) (ks ks))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 3) (4 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 2 keyserver 2)- (enc b ra-1 k tb-0 (ltk a ks)) (6 1))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-1 k)))))- (label 194)- (parent 132)- (unrealized (0 2))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))- ((5 3) (4 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))- (label 195)- (parent 133)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0- text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (6 1)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))- ((5 3) (4 2)) ((6 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 196)- (parent 133)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (6 0)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))- ((5 3) (4 2)) ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 197)- (parent 133)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))- ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2))- ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k))) ((recv k) (send k)))- (label 198)- (parent 133)- (unrealized (6 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- rb-prime-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 2 keyserver 2)- (enc a k tb-0 (ltk b ks)) (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 199)- (parent 134)- (unrealized (0 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 2) (4 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))- (label 200)- (parent 135)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0- text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 2) (4 2)) ((6 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 201)- (parent 135)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 2) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra ra-prime rb-prime)- (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-1 k)- (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))- ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))- (label 202)- (parent 135)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 2) (4 2)) ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 203)- (parent 135)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (deflistener k)- (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 1))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2))- ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv k) (send k)))- (label 204)- (parent 135)- (unrealized (6 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))- ((5 3) (0 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-0 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))))- (label 205)- (parent 136)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0- text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))- ((5 3) (0 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))- (label 206)- (parent 136)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))- ((5 3) (0 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-0 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k)))))- (label 207)- (parent 136)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))- ((5 3) (0 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-0 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv k) (send k)))- (label 208)- (parent 136)- (unrealized (6 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))- ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 2 keyserver 2)- (enc b ra-1 k tb (ltk a ks)) (5 1))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 209)- (parent 137)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- ra-prime-1 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 1) (4 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))- (label 210)- (parent 139)- (unrealized (6 2))- (comment "6 in cohort - 6 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- ra-1 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 1) (4 2)) ((6 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((send (cat a ra-1))- (recv- (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 211)- (parent 140)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- rb-prime-1 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 1) (4 2)) ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (cat (enc a k tb (ltk b ks)) rb))- (send (cat rb-prime-1 (enc rb k)))))- (label 212)- (parent 142)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))- ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-0 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))))- (label 213)- (parent 144)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0- text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))- ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))- (label 214)- (parent 144)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((1 1) (5 2)) ((2 1) (5 0))- ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (1 0)) ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 1 resp-reauth 2)- (enc ra-prime-0 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb (enc ra-prime k))) (send (enc rb k))))- (label 215)- (parent 144)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))- ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-0 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k)))))- (label 216)- (parent 144)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))- ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-0 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv k) (send k)))- (label 217)- (parent 144)- (unrealized (6 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))- ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 2 keyserver 2)- (enc b ra-1 k tb (ltk a ks)) (5 1))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 218)- (parent 145)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0- ra-prime-1 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))- ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))))- (label 219)- (parent 147)- (unrealized (6 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0- ra-1 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))- ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((send (cat a ra-1))- (recv- (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))- (label 220)- (parent 148)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0- rb-prime-1 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))- ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-1 (enc ra-prime-0 k)))))- (label 221)- (parent 150)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-prime-3 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)- (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-3))- (recv (cat ra-prime-2 (enc ra-prime-3 k)))- (send (enc ra-prime-2 k))))- (label 222)- (parent 153)- (unrealized (0 2) (6 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-2))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k)))))- (label 223)- (parent 154)- (unrealized (0 2) (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))- ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))- (label 224)- (parent 155)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0- text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 3) (3 2))- ((5 1) (1 0)) ((5 3) (4 2)) ((6 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 225)- (parent 155)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))- ((5 1) (1 0)) ((5 3) (4 2)) ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 226)- (parent 155)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))- ((5 1) (1 0)) ((5 3) (4 2)) ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k))) ((recv k) (send k)))- (label 227)- (parent 155)- (unrealized (6 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- rb-prime-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))- (send (cat rb-prime-0 (enc ra-prime-2 k)))))- (label 228)- (parent 156)- (unrealized (0 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))- (label 229)- (parent 158)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0- text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 1)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 230)- (parent 158)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb ra-prime rb-prime rb ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra ra-prime rb-prime)- (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-0 k)- (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))- (label 231)- (parent 158)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (5 0)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 232)- (parent 158)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((recv k) (send k)))- (label 233)- (parent 158)- (unrealized (6 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))- ((4 3) (5 2)) ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 4 init-reauth 4)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 234)- (parent 159)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0- text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 1) (1 0))- ((4 3) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))- (label 235)- (parent 159)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))- ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 236)- (parent 159)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))- ((4 3) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 237)- (parent 159)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))- ((4 3) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-1 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv k) (send k)))- (label 238)- (parent 159)- (unrealized (6 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))- ((5 0) (0 0)) ((5 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 2 keyserver 2)- (enc b ra-0 k tb (ltk a ks)) (5 1))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 239)- (parent 160)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (ra-prime (4 1))- (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- ra-prime-2 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))- (label 240)- (parent 162)- (unrealized (6 2))- (comment "7 in cohort - 7 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- ra-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (4 2)) ((6 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 241)- (parent 163)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- rb-prime-1 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k))))- ((recv (cat (enc a k tb (ltk b ks)) rb))- (send (cat rb-prime-1 (enc rb k)))))- (label 242)- (parent 165)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 243)- (parent 167)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0- text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))- ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))- (label 244)- (parent 167)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))- ((4 2) (3 2)) ((4 2) (5 2)) ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 4 init 3) (enc ra-prime-1 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 245)- (parent 167)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (5 2)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))- ((4 2) (3 2)) ((5 1) (1 0)) ((5 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 1 resp-reauth 2)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb (enc ra-prime k))) (send (enc rb k))))- (label 246)- (parent 167)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (ra-prime (5 1))- (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 247)- (parent 167)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-1 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv k) (send k)))- (label 248)- (parent 167)- (unrealized (6 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 249)- (parent 170)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0- text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 0)) ((3 3) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))- (label 250)- (parent 170)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 251)- (parent 170)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-1 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))) ((recv k) (send k)))- (label 252)- (parent 170)- (unrealized (6 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))- ((5 0) (0 0)) ((5 2) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 2 keyserver 2)- (enc b ra-0 k tb (ltk a ks)) (5 1))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))- (label 253)- (parent 171)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (ra-prime (3 1))- (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1- ra-prime-2 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 254)- (parent 174)- (unrealized (6 2))- (comment "6 in cohort - 6 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1- ra-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))- ((4 1) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))- (label 255)- (parent 175)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1- rb-prime-1 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-1 (enc ra-prime-1 k)))))- (label 256)- (parent 177)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 257)- (parent 180)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0- text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 0) (0 0)) ((3 2) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))- (label 258)- (parent 180)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((1 1) (5 2)) ((2 1) (4 0))- ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))- ((5 1) (1 0)) ((5 3) (4 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 6 1 resp-reauth 2)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k))))- (label 259)- (parent 180)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (ra-prime (5 1))- (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-1 k) (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 260)- (parent 180)- (unrealized (6 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-1 k)- (5 2))- (strand-map 0 1 2 3 4 5)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))) ((recv k) (send k)))- (label 261)- (parent 180)- (unrealized (6 0))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1- ra-prime-2 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))- ((5 3) (4 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 262)- (parent 183)- (unrealized (6 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1- ra-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 2)) ((4 3) (0 2))- ((5 3) (4 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))- (label 263)- (parent 184)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1- rb-prime-1 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))- ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-1 (enc ra-prime-1 k)))))- (label 264)- (parent 186)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((1 1) (6 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2))- ((6 1) (1 0)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 2 keyserver 2)- (enc a k tb-0 (ltk b ks)) (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k))))- (label 265)- (parent 191)- (unrealized (0 2))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 3) (4 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 2 keyserver 2)- (enc a k tb-0 (ltk b ks)) (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))- (label 266)- (parent 194)- (unrealized (0 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))- ((5 3) (4 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))- (label 267)- (parent 195)- (unrealized (6 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (6 1)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))- ((5 3) (4 2)) ((6 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra-1))- (recv- (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 268)- (parent 196)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (6 0)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))- ((5 3) (4 2)) ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 269)- (parent 197)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 ra-prime-1- rb-prime-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra ra-prime rb-prime)- (operation encryption-test (displaced 7 1 resp-reauth 2) (enc rb-1 k)- (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))- ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 272)- (parent 199)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 2) (4 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))- (label 275)- (parent 200)- (unrealized (6 2))- (comment "6 in cohort - 6 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 2) (4 2)) ((6 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((send (cat a ra-1))- (recv- (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 276)- (parent 201)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 2) (4 2)) ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (cat (enc a k tb (ltk b ks)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 277)- (parent 203)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))- ((5 3) (0 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))))- (label 278)- (parent 205)- (unrealized (6 2))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))- ((5 3) (0 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((send (cat a ra-1))- (recv- (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))- (label 279)- (parent 206)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))- ((5 3) (0 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k)))))- (label 280)- (parent 207)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((1 1) (6 2)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 1) (4 2)) ((6 1) (1 0)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 1 resp-reauth 2)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb (enc ra-prime k))) (send (enc rb k))))- (label 281)- (parent 210)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 1) (4 2)) ((5 1) (6 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 5 resp-reauth 2)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 284)- (parent 210)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 1) (4 2)) ((6 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 2 keyserver 2)- (enc b ra-1 k tb (ltk a ks)) (6 1))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 287)- (parent 211)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))- ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))))- (label 288)- (parent 213)- (unrealized (6 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))- ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((send (cat a ra-1))- (recv- (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))- (label 289)- (parent 214)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))- ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k)))))- (label 290)- (parent 216)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((1 1) (6 2)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))- ((6 1) (1 0)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 1 resp-reauth 2)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k))))- (label 293)- (parent 219)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))- ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 2 keyserver 2)- (enc b ra-1 k tb (ltk a ks)) (6 1))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))- (label 296)- (parent 220)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (6 2)) ((2 1) (0 2)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 1 resp-reauth 2)- (enc ra-prime-3 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-2 (enc ra-prime k)))- (send (enc ra-prime-2 k))))- (label 299)- (parent 222)- (unrealized (0 2))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))- ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 2 keyserver 2)- (enc b ra-0 k tb (ltk a ks)) (6 1))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-2))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k)))))- (label 302)- (parent 223)- (unrealized (0 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))- ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))- (label 303)- (parent 224)- (unrealized (6 2))- (comment "6 in cohort - 6 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 3) (3 2))- ((5 1) (1 0)) ((5 3) (4 2)) ((6 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 304)- (parent 225)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))- ((5 1) (1 0)) ((5 3) (4 2)) ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k)))- ((recv (cat (enc a k tb (ltk b ks)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 305)- (parent 226)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb ra-prime rb-prime rb ra-prime-0 ra-prime-1 ra-prime-2- rb-prime-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra ra-prime rb-prime)- (operation encryption-test (displaced 7 1 resp-reauth 2) (enc rb-0 k)- (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))- (send (cat rb-prime-0 (enc ra-prime-2 k)))))- (label 308)- (parent 228)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))- (label 311)- (parent 229)- (unrealized (6 2))- (comment "7 in cohort - 7 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 1)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 312)- (parent 230)- (unrealized (6 1))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((recv (cat (enc a k tb (ltk b ks)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 313)- (parent 232)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 1) (1 0))- ((4 3) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))- (label 314)- (parent 235)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))- ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 315)- (parent 236)- (unrealized (6 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))- ((4 3) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 316)- (parent 237)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((4 3) (6 2)) ((5 1) (4 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 4 init-reauth 4)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 318)- (parent 240)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (4 2)) ((5 1) (6 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 5 resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))- (label 320)- (parent 240)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (6 2)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (1 0)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 1 resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb (enc ra-prime k))) (send (enc rb k))))- (label 321)- (parent 240)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (4 2)) ((6 0) (0 0)) ((6 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 2 keyserver 2)- (enc b ra-0 k tb (ltk a ks)) (6 1))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k))))- ((send (cat a ra))- (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 324)- (parent 241)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 325)- (parent 243)- (unrealized (6 2))- (comment "6 in cohort - 6 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))- ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))- (label 326)- (parent 244)- (unrealized (6 1))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 327)- (parent 247)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 328)- (parent 249)- (unrealized (6 2))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 0)) ((3 3) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))- (label 329)- (parent 250)- (unrealized (6 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 330)- (parent 251)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (3 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (6 2)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (1 0)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 1 resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k))))- (label 331)- (parent 254)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 1) (3 2)) ((4 1) (6 2)) ((5 3) (0 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 4 resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat ra-prime-1 (enc ra-prime-0 k)))- (send (enc ra-prime-1 k))))- (label 334)- (parent 254)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))- ((4 1) (3 2)) ((5 3) (0 2)) ((6 0) (0 0)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 2 keyserver 2)- (enc b ra-0 k tb (ltk a ks)) (6 1))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))- (label 337)- (parent 255)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 338)- (parent 257)- (unrealized (6 2))- (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 0) (0 0)) ((3 2) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))- (label 339)- (parent 258)- (unrealized (6 1))- (dead)- (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))- k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 340)- (parent 260)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((1 1) (6 2)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))- ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 1 resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k))))- (label 343)- (parent 262)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 2)) ((4 3) (0 2))- ((5 3) (4 2)) ((6 0) (0 0)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 2 keyserver 2)- (enc b ra-0 k tb (ltk a ks)) (6 1))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))- (label 346)- (parent 263)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra ra-prime rb-prime)- (operation encryption-test (displaced 7 1 resp-reauth 2) (enc rb-1 k)- (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))- ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))- (label 353)- (parent 266)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))- ((5 3) (4 2)) ((5 3) (6 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 5 init-reauth 4)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 356)- (parent 267)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (6 1)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))- ((5 3) (4 2)) ((6 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 2 keyserver 2)- (enc b ra-1 k tb (ltk a ks)) (6 1))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 361)- (parent 268)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 2) (4 2)) ((5 2) (6 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 5 init 3) (enc ra-prime-1 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 364)- (parent 275)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((1 1) (6 2)) ((2 1) (4 0))- ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 2) (4 2)) ((6 1) (1 0)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 1 resp-reauth 2)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb (enc ra-prime k))) (send (enc rb k))))- (label 365)- (parent 275)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 2) (4 2)) ((6 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 2 keyserver 2)- (enc b ra-1 k tb (ltk a ks)) (6 1))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 368)- (parent 276)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))- ((5 3) (0 2)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 2 keyserver 2)- (enc b ra-1 k tb (ltk a ks)) (6 1))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))- (label 373)- (parent 279)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((1 1) (6 2)) ((2 1) (5 0))- ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))- ((6 1) (1 0)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 1 resp-reauth 2)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k))))- (label 376)- (parent 288)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))- ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 2 keyserver 2)- (enc b ra-1 k tb (ltk a ks)) (6 1))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))- (label 379)- (parent 289)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb ra-prime rb-prime rb ra-prime-0 ra-prime-1 ra-prime-2 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))- ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra ra-prime rb-prime)- (operation encryption-test (displaced 7 1 resp-reauth 2) (enc rb-0 k)- (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-2))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k)))))- (label 386)- (parent 302)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (6 0)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))- ((5 1) (1 0)) ((5 3) (4 2)) ((5 3) (6 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 5 init-reauth 4)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))- (label 389)- (parent 303)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))- ((4 3) (6 2)) ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 4 init-reauth 4)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 390)- (parent 303)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 3) (3 2))- ((5 1) (1 0)) ((5 3) (4 2)) ((6 0) (0 0)) ((6 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 2 keyserver 2)- (enc b ra-0 k tb (ltk a ks)) (6 1))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k)))- ((send (cat a ra))- (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))- (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))- (label 395)- (parent 304)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (ra-prime (5 1))- (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((4 3) (6 2)) ((5 0) (0 0)) ((5 2) (4 2))- ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 4 init-reauth 4)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))- (label 396)- (parent 311)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((5 2) (6 2))- ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 5 init 3) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))- (label 398)- (parent 311)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (6 2)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 1) (1 0))- ((6 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 1 resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb (enc ra-prime k))) (send (enc rb k))))- (label 399)- (parent 311)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (ra-prime (6 1))- (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 1) (1 0))- ((4 3) (3 2)) ((5 3) (0 2)) ((6 0) (0 0)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 2 keyserver 2)- (enc b ra-0 k tb (ltk a ks)) (6 1))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))- (label 403)- (parent 314)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (ra-prime (4 1))- (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))- ((4 3) (3 2)) ((4 3) (6 2)) ((5 3) (0 2)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 4 init-reauth 4)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat ra-prime-1 (enc ra-prime-0 k)))- (send (enc ra-prime-1 k))))- (label 404)- (parent 315)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 0) (0 0)) ((4 2) (3 2)) ((4 2) (6 2)) ((5 3) (0 2))- ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 4 init 3) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat ra-prime-1 (enc ra-prime-0 k)))- (send (enc ra-prime-1 k))))- (label 411)- (parent 325)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (6 2)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))- ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 1) (1 0))- ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 1 resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k))))- (label 412)- (parent 325)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (ra-prime (6 1))- (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 0)) ((3 3) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 0) (0 0)) ((6 2) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 2 keyserver 2)- (enc b ra-0 k tb (ltk a ks)) (6 1))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))- (label 419)- (parent 329)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (ra-prime (3 1))- (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)- (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((1 1) (6 2)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (displaced 7 1 resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k))))- (label 422)- (parent 338)- (realized)- (shape)- (maps- ((0 1)- ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)- (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))- (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (ra-prime (6 1))- (rb-prime (1 1))))--(comment "Strand bound exceeded--aborting run")--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0- ra-prime-1 ra-prime-2 ra-prime-3 tb-1 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)- (rb-prime ra-prime-2) (tb tb-1) (a a-0) (b b-0) (ks ks-0))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 3) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-3))- (recv (cat ra-prime-2 (enc ra-prime-3 k)))- (send (enc ra-prime-2 k))))- (label 189)- (parent 131)- (unrealized (0 2) (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0- ra-prime-1 ra-prime-2 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-2) (tb tb-1) (a a-0)- (b b-0) (ks ks-0))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 2) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))- (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))- (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))- (label 190)- (parent 131)- (unrealized (0 2) (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0- ra-prime-1 ra-prime-2 rb-prime-0 tb-1 text)- (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)- (rb-prime rb-prime-0) (tb tb-1) (a a-0) (b b-0) (ks ks-0))- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))- (send (cat rb-prime-0 (enc ra-prime-2 k)))))- (label 192)- (parent 131)- (unrealized (0 2) (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0- ra-prime-1 ra-prime-2 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb-0) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))- (send- (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))- rb-0)))- ((recv (cat a ra-0))- (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb-0 (ltk b ks)))- (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))) ((recv k) (send k)))- (label 193)- (parent 131)- (unrealized (0 2) (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- rb-prime-0 ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (7 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 3) (4 2)) ((6 1) (5 2)) ((7 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k))))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))- (label 270)- (parent 199)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- rb-prime-0 ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (7 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 3) (4 2)) ((6 1) (5 2)) ((7 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k))))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 271)- (parent 199)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- rb-prime-0 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (7 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 3) (4 2)) ((6 1) (5 2)) ((7 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k))))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-1 (enc rb k)))))- (label 273)- (parent 199)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- rb-prime-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 3) (4 2)) ((6 1) (5 2)) ((7 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))) ((recv k) (send k)))- (label 274)- (parent 199)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- ra-prime-1 ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 1) (4 2)) ((6 3) (0 2)) ((7 3) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 282)- (parent 210)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- ra-prime-1 ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 1) (4 2)) ((6 3) (0 2)) ((7 2) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))- (label 283)- (parent 210)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- ra-prime-1 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 1) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat rb-prime-1 (enc ra-prime-1 k)))))- (label 285)- (parent 210)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0- ra-prime-1 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 1) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-1 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv k) (send k)))- (label 286)- (parent 210)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0- ra-prime-1 ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 2))- ((5 3) (0 2)) ((6 3) (5 2)) ((7 3) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 291)- (parent 219)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0- ra-prime-1 ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 1) (1 2))- ((5 3) (0 2)) ((6 3) (5 2)) ((7 2) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))- (label 292)- (parent 219)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0- ra-prime-1 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 2))- ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat rb-prime-1 (enc ra-prime-1 k)))))- (label 294)- (parent 219)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0- ra-prime-1 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 2))- ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-1 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))) ((recv k) (send k)))- (label 295)- (parent 219)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-prime-3 ra-prime-4 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)- (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-4)- (rb-prime ra-prime-3) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))- ((2 1) (7 0)) ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2))- ((6 3) (5 2)) ((7 3) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-3 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-3))- (recv (cat ra-prime-2 (enc ra-prime-3 k)))- (send (enc ra-prime-2 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-4))- (recv (cat ra-prime-3 (enc ra-prime-4 k)))- (send (enc ra-prime-3 k))))- (label 297)- (parent 222)- (unrealized (0 2) (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-prime-3 ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)- (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-3) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))- ((2 1) (7 1)) ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2))- ((6 3) (5 2)) ((7 2) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-3 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-3))- (recv (cat ra-prime-2 (enc ra-prime-3 k)))- (send (enc ra-prime-2 k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-3 k)))))- (label 298)- (parent 222)- (unrealized (0 2) (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-prime-3 rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)- (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-3)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))- ((2 1) (7 0)) ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2))- ((6 3) (5 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-3 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-3))- (recv (cat ra-prime-2 (enc ra-prime-3 k)))- (send (enc ra-prime-2 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))- (send (cat rb-prime-0 (enc ra-prime-3 k)))))- (label 300)- (parent 222)- (unrealized (0 2) (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-prime-3 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)- (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))- ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))- ((2 1) (7 0)) ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2))- ((6 3) (5 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-3 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-3))- (recv (cat ra-prime-2 (enc ra-prime-3 k)))- (send (enc ra-prime-2 k))) ((recv k) (send k)))- (label 301)- (parent 222)- (unrealized (0 2) (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- rb-prime-0 ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2))- ((7 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))- (send (cat rb-prime-0 (enc ra-prime-2 k))))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))- (recv (cat rb (enc ra-prime-3 k))) (send (enc rb k))))- (label 306)- (parent 228)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- rb-prime-0 ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2))- ((7 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))- (send (cat rb-prime-0 (enc ra-prime-2 k))))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 307)- (parent 228)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- rb-prime-0 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2))- ((7 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))- (send (cat rb-prime-0 (enc ra-prime-2 k))))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-1 (enc rb k)))))- (label 309)- (parent 228)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- rb-prime-0 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2))- ((7 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))- (send (cat rb-prime-0 (enc ra-prime-2 k)))) ((recv k) (send k)))- (label 310)- (parent 228)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- ra-prime-2 ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)- (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2))- ((7 3) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))- (recv (cat ra-prime-2 (enc ra-prime-3 k)))- (send (enc ra-prime-2 k))))- (label 317)- (parent 240)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- ra-prime-2 ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2))- ((7 2) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))- (label 319)- (parent 240)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- ra-prime-2 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)- (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2))- ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat rb-prime-1 (enc ra-prime-2 k)))))- (label 322)- (parent 240)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0- ra-prime-2 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2))- ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))- ((recv k) (send k)))- (label 323)- (parent 240)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1- ra-prime-2 ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)- (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))- ((7 3) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))- (recv (cat ra-prime-2 (enc ra-prime-3 k)))- (send (enc ra-prime-2 k))))- (label 332)- (parent 254)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1- ra-prime-2 ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1))- ((3 3) (1 2)) ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))- ((7 2) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))- (label 333)- (parent 254)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1- ra-prime-2 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)- (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))- ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat rb-prime-1 (enc ra-prime-2 k)))))- (label 335)- (parent 254)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1- ra-prime-2 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))- ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))- (send (cat rb-prime-0 (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))) ((recv k) (send k)))- (label 336)- (parent 254)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1- ra-prime-2 ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)- (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 3) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))- (recv (cat ra-prime-2 (enc ra-prime-3 k)))- (send (enc ra-prime-2 k))))- (label 341)- (parent 262)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1- ra-prime-2 ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 2) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))- (label 342)- (parent 262)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1- ra-prime-2 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)- (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat rb-prime-1 (enc ra-prime-2 k)))))- (label 344)- (parent 262)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1- ra-prime-2 text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)- (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 2))- ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (cat (enc a k tb (ltk b ks)) rb-prime))- (send (cat rb-prime-0 (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))) ((recv k) (send k)))- (label 345)- (parent 262)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (7 2)) ((1 1) (6 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)) ((7 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))- (label 347)- (parent 265)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (7 1)) ((1 1) (6 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)) ((7 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k)))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 348)- (parent 265)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (7 0)) ((1 1) (6 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)) ((7 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 349)- (parent 265)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((1 1) (6 2)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))- ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2))- ((6 1) (1 0)) ((6 3) (5 2)) ((7 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k))) ((recv k) (send k)))- (label 350)- (parent 265)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (7 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))- (label 351)- (parent 266)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (7 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 1)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 352)- (parent 266)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (7 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 354)- (parent 266)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (deflistener k)- (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 3) (4 2)) ((6 2) (5 2)) ((7 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((recv k) (send k)))- (label 355)- (parent 266)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)) ((7 2) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))- (label 357)- (parent 267)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)) ((7 3) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 358)- (parent 267)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 359)- (parent 267)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))- ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-1 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv k) (send k)))- (label 360)- (parent 267)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 3) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 362)- (parent 275)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 2) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))- (label 363)- (parent 275)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 366)- (parent 275)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))- ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-1 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv k) (send k)))- (label 367)- (parent 275)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 0))- ((4 3) (1 2)) ((5 3) (0 2)) ((6 3) (5 2)) ((7 3) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 369)- (parent 278)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 1) (1 0))- ((4 3) (1 2)) ((5 3) (0 2)) ((6 3) (5 2)) ((7 2) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))- (label 370)- (parent 278)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 0))- ((4 3) (1 2)) ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 371)- (parent 278)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 0))- ((4 3) (1 2)) ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-1 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))) ((recv k) (send k)))- (label 372)- (parent 278)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2))- ((5 3) (0 2)) ((6 3) (5 2)) ((7 3) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))))- (label 374)- (parent 288)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 2) (1 2))- ((5 3) (0 2)) ((6 3) (5 2)) ((7 2) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a-0 ra-1))- (recv- (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))- (label 375)- (parent 288)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2))- ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-1 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))- (send (cat rb-prime-0 (enc ra-prime-1 k)))))- (label 377)- (parent 288)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))- ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2))- ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-1 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))- (send- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-0)))- ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))- ((send (cat a ra-0))- (recv- (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k))) ((recv k) (send k)))- (label 378)- (parent 288)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (6 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2))- ((7 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-2 (enc ra-prime k)))- (send (enc ra-prime-2 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))- (recv (cat rb (enc ra-prime-3 k))) (send (enc rb k))))- (label 380)- (parent 299)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (6 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2))- ((7 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-2 (enc ra-prime k)))- (send (enc ra-prime-2 k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 381)- (parent 299)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (6 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2))- ((7 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-2 (enc ra-prime k)))- (send (enc ra-prime-2 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 382)- (parent 299)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (6 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2))- ((7 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-2 (enc ra-prime k)))- (send (enc ra-prime-2 k))) ((recv k) (send k)))- (label 383)- (parent 299)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3) (rb-prime rb)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))- ((6 2) (5 2)) ((7 3) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-2))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k))))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))- (recv (cat rb (enc ra-prime-3 k))) (send (enc rb k))))- (label 384)- (parent 302)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)- (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 1))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))- ((6 2) (5 2)) ((7 2) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-2))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k))))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))- (label 385)- (parent 302)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b)- (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)- (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))- ((6 2) (5 2)) ((7 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2) (enc rb k)- (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-2))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k))))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))- (send (cat rb-prime-0 (enc rb k)))))- (label 387)- (parent 302)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b)- (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))- ((6 2) (5 2)) ((7 1) (0 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc rb k) (0 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-2))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k))))- ((recv k) (send k)))- (label 388)- (parent 302)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2))- ((7 2) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))- (label 391)- (parent 303)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)- (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2))- ((7 3) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))- (recv (cat ra-prime-2 (enc ra-prime-3 k)))- (send (enc ra-prime-2 k))))- (label 392)- (parent 303)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2))- ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat rb-prime-0 (enc ra-prime-2 k)))))- (label 393)- (parent 303)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))- ((4 3) (3 2)) ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2))- ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-1 (enc ra-prime k)))- (send (enc ra-prime-1 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))- ((recv k) (send k)))- (label 394)- (parent 303)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 1))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2))- ((6 3) (0 2)) ((7 2) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))- (label 397)- (parent 311)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)- (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2))- ((6 3) (0 2)) ((7 3) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))- (recv (cat ra-prime-2 (enc ra-prime-3 k)))- (send (enc ra-prime-2 k))))- (label 400)- (parent 311)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2))- ((6 3) (0 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat rb-prime-0 (enc ra-prime-2 k)))))- (label 401)- (parent 311)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2))- ((6 3) (0 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-1))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))- ((recv k) (send k)))- (label 402)- (parent 311)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 3) (1 2))- ((4 1) (1 0)) ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))- ((7 2) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))- (label 405)- (parent 315)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)- (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))- ((4 1) (1 0)) ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))- ((7 3) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))- (recv (cat ra-prime-2 (enc ra-prime-3 k)))- (send (enc ra-prime-2 k))))- (label 406)- (parent 315)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))- ((4 1) (1 0)) ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))- ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat rb-prime-0 (enc ra-prime-2 k)))))- (label 407)- (parent 315)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))- ((4 1) (1 0)) ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))- ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat ra-prime-0 (enc ra-prime k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))) ((recv k) (send k)))- (label 408)- (parent 315)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)- (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2))- ((6 3) (5 2)) ((7 3) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))- (recv (cat ra-prime-2 (enc ra-prime-3 k)))- (send (enc ra-prime-2 k))))- (label 409)- (parent 325)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1))- ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2))- ((6 3) (5 2)) ((7 2) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))- (label 410)- (parent 325)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2))- ((6 3) (5 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat rb-prime-0 (enc ra-prime-2 k)))))- (label 413)- (parent 325)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)- (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))- ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))- ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2))- ((6 3) (5 2)) ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- ra-prime-0))- (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))) ((recv k) (send k)))- (label 414)- (parent 325)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)- (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 0))- ((3 3) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))- ((7 3) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))- (recv (cat ra-prime-2 (enc ra-prime-3 k)))- (send (enc ra-prime-2 k))))- (label 415)- (parent 328)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (1 0))- ((3 3) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))- ((7 2) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))- (label 416)- (parent 328)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 0))- ((3 3) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))- ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat rb-prime-0 (enc ra-prime-2 k)))))- (label 417)- (parent 328)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 0))- ((3 3) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))- ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime))- (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))) ((recv k) (send k)))- (label 418)- (parent 328)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)- (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 0) (0 0))- ((3 2) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))- ((7 3) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init-reauth 4)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))- (recv (cat ra-prime-2 (enc ra-prime-3 k)))- (send (enc ra-prime-2 k))))- (label 420)- (parent 338)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)- (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 0) (0 0))- ((3 2) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))- ((7 2) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((send (cat a-0 ra-0))- (recv- (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))- (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))- (label 421)- (parent 338)- (unrealized (7 1))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)- (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 0) (0 0))- ((3 2) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))- ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-strand resp-reauth 2)- (enc ra-prime-2 k) (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k)))- ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))- (send (cat rb-prime-0 (enc ra-prime-2 k)))))- (label 423)- (parent 338)- (unrealized (7 0))- (aborted)- (comment "aborted"))--(defskeleton neuman-stubblebine-reauth- (vars (k skey)- (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2- text) (a b ks name))- (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))- (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)- (tb tb) (a a) (b b) (ks ks))- (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)- (ks ks))- (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)- (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)- (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)- (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))- (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)- (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))- (deflistener k)- (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))- ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 0) (0 0))- ((3 2) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))- ((7 1) (6 2)))- (non-orig (ltk a ks) (ltk b ks))- (uniq-orig k ra rb ra-prime rb-prime)- (operation encryption-test (added-listener k) (enc ra-prime-2 k)- (6 2))- (strand-map 0 1 2 3 4 5 6)- (traces- ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))- (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))- ((recv (cat (enc a k tb (ltk b ks)) ra-prime))- (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))- ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))- (send- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))- ((send (cat a ra))- (recv- (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))- rb-prime))- (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-0))- (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-1))- (recv (cat ra-prime-0 (enc ra-prime-1 k)))- (send (enc ra-prime-0 k)))- ((recv (enc a k tb (ltk b ks)))- (send (cat (enc a k tb (ltk b ks)) ra-prime-2))- (recv (cat ra-prime-1 (enc ra-prime-2 k)))- (send (enc ra-prime-1 k))) ((recv k) (send k)))- (label 424)- (parent 338)- (unrealized (7 0))- (aborted)+(comment "CPSA 4.4.7")+(comment "All input read from tst/neuman-stubblebine-reauth.lsp")+(comment "Strand count bounded at 8")++(defprotocol neuman-stubblebine-reauth basic+ (defrole init+ (vars (a b ks name) (ra rb text) (k skey) (tb text))+ (trace (send (cat a ra))+ (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (defrole resp+ (vars (a b ks name) (ra rb text) (k skey) (tb text))+ (trace (recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (defrole init-reauth+ (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text))+ (trace (recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))+ (defrole resp-reauth+ (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text))+ (trace (recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))))+ (defrole keyserver+ (vars (a b ks name) (ra rb text) (k skey) (tb text))+ (trace (recv (cat b rb (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+ (uniq-orig k))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false)))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime tb-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))))+ (label 0)+ (unrealized (0 2) (1 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (origs (rb (0 1)) (rb-prime (1 1)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (precedes ((2 1) (0 2)) ((2 1) (1 0)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand keyserver 2)+ (enc a k tb-0 (ltk b ks)) (1 0))+ (strand-map 0 1)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0))))+ (label 1)+ (parent 0)+ (unrealized (0 2) (1 2) (2 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((2 1) (0 2)) ((2 1) (1 0)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 3 0 resp 2)+ (enc a ra-0 tb-0 (ltk b ks)) (2 0))+ (strand-map 0 1 2)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0))))+ (label 2)+ (parent 1)+ (unrealized (0 2) (1 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp 2)+ (enc a ra-0 tb-0 (ltk b ks)) (2 0))+ (strand-map 0 1 2)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))))+ (label 3)+ (parent 1)+ (unrealized (0 2) (1 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((3 3) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc rb-prime k) (1 2))+ (strand-map 0 1 2)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))+ (label 4)+ (parent 2)+ (unrealized (0 2) (3 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))+ ((3 2) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb-prime k)+ (1 2))+ (strand-map 0 1 2)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb-prime))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb-prime k)))))+ (label 5)+ (parent 2)+ (unrealized (0 2) (3 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 2)) ((2 1) (1 0))+ ((3 1) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc rb-prime k) (1 2))+ (strand-map 0 1 2)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k)))))+ (label 6)+ (parent 2)+ (unrealized (0 2) (3 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((3 1) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb-prime k) (1 2))+ (strand-map 0 1 2)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv k) (send k)))+ (label 7)+ (parent 2)+ (unrealized (0 2) (3 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 tb-1+ text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-1) (a a-0) (b b-0) (ks ks-0))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((3 1) (2 0)) ((4 3) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc rb-prime k) (1 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))+ (label 8)+ (parent 3)+ (unrealized (0 2) (4 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 tb-1 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb rb-prime) (tb tb-1) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+ ((4 2) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb-prime k)+ (1 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))+ (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime))+ (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc rb-prime k)))))+ (label 9)+ (parent 3)+ (unrealized (0 2) (4 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 tb-1+ text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb-1) (a a-0) (b b-0) (ks ks-0))+ (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+ ((4 1) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc rb-prime k) (1 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k)))))+ (label 10)+ (parent 3)+ (unrealized (0 2) (4 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((3 1) (2 0))+ ((4 1) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb-prime k) (1 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv k) (send k)))+ (label 11)+ (parent 3)+ (unrealized (0 2) (4 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((3 3) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (3 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))+ (label 12)+ (parent 4)+ (unrealized (0 2) (3 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))+ ((3 2) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (3 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+ (label 13)+ (parent 5)+ (unrealized (0 2) (3 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 2)) ((2 1) (1 0))+ ((3 1) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (3 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k)))))+ (label 14)+ (parent 6)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((3 1) (2 0)) ((4 3) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test+ (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0)+ (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))+ (label 15)+ (parent 8)+ (unrealized (0 2) (4 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb rb-prime) (tb tb-0) (a a) (b b)+ (ks ks))+ (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+ ((4 2) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test+ (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 1)+ (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((send (cat a ra-1))+ (recv+ (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb-0 (ltk b ks)) (enc rb-prime k)))))+ (label 16)+ (parent 9)+ (unrealized (0 2) (4 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+ ((4 1) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test+ (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0)+ (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k)))))+ (label 17)+ (parent 10)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 3) (3 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-0 k) (3 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))))+ (label 18)+ (parent 12)+ (unrealized (0 2) (4 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 2) (3 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+ (3 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+ (label 19)+ (parent 12)+ (unrealized (0 2) (4 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (3 0))+ ((3 1) (1 0)) ((3 3) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 4 1 resp-reauth 2)+ (enc ra-prime-0 k) (3 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))+ (label 20)+ (parent 12)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-0 k) (3 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k)))))+ (label 21)+ (parent 12)+ (unrealized (0 2) (4 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-0 k)+ (3 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv k) (send k)))+ (label 22)+ (parent 12)+ (unrealized (0 2) (4 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))+ ((3 0) (0 0)) ((3 2) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 4 2 keyserver 2)+ (enc b ra-0 k tb (ltk a ks)) (3 1))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+ (label 23)+ (parent 13)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((3 1) (1 2)) ((4 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 24)+ (parent 14)+ (unrealized (4 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))+ ((3 1) (1 2)) ((4 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 25)+ (parent 14)+ (unrealized (4 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb ra-prime rb-prime rb rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 0)) ((2 1) (1 0))+ ((3 1) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra ra-prime rb-prime)+ (operation encryption-test (displaced 4 1 resp-reauth 2) (enc rb-0 k)+ (0 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k)))))+ (label 26)+ (parent 14)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 rb-prime-1 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((3 1) (1 2)) ((4 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-1 (enc rb k)))))+ (label 27)+ (parent 14)+ (unrealized (4 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((3 1) (1 2)) ((4 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k)))) ((recv k) (send k)))+ (label 28)+ (parent 14)+ (unrealized (4 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+ ra-prime-1 tb-1 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-1) (a a-0) (b b-0) (ks ks-0))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-0 k) (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))))+ (label 29)+ (parent 15)+ (unrealized (0 2) (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-1+ text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-0) (tb tb-1) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+ (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))+ (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))+ (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+ (label 30)+ (parent 15)+ (unrealized (0 2) (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((3 1) (2 0))+ ((4 1) (1 0)) ((4 3) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 5 1 resp-reauth 2)+ (enc ra-prime-0 k) (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))+ (label 31)+ (parent 15)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+ rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb-1) (a a-0) (b b-0) (ks ks-0))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-0 k) (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k)))))+ (label 32)+ (parent 15)+ (unrealized (0 2) (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-0 k)+ (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv k) (send k)))+ (label 33)+ (parent 15)+ (unrealized (0 2) (5 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb-0) (a a) (b b)+ (ks ks))+ (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+ ((4 2) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 5 2 keyserver 2)+ (enc b ra-1 k tb-0 (ltk a ks)) (4 1))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb-0 (ltk b ks)) (enc rb-prime k)))))+ (label 34)+ (parent 16)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+ ((4 1) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 5 2 keyserver 2)+ (enc a k tb-0 (ltk b ks)) (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k)))))+ (label 35)+ (parent 17)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 3) (3 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))))+ (label 36)+ (parent 18)+ (unrealized (0 2) (4 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 2) (3 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+ (label 37)+ (parent 19)+ (unrealized (0 2) (4 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 38)+ (parent 20)+ (unrealized (4 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))+ ((3 1) (1 0)) ((3 3) (1 2)) ((4 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 39)+ (parent 20)+ (unrealized (4 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 40)+ (parent 20)+ (unrealized (4 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv k) (send k)))+ (label 41)+ (parent 20)+ (unrealized (4 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k)))))+ (label 42)+ (parent 21)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 43)+ (parent 23)+ (unrealized (4 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 1))+ ((3 0) (0 0)) ((3 2) (1 2)) ((4 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 44)+ (parent 23)+ (unrealized (4 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb ra-prime rb-prime rb text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 1)) ((2 1) (1 0))+ ((3 0) (0 0)) ((3 2) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra ra-prime rb-prime)+ (operation encryption-test (displaced 4 1 resp-reauth 2) (enc rb-0 k)+ (0 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+ (label 45)+ (parent 23)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (3 0)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 46)+ (parent 23)+ (unrealized (4 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv k) (send k)))+ (label 47)+ (parent 23)+ (unrealized (4 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((3 1) (1 2)) ((4 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 48)+ (parent 24)+ (unrealized (4 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))+ ((3 1) (1 2)) ((4 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 49)+ (parent 25)+ (unrealized (4 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 rb-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((3 1) (1 2)) ((4 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) rb))+ (send (cat rb-prime-1 (enc rb k)))))+ (label 50)+ (parent 27)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+ ra-prime-1 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test+ (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0)+ (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))))+ (label 51)+ (parent 29)+ (unrealized (0 2) (5 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 ra-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a)+ (b b) (ks ks))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test+ (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 1)+ (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-1))+ (recv+ (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-0 k)))))+ (label 52)+ (parent 30)+ (unrealized (0 2) (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((3 1) (2 0))+ ((4 1) (1 0)) ((4 3) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 5 2 keyserver 2)+ (enc a k tb-0 (ltk b ks)) (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))+ (label 53)+ (parent 31)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+ rb-prime-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test+ (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0)+ (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k)))))+ (label 54)+ (parent 32)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+ ((4 2) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 5 2 keyserver 2)+ (enc a k tb-0 (ltk b ks)) (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+ (label 55)+ (parent 34)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+ ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 56)+ (parent 35)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-1 tb-0+ text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))+ ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 57)+ (parent 35)+ (unrealized (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra ra-prime rb-prime tb ra-0 rb rb-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 0)) ((2 1) (1 0))+ ((3 1) (2 0)) ((4 1) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra ra-prime rb-prime)+ (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-1 k)+ (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+ ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k)))))+ (label 58)+ (parent 35)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+ ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-1 (enc rb k)))))+ (label 59)+ (parent 35)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0))+ ((4 1) (1 2)) ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k)))) ((recv k) (send k)))+ (label 60)+ (parent 35)+ (unrealized (5 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 3) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-1 k) (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 61)+ (parent 36)+ (unrealized (0 2) (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+ text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 2) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+ (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+ (label 62)+ (parent 36)+ (unrealized (0 2) (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (3 0))+ ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 5 1 resp-reauth 2)+ (enc ra-prime-1 k) (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k))))+ (label 63)+ (parent 36)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-1 k) (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 64)+ (parent 36)+ (unrealized (0 2) (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-1 k)+ (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))) ((recv k) (send k)))+ (label 65)+ (parent 36)+ (unrealized (0 2) (5 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 0) (0 0))+ ((4 2) (3 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 5 2 keyserver 2)+ (enc b ra-0 k tb (ltk a ks)) (4 1))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+ (label 66)+ (parent 37)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 67)+ (parent 38)+ (unrealized (4 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))+ ((3 1) (1 0)) ((3 3) (1 2)) ((4 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 68)+ (parent 39)+ (unrealized (4 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 69)+ (parent 40)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (3 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+ ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+ (label 70)+ (parent 42)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-0 tb-0+ text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))+ ((5 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 71)+ (parent 42)+ (unrealized (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb ra-prime rb-prime rb ra-prime-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra ra-prime rb-prime)+ (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-0 k)+ (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k)))))+ (label 72)+ (parent 42)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 rb-prime-1+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+ ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-1 (enc rb k)))))+ (label 73)+ (parent 42)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+ ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k)))) ((recv k) (send k)))+ (label 74)+ (parent 42)+ (unrealized (5 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 75)+ (parent 43)+ (unrealized (4 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 1))+ ((3 0) (0 0)) ((3 2) (1 2)) ((4 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 76)+ (parent 44)+ (unrealized (4 1))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 77)+ (parent 46)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-0 k) (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))))+ (label 78)+ (parent 48)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-0 tb-0+ text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 2) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+ (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+ (label 79)+ (parent 48)+ (unrealized (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((1 1) (4 2)) ((2 1) (4 0))+ ((3 1) (1 2)) ((4 1) (1 0)) ((4 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 5 1 resp-reauth 2)+ (enc ra-prime-0 k) (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+ (label 80)+ (parent 48)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 rb-prime-1+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-0 k) (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (send (cat rb-prime-1 (enc ra-prime-0 k)))))+ (label 81)+ (parent 48)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-0 k)+ (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv k) (send k)))+ (label 82)+ (parent 48)+ (unrealized (5 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))+ ((3 1) (1 2)) ((4 0) (0 0)) ((4 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 5 2 keyserver 2)+ (enc b ra-0 k tb (ltk a ks)) (4 1))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((send (cat a ra))+ (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 83)+ (parent 49)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+ ra-prime-1 ra-prime-2 tb-1 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-1) (a a-0) (b b-0) (ks ks-0))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 3) (4 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 84)+ (parent 51)+ (unrealized (0 2) (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+ ra-prime-1 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-1) (tb tb-1) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 3) (4 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))+ (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+ (label 85)+ (parent 51)+ (unrealized (0 2) (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (precedes ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 1 resp-reauth 2)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k))))+ (label 86)+ (parent 51)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+ ra-prime-1 rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb-1) (a a-0) (b b-0) (ks ks-0))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 87)+ (parent 51)+ (unrealized (0 2) (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+ ra-prime-1 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-1 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))) ((recv k) (send k)))+ (label 88)+ (parent 51)+ (unrealized (0 2) (6 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a)+ (b b) (ks ks))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 2 keyserver 2)+ (enc b ra-1 k tb-0 (ltk a ks)) (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-0 k)))))+ (label 89)+ (parent 52)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 90)+ (parent 53)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))+ ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 91)+ (parent 53)+ (unrealized (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 0)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 92)+ (parent 53)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 1) (2 0))+ ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv k) (send k)))+ (label 93)+ (parent 53)+ (unrealized (5 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 2 keyserver 2)+ (enc a k tb-0 (ltk b ks)) (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k)))))+ (label 94)+ (parent 54)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+ ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 95)+ (parent 55)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))+ ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 96)+ (parent 55)+ (unrealized (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra ra-prime rb-prime tb ra-0 rb rb-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 1)) ((2 1) (1 0))+ ((3 1) (2 0)) ((4 2) (1 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra ra-prime rb-prime)+ (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-1 k)+ (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+ ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+ (label 97)+ (parent 55)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+ ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 98)+ (parent 55)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (deflistener k)+ (precedes ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0))+ ((4 2) (1 2)) ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv k) (send k)))+ (label 99)+ (parent 55)+ (unrealized (5 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+ ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 100)+ (parent 56)+ (unrealized (5 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))+ ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((send (cat a ra-1))+ (recv+ (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 101)+ (parent 57)+ (unrealized (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+ ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) rb))+ (send (cat rb-prime-1 (enc rb k)))))+ (label 102)+ (parent 59)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 3) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 103)+ (parent 61)+ (unrealized (0 2) (5 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 2) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+ (label 104)+ (parent 62)+ (unrealized (0 2) (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+ ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+ (label 105)+ (parent 63)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+ ((5 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 106)+ (parent 63)+ (unrealized (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+ ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 107)+ (parent 63)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+ ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k))) ((recv k) (send k)))+ (label 108)+ (parent 63)+ (unrealized (5 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 109)+ (parent 64)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+ ((4 2) (3 2)) ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+ (label 110)+ (parent 66)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 0) (0 0))+ ((4 2) (3 2)) ((5 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 111)+ (parent 66)+ (unrealized (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb ra-prime rb-prime rb ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 0) (0 0))+ ((4 2) (3 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra ra-prime rb-prime)+ (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-0 k)+ (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+ (label 112)+ (parent 66)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (4 0)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+ ((4 2) (3 2)) ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 113)+ (parent 66)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+ ((4 2) (3 2)) ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv k) (send k)))+ (label 114)+ (parent 66)+ (unrealized (5 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+ ((5 3) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-0 k) (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))))+ (label 115)+ (parent 67)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+ ((5 2) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+ (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+ (label 116)+ (parent 67)+ (unrealized (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+ ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-0 k) (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k)))))+ (label 117)+ (parent 67)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+ ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-0 k)+ (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv k) (send k)))+ (label 118)+ (parent 67)+ (unrealized (5 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))+ ((3 1) (1 0)) ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 5 2 keyserver 2)+ (enc b ra-0 k tb (ltk a ks)) (4 1))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 119)+ (parent 68)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (ra-prime (3 1))+ (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+ ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+ (label 120)+ (parent 70)+ (unrealized (5 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "6 in cohort - 6 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))+ ((5 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 121)+ (parent 71)+ (unrealized (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 rb-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+ ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (cat (enc a k tb (ltk b ks)) rb))+ (send (cat rb-prime-1 (enc rb k)))))+ (label 122)+ (parent 73)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+ ((5 3) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-0 k) (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))))+ (label 123)+ (parent 75)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+ ((5 2) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+ (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+ (label 124)+ (parent 75)+ (unrealized (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((1 1) (4 2)) ((2 1) (4 0))+ ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (1 0)) ((4 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 5 1 resp-reauth 2)+ (enc ra-prime-0 k) (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+ (label 125)+ (parent 75)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (ra-prime (4 1))+ (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+ ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-0 k) (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k)))))+ (label 126)+ (parent 75)+ (unrealized (5 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+ ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-0 k)+ (4 2))+ (strand-map 0 1 2 3 4)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv k) (send k)))+ (label 127)+ (parent 75)+ (unrealized (5 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))))+ (label 128)+ (parent 78)+ (unrealized (5 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 2) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+ (label 129)+ (parent 79)+ (unrealized (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 rb-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-1 (enc ra-prime-0 k)))))+ (label 130)+ (parent 81)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+ ra-prime-1 ra-prime-2 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a) (b b) (ks ks))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 3) (4 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test+ (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0)+ (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 131)+ (parent 84)+ (unrealized (0 2) (6 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+ ra-prime-1 ra-1 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a)+ (b b) (ks ks))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 3) (4 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test+ (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 1)+ (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra-1))+ (recv+ (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-1 k)))))+ (label 132)+ (parent 85)+ (unrealized (0 2) (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 2 keyserver 2)+ (enc a k tb-0 (ltk b ks)) (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k))))+ (label 133)+ (parent 86)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+ ra-prime-1 rb-prime-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test+ (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0)+ (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 134)+ (parent 87)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 2 keyserver 2)+ (enc a k tb-0 (ltk b ks)) (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+ (label 135)+ (parent 89)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 136)+ (parent 90)+ (unrealized (5 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))+ ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((send (cat a ra-1))+ (recv+ (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 137)+ (parent 91)+ (unrealized (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 0)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 138)+ (parent 92)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 1) (4 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+ (label 139)+ (parent 94)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 1) (4 2)) ((6 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 140)+ (parent 94)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra ra-prime rb-prime)+ (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-1 k)+ (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+ ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k)))))+ (label 141)+ (parent 94)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 1) (4 2)) ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-1 (enc rb k)))))+ (label 142)+ (parent 94)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2))+ ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k)))) ((recv k) (send k)))+ (label 143)+ (parent 94)+ (unrealized (6 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+ ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 144)+ (parent 95)+ (unrealized (5 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))+ ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((send (cat a ra-1))+ (recv+ (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 145)+ (parent 96)+ (unrealized (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+ ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 146)+ (parent 98)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+ ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+ ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-0 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))))+ (label 147)+ (parent 100)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+ ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+ ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+ (label 148)+ (parent 100)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((1 1) (5 2)) ((2 1) (5 0))+ ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (1 0)) ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 1 resp-reauth 2)+ (enc ra-prime-0 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+ (label 149)+ (parent 100)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+ rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+ ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-0 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (send (cat rb-prime-1 (enc ra-prime-0 k)))))+ (label 150)+ (parent 100)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+ ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-0 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv k) (send k)))+ (label 151)+ (parent 100)+ (unrealized (6 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))+ ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 2 keyserver 2)+ (enc b ra-1 k tb (ltk a ks)) (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 152)+ (parent 101)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)+ (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-2 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+ (recv (cat ra-prime-2 (enc ra-prime-3 k)))+ (send (enc ra-prime-2 k))))+ (label 153)+ (parent 103)+ (unrealized (0 2) (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+ (label 154)+ (parent 103)+ (unrealized (0 2) (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 3) (3 2))+ ((5 1) (1 0)) ((5 3) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 1 resp-reauth 2)+ (enc ra-prime-2 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k))))+ (label 155)+ (parent 103)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-2 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat rb-prime-0 (enc ra-prime-2 k)))))+ (label 156)+ (parent 103)+ (unrealized (0 2) (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-2 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))) ((recv k) (send k)))+ (label 157)+ (parent 103)+ (unrealized (0 2) (6 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 2 keyserver 2)+ (enc b ra-0 k tb (ltk a ks)) (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+ (label 158)+ (parent 104)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+ ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+ (label 159)+ (parent 105)+ (unrealized (5 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+ ((5 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 160)+ (parent 106)+ (unrealized (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+ ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 161)+ (parent 107)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k))))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+ (label 162)+ (parent 109)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (4 2)) ((6 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k))))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 163)+ (parent 109)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb ra-prime rb-prime rb ra-prime-0 ra-prime-1 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra ra-prime rb-prime)+ (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-0 k)+ (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 164)+ (parent 109)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k))))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-1 (enc rb k)))))+ (label 165)+ (parent 109)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))) ((recv k) (send k)))+ (label 166)+ (parent 109)+ (unrealized (6 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+ ((4 2) (3 2)) ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+ (label 167)+ (parent 110)+ (unrealized (5 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "6 in cohort - 6 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 0) (0 0))+ ((4 2) (3 2)) ((5 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 168)+ (parent 111)+ (unrealized (5 1))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+ ((4 2) (3 2)) ((5 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (cat (enc a k tb (ltk b ks)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 169)+ (parent 113)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+ ((5 3) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))))+ (label 170)+ (parent 115)+ (unrealized (5 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+ ((5 2) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+ (label 171)+ (parent 116)+ (unrealized (5 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+ ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k)))))+ (label 172)+ (parent 117)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (3 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (5 2)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+ ((5 1) (1 0)) ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 1 resp-reauth 2)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+ (label 173)+ (parent 120)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+ ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 174)+ (parent 120)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+ ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+ ((4 1) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+ (label 175)+ (parent 120)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+ ((4 1) (5 2)) ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 4 resp-reauth 2)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 176)+ (parent 120)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+ rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat rb-prime-1 (enc ra-prime-1 k)))))+ (label 177)+ (parent 120)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-1 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv k) (send k)))+ (label 178)+ (parent 120)+ (unrealized (6 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))+ ((5 0) (0 0)) ((5 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 2 keyserver 2)+ (enc b ra-0 k tb (ltk a ks)) (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((send (cat a ra))+ (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 179)+ (parent 121)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+ ((5 3) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))))+ (label 180)+ (parent 123)+ (unrealized (5 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+ ((5 2) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+ (label 181)+ (parent 124)+ (unrealized (5 1))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+ ((5 1) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k)))))+ (label 182)+ (parent 126)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+ ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))+ ((5 3) (4 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 183)+ (parent 128)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+ ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 2)) ((4 3) (0 2))+ ((5 3) (4 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+ (label 184)+ (parent 128)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((1 1) (5 2)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (1 0))+ ((5 3) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 1 resp-reauth 2)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k))))+ (label 185)+ (parent 128)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+ rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))+ ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat rb-prime-1 (enc ra-prime-1 k)))))+ (label 186)+ (parent 128)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))+ ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-1 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))) ((recv k) (send k)))+ (label 187)+ (parent 128)+ (unrealized (6 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 0) (0 0))+ ((5 2) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 2 keyserver 2)+ (enc b ra-0 k tb (ltk a ks)) (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+ (label 188)+ (parent 129)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+ ra-prime-1 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb-0) (a a) (b b) (ks ks))+ (precedes ((1 1) (6 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2))+ ((6 1) (1 0)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 1 resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k))))+ (label 191)+ (parent 131)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+ ra-prime-1 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a)+ (b b) (ks ks))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 3) (4 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 2 keyserver 2)+ (enc b ra-1 k tb-0 (ltk a ks)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-1 k)))))+ (label 194)+ (parent 132)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+ ((5 3) (4 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+ (label 195)+ (parent 133)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0+ text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (6 1)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+ ((5 3) (4 2)) ((6 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 196)+ (parent 133)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (6 0)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+ ((5 3) (4 2)) ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 197)+ (parent 133)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+ ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2))+ ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k))) ((recv k) (send k)))+ (label 198)+ (parent 133)+ (unrealized (6 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ rb-prime-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 2 keyserver 2)+ (enc a k tb-0 (ltk b ks)) (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 199)+ (parent 134)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 2) (4 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+ (label 200)+ (parent 135)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0+ text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 2) (4 2)) ((6 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 201)+ (parent 135)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 2) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra ra-prime rb-prime)+ (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-1 k)+ (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+ ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+ (label 202)+ (parent 135)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 2) (4 2)) ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 203)+ (parent 135)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (deflistener k)+ (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 1))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2))+ ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv k) (send k)))+ (label 204)+ (parent 135)+ (unrealized (6 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+ ((5 3) (0 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-0 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))))+ (label 205)+ (parent 136)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0+ text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+ ((5 3) (0 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+ (label 206)+ (parent 136)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+ ((5 3) (0 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-0 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k)))))+ (label 207)+ (parent 136)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+ ((5 3) (0 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-0 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv k) (send k)))+ (label 208)+ (parent 136)+ (unrealized (6 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))+ ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 2 keyserver 2)+ (enc b ra-1 k tb (ltk a ks)) (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 209)+ (parent 137)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ ra-prime-1 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 1) (4 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+ (label 210)+ (parent 139)+ (unrealized (6 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "6 in cohort - 6 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ ra-1 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 1) (4 2)) ((6 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((send (cat a ra-1))+ (recv+ (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 211)+ (parent 140)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ rb-prime-1 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 1) (4 2)) ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (cat (enc a k tb (ltk b ks)) rb))+ (send (cat rb-prime-1 (enc rb k)))))+ (label 212)+ (parent 142)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+ ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-0 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))))+ (label 213)+ (parent 144)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0+ text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+ ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+ (label 214)+ (parent 144)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((1 1) (5 2)) ((2 1) (5 0))+ ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (1 0)) ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 1 resp-reauth 2)+ (enc ra-prime-0 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+ (label 215)+ (parent 144)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+ ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-0 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k)))))+ (label 216)+ (parent 144)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+ ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-0 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv k) (send k)))+ (label 217)+ (parent 144)+ (unrealized (6 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))+ ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 2 keyserver 2)+ (enc b ra-1 k tb (ltk a ks)) (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 218)+ (parent 145)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+ ra-prime-1 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+ ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))))+ (label 219)+ (parent 147)+ (unrealized (6 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+ ra-1 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+ ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((send (cat a ra-1))+ (recv+ (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+ (label 220)+ (parent 148)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+ rb-prime-1 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+ ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-1 (enc ra-prime-0 k)))))+ (label 221)+ (parent 150)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-prime-3 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)+ (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-3))+ (recv (cat ra-prime-2 (enc ra-prime-3 k)))+ (send (enc ra-prime-2 k))))+ (label 222)+ (parent 153)+ (unrealized (0 2) (6 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-2))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k)))))+ (label 223)+ (parent 154)+ (unrealized (0 2) (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))+ ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+ (label 224)+ (parent 155)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+ text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 3) (3 2))+ ((5 1) (1 0)) ((5 3) (4 2)) ((6 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 225)+ (parent 155)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))+ ((5 1) (1 0)) ((5 3) (4 2)) ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 226)+ (parent 155)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))+ ((5 1) (1 0)) ((5 3) (4 2)) ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k))) ((recv k) (send k)))+ (label 227)+ (parent 155)+ (unrealized (6 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ rb-prime-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (send (cat rb-prime-0 (enc ra-prime-2 k)))))+ (label 228)+ (parent 156)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+ (label 229)+ (parent 158)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+ text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 1)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 230)+ (parent 158)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb ra-prime rb-prime rb ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra ra-prime rb-prime)+ (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-0 k)+ (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+ (label 231)+ (parent 158)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (5 0)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 232)+ (parent 158)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((recv k) (send k)))+ (label 233)+ (parent 158)+ (unrealized (6 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+ ((4 3) (5 2)) ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 4 init-reauth 4)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 234)+ (parent 159)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+ text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 1) (1 0))+ ((4 3) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+ (label 235)+ (parent 159)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))+ ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 236)+ (parent 159)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))+ ((4 3) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 237)+ (parent 159)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))+ ((4 3) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-1 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv k) (send k)))+ (label 238)+ (parent 159)+ (unrealized (6 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+ ((5 0) (0 0)) ((5 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 2 keyserver 2)+ (enc b ra-0 k tb (ltk a ks)) (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 239)+ (parent 160)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (ra-prime (4 1))+ (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ ra-prime-2 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+ (label 240)+ (parent 162)+ (unrealized (6 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "7 in cohort - 7 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ ra-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (4 2)) ((6 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 241)+ (parent 163)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ rb-prime-1 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k))))+ ((recv (cat (enc a k tb (ltk b ks)) rb))+ (send (cat rb-prime-1 (enc rb k)))))+ (label 242)+ (parent 165)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 243)+ (parent 167)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+ text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+ ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+ (label 244)+ (parent 167)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+ ((4 2) (3 2)) ((4 2) (5 2)) ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 4 init 3) (enc ra-prime-1 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 245)+ (parent 167)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (5 2)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+ ((4 2) (3 2)) ((5 1) (1 0)) ((5 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 1 resp-reauth 2)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+ (label 246)+ (parent 167)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (ra-prime (5 1))+ (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 247)+ (parent 167)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-1 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv k) (send k)))+ (label 248)+ (parent 167)+ (unrealized (6 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 249)+ (parent 170)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+ text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 0)) ((3 3) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+ (label 250)+ (parent 170)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 251)+ (parent 170)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-1 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))) ((recv k) (send k)))+ (label 252)+ (parent 170)+ (unrealized (6 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+ ((5 0) (0 0)) ((5 2) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 2 keyserver 2)+ (enc b ra-0 k tb (ltk a ks)) (5 1))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+ (label 253)+ (parent 171)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (ra-prime (3 1))+ (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+ ra-prime-2 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 254)+ (parent 174)+ (unrealized (6 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "6 in cohort - 6 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+ ra-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+ ((4 1) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+ (label 255)+ (parent 175)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+ rb-prime-1 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-1 (enc ra-prime-1 k)))))+ (label 256)+ (parent 177)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 257)+ (parent 180)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+ text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 0) (0 0)) ((3 2) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+ (label 258)+ (parent 180)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey) (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((1 1) (5 2)) ((2 1) (4 0))+ ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+ ((5 1) (1 0)) ((5 3) (4 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 6 1 resp-reauth 2)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k))))+ (label 259)+ (parent 180)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (ra-prime (5 1))+ (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-1 k) (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 260)+ (parent 180)+ (unrealized (6 0))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-1 k)+ (5 2))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))) ((recv k) (send k)))+ (label 261)+ (parent 180)+ (unrealized (6 0))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+ ra-prime-2 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))+ ((5 3) (4 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 262)+ (parent 183)+ (unrealized (6 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+ ra-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 2)) ((4 3) (0 2))+ ((5 3) (4 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+ (label 263)+ (parent 184)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+ rb-prime-1 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))+ ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-1 (enc ra-prime-1 k)))))+ (label 264)+ (parent 186)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((1 1) (6 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2))+ ((6 1) (1 0)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 2 keyserver 2)+ (enc a k tb-0 (ltk b ks)) (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k))))+ (label 265)+ (parent 191)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 3) (4 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 2 keyserver 2)+ (enc a k tb-0 (ltk b ks)) (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+ (label 266)+ (parent 194)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+ ((5 3) (4 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+ (label 267)+ (parent 195)+ (unrealized (6 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (6 1)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+ ((5 3) (4 2)) ((6 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra-1))+ (recv+ (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 268)+ (parent 196)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (6 0)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+ ((5 3) (4 2)) ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 269)+ (parent 197)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 ra-prime-1+ rb-prime-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra ra-prime rb-prime)+ (operation encryption-test (displaced 7 1 resp-reauth 2) (enc rb-1 k)+ (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+ ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 272)+ (parent 199)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 2) (4 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+ (label 275)+ (parent 200)+ (unrealized (6 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "6 in cohort - 6 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 2) (4 2)) ((6 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((send (cat a ra-1))+ (recv+ (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 276)+ (parent 201)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 2) (4 2)) ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (cat (enc a k tb (ltk b ks)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 277)+ (parent 203)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+ ((5 3) (0 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))))+ (label 278)+ (parent 205)+ (unrealized (6 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+ ((5 3) (0 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((send (cat a ra-1))+ (recv+ (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+ (label 279)+ (parent 206)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+ ((5 3) (0 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k)))))+ (label 280)+ (parent 207)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((1 1) (6 2)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 1) (4 2)) ((6 1) (1 0)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 1 resp-reauth 2)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+ (label 281)+ (parent 210)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 1) (4 2)) ((5 1) (6 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 5 resp-reauth 2)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 284)+ (parent 210)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 1) (4 2)) ((6 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 2 keyserver 2)+ (enc b ra-1 k tb (ltk a ks)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 287)+ (parent 211)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+ ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))))+ (label 288)+ (parent 213)+ (unrealized (6 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+ ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((send (cat a ra-1))+ (recv+ (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+ (label 289)+ (parent 214)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+ ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k)))))+ (label 290)+ (parent 216)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((1 1) (6 2)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+ ((6 1) (1 0)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 1 resp-reauth 2)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k))))+ (label 293)+ (parent 219)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+ ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 2 keyserver 2)+ (enc b ra-1 k tb (ltk a ks)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+ (label 296)+ (parent 220)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (6 2)) ((2 1) (0 2)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 1 resp-reauth 2)+ (enc ra-prime-3 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-2 (enc ra-prime k)))+ (send (enc ra-prime-2 k))))+ (label 299)+ (parent 222)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))+ ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 2 keyserver 2)+ (enc b ra-0 k tb (ltk a ks)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-2))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k)))))+ (label 302)+ (parent 223)+ (unrealized (0 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))+ ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+ (label 303)+ (parent 224)+ (unrealized (6 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "6 in cohort - 6 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 3) (3 2))+ ((5 1) (1 0)) ((5 3) (4 2)) ((6 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 304)+ (parent 225)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))+ ((5 1) (1 0)) ((5 3) (4 2)) ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k)))+ ((recv (cat (enc a k tb (ltk b ks)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 305)+ (parent 226)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb ra-prime rb-prime rb ra-prime-0 ra-prime-1 ra-prime-2+ rb-prime-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra ra-prime rb-prime)+ (operation encryption-test (displaced 7 1 resp-reauth 2) (enc rb-0 k)+ (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (send (cat rb-prime-0 (enc ra-prime-2 k)))))+ (label 308)+ (parent 228)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+ (label 311)+ (parent 229)+ (unrealized (6 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "7 in cohort - 7 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 1)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 312)+ (parent 230)+ (unrealized (6 1))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((recv (cat (enc a k tb (ltk b ks)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 313)+ (parent 232)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 1) (1 0))+ ((4 3) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+ (label 314)+ (parent 235)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))+ ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 315)+ (parent 236)+ (unrealized (6 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))+ ((4 3) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 316)+ (parent 237)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((4 3) (6 2)) ((5 1) (4 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 4 init-reauth 4)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 318)+ (parent 240)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (4 2)) ((5 1) (6 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 5 resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+ (label 320)+ (parent 240)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (6 2)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (1 0)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 1 resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+ (label 321)+ (parent 240)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (4 2)) ((6 0) (0 0)) ((6 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 2 keyserver 2)+ (enc b ra-0 k tb (ltk a ks)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k))))+ ((send (cat a ra))+ (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 324)+ (parent 241)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 325)+ (parent 243)+ (unrealized (6 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "6 in cohort - 6 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+ ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+ (label 326)+ (parent 244)+ (unrealized (6 1))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 327)+ (parent 247)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 328)+ (parent 249)+ (unrealized (6 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 0)) ((3 3) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+ (label 329)+ (parent 250)+ (unrealized (6 1))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 330)+ (parent 251)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (3 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (6 2)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (1 0)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 1 resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k))))+ (label 331)+ (parent 254)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 1) (3 2)) ((4 1) (6 2)) ((5 3) (0 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 4 resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat ra-prime-1 (enc ra-prime-0 k)))+ (send (enc ra-prime-1 k))))+ (label 334)+ (parent 254)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+ ((4 1) (3 2)) ((5 3) (0 2)) ((6 0) (0 0)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 2 keyserver 2)+ (enc b ra-0 k tb (ltk a ks)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+ (label 337)+ (parent 255)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 338)+ (parent 257)+ (unrealized (6 2))+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 0) (0 0)) ((3 2) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+ (label 339)+ (parent 258)+ (unrealized (6 1))+ (dead)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+ k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 340)+ (parent 260)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((1 1) (6 2)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))+ ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 1 resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k))))+ (label 343)+ (parent 262)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 2)) ((4 3) (0 2))+ ((5 3) (4 2)) ((6 0) (0 0)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 2 keyserver 2)+ (enc b ra-0 k tb (ltk a ks)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+ (label 346)+ (parent 263)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra ra-prime rb-prime)+ (operation encryption-test (displaced 7 1 resp-reauth 2) (enc rb-1 k)+ (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+ ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+ (label 353)+ (parent 266)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+ ((5 3) (4 2)) ((5 3) (6 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 5 init-reauth 4)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 356)+ (parent 267)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (6 1)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+ ((5 3) (4 2)) ((6 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 2 keyserver 2)+ (enc b ra-1 k tb (ltk a ks)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 361)+ (parent 268)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 2) (4 2)) ((5 2) (6 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 5 init 3) (enc ra-prime-1 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 364)+ (parent 275)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((1 1) (6 2)) ((2 1) (4 0))+ ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 2) (4 2)) ((6 1) (1 0)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 1 resp-reauth 2)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+ (label 365)+ (parent 275)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 2) (4 2)) ((6 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 2 keyserver 2)+ (enc b ra-1 k tb (ltk a ks)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 368)+ (parent 276)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+ ((5 3) (0 2)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 2 keyserver 2)+ (enc b ra-1 k tb (ltk a ks)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+ (label 373)+ (parent 279)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((1 1) (6 2)) ((2 1) (5 0))+ ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+ ((6 1) (1 0)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 1 resp-reauth 2)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k))))+ (label 376)+ (parent 288)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (6 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+ ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 2 keyserver 2)+ (enc b ra-1 k tb (ltk a ks)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+ (label 379)+ (parent 289)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb ra-prime rb-prime rb ra-prime-0 ra-prime-1 ra-prime-2 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb ra-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))+ ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra ra-prime rb-prime)+ (operation encryption-test (displaced 7 1 resp-reauth 2) (enc rb-0 k)+ (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-2))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k)))))+ (label 386)+ (parent 302)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (6 0)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))+ ((5 1) (1 0)) ((5 3) (4 2)) ((5 3) (6 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 5 init-reauth 4)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+ (label 389)+ (parent 303)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))+ ((4 3) (6 2)) ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 4 init-reauth 4)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 390)+ (parent 303)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 3) (3 2))+ ((5 1) (1 0)) ((5 3) (4 2)) ((6 0) (0 0)) ((6 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 2 keyserver 2)+ (enc b ra-0 k tb (ltk a ks)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a ra))+ (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+ (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+ (label 395)+ (parent 304)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (ra-prime (5 1))+ (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((4 3) (6 2)) ((5 0) (0 0)) ((5 2) (4 2))+ ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 4 init-reauth 4)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+ (label 396)+ (parent 311)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((5 2) (6 2))+ ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 5 init 3) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+ (label 398)+ (parent 311)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (6 2)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 1) (1 0))+ ((6 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 1 resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+ (label 399)+ (parent 311)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (ra-prime (6 1))+ (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 1) (1 0))+ ((4 3) (3 2)) ((5 3) (0 2)) ((6 0) (0 0)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 2 keyserver 2)+ (enc b ra-0 k tb (ltk a ks)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+ (label 403)+ (parent 314)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (ra-prime (4 1))+ (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))+ ((4 3) (3 2)) ((4 3) (6 2)) ((5 3) (0 2)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 4 init-reauth 4)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat ra-prime-1 (enc ra-prime-0 k)))+ (send (enc ra-prime-1 k))))+ (label 404)+ (parent 315)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 0) (0 0)) ((4 2) (3 2)) ((4 2) (6 2)) ((5 3) (0 2))+ ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 4 init 3) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat ra-prime-1 (enc ra-prime-0 k)))+ (send (enc ra-prime-1 k))))+ (label 411)+ (parent 325)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (6 2)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+ ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 1) (1 0))+ ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 1 resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k))))+ (label 412)+ (parent 325)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (ra-prime (6 1))+ (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 0)) ((3 3) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 0) (0 0)) ((6 2) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 2 keyserver 2)+ (enc b ra-0 k tb (ltk a ks)) (6 1))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+ (label 419)+ (parent 329)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (6 0)) (rb (0 1)) (ra-prime (3 1))+ (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+ (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((1 1) (6 2)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (displaced 7 1 resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k))))+ (label 422)+ (parent 338)+ (realized)+ (shape)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (ra-prime (6 1))+ (rb-prime (1 1))))++(comment "Strand bound exceeded--aborting run")++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+ ra-prime-1 ra-prime-2 ra-prime-3 tb-1 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)+ (rb-prime ra-prime-2) (tb tb-1) (a a-0) (b b-0) (ks ks-0))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 3) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-3))+ (recv (cat ra-prime-2 (enc ra-prime-3 k)))+ (send (enc ra-prime-2 k))))+ (label 189)+ (parent 131)+ (unrealized (0 2) (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+ ra-prime-1 ra-prime-2 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-2) (tb tb-1) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 2) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))+ (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+ (label 190)+ (parent 131)+ (unrealized (0 2) (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+ ra-prime-1 ra-prime-2 rb-prime-0 tb-1 text)+ (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)+ (rb-prime rb-prime-0) (tb tb-1) (a a-0) (b b-0) (ks ks-0))+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat rb-prime-0 (enc ra-prime-2 k)))))+ (label 192)+ (parent 131)+ (unrealized (0 2) (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+ ra-prime-1 ra-prime-2 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb-0) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb-0) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0))+ (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb-0 (ltk b ks)))+ (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))) ((recv k) (send k)))+ (label 193)+ (parent 131)+ (unrealized (0 2) (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb-0))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ rb-prime-0 ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (7 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 3) (4 2)) ((6 1) (5 2)) ((7 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k))))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+ (label 270)+ (parent 199)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ rb-prime-0 ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (7 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 3) (4 2)) ((6 1) (5 2)) ((7 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k))))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 271)+ (parent 199)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ rb-prime-0 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (7 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 3) (4 2)) ((6 1) (5 2)) ((7 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k))))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-1 (enc rb k)))))+ (label 273)+ (parent 199)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ rb-prime-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 3) (4 2)) ((6 1) (5 2)) ((7 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))) ((recv k) (send k)))+ (label 274)+ (parent 199)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ ra-prime-1 ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 1) (4 2)) ((6 3) (0 2)) ((7 3) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 282)+ (parent 210)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ ra-prime-1 ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 1) (4 2)) ((6 3) (0 2)) ((7 2) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+ (label 283)+ (parent 210)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ ra-prime-1 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 1) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat rb-prime-1 (enc ra-prime-1 k)))))+ (label 285)+ (parent 210)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+ ra-prime-1 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 1) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-1 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv k) (send k)))+ (label 286)+ (parent 210)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+ ra-prime-1 ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 2))+ ((5 3) (0 2)) ((6 3) (5 2)) ((7 3) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 291)+ (parent 219)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+ ra-prime-1 ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 1) (1 2))+ ((5 3) (0 2)) ((6 3) (5 2)) ((7 2) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+ (label 292)+ (parent 219)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+ ra-prime-1 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 2))+ ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat rb-prime-1 (enc ra-prime-1 k)))))+ (label 294)+ (parent 219)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+ ra-prime-1 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 2))+ ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-1 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))) ((recv k) (send k)))+ (label 295)+ (parent 219)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-prime-3 ra-prime-4 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)+ (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-4)+ (rb-prime ra-prime-3) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+ ((2 1) (7 0)) ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2))+ ((6 3) (5 2)) ((7 3) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-3 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-3))+ (recv (cat ra-prime-2 (enc ra-prime-3 k)))+ (send (enc ra-prime-2 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-4))+ (recv (cat ra-prime-3 (enc ra-prime-4 k)))+ (send (enc ra-prime-3 k))))+ (label 297)+ (parent 222)+ (unrealized (0 2) (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-prime-3 ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)+ (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-3) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+ ((2 1) (7 1)) ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2))+ ((6 3) (5 2)) ((7 2) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-3 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-3))+ (recv (cat ra-prime-2 (enc ra-prime-3 k)))+ (send (enc ra-prime-2 k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-3 k)))))+ (label 298)+ (parent 222)+ (unrealized (0 2) (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-prime-3 rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)+ (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-3)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+ ((2 1) (7 0)) ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2))+ ((6 3) (5 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-3 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-3))+ (recv (cat ra-prime-2 (enc ra-prime-3 k)))+ (send (enc ra-prime-2 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+ (send (cat rb-prime-0 (enc ra-prime-3 k)))))+ (label 300)+ (parent 222)+ (unrealized (0 2) (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-prime-3 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)+ (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+ ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+ ((2 1) (7 0)) ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2))+ ((6 3) (5 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-3 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-3))+ (recv (cat ra-prime-2 (enc ra-prime-3 k)))+ (send (enc ra-prime-2 k))) ((recv k) (send k)))+ (label 301)+ (parent 222)+ (unrealized (0 2) (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ rb-prime-0 ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2))+ ((7 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (send (cat rb-prime-0 (enc ra-prime-2 k))))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+ (recv (cat rb (enc ra-prime-3 k))) (send (enc rb k))))+ (label 306)+ (parent 228)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ rb-prime-0 ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2))+ ((7 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (send (cat rb-prime-0 (enc ra-prime-2 k))))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 307)+ (parent 228)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ rb-prime-0 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-1)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2))+ ((7 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (send (cat rb-prime-0 (enc ra-prime-2 k))))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-1 (enc rb k)))))+ (label 309)+ (parent 228)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ rb-prime-0 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2))+ ((7 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (send (cat rb-prime-0 (enc ra-prime-2 k)))) ((recv k) (send k)))+ (label 310)+ (parent 228)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ ra-prime-2 ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)+ (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2))+ ((7 3) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+ (recv (cat ra-prime-2 (enc ra-prime-3 k)))+ (send (enc ra-prime-2 k))))+ (label 317)+ (parent 240)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ ra-prime-2 ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2))+ ((7 2) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+ (label 319)+ (parent 240)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ ra-prime-2 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)+ (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2))+ ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat rb-prime-1 (enc ra-prime-2 k)))))+ (label 322)+ (parent 240)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+ ra-prime-2 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2))+ ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+ ((recv k) (send k)))+ (label 323)+ (parent 240)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+ ra-prime-2 ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)+ (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))+ ((7 3) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+ (recv (cat ra-prime-2 (enc ra-prime-3 k)))+ (send (enc ra-prime-2 k))))+ (label 332)+ (parent 254)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+ ra-prime-2 ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1))+ ((3 3) (1 2)) ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))+ ((7 2) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+ (label 333)+ (parent 254)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+ ra-prime-2 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)+ (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))+ ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat rb-prime-1 (enc ra-prime-2 k)))))+ (label 335)+ (parent 254)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+ ra-prime-2 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))+ ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (send (cat rb-prime-0 (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))) ((recv k) (send k)))+ (label 336)+ (parent 254)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+ ra-prime-2 ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)+ (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 3) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+ (recv (cat ra-prime-2 (enc ra-prime-3 k)))+ (send (enc ra-prime-2 k))))+ (label 341)+ (parent 262)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+ ra-prime-2 ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 2) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+ (label 342)+ (parent 262)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+ ra-prime-2 rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)+ (rb-prime rb-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat rb-prime-1 (enc ra-prime-2 k)))))+ (label 344)+ (parent 262)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+ ra-prime-2 text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb-prime)+ (rb-prime rb-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 2))+ ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+ (send (cat rb-prime-0 (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))) ((recv k) (send k)))+ (label 345)+ (parent 262)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (7 2)) ((1 1) (6 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)) ((7 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+ (label 347)+ (parent 265)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (7 1)) ((1 1) (6 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)) ((7 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 348)+ (parent 265)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (7 0)) ((1 1) (6 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2)) ((7 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 349)+ (parent 265)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((1 1) (6 2)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+ ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2))+ ((6 1) (1 0)) ((6 3) (5 2)) ((7 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k))) ((recv k) (send k)))+ (label 350)+ (parent 265)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (7 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+ (label 351)+ (parent 266)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (7 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 1)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 352)+ (parent 266)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (7 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 3) (4 2)) ((6 2) (5 2)) ((7 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 354)+ (parent 266)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (deflistener k)+ (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 1)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 3) (4 2)) ((6 2) (5 2)) ((7 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((recv k) (send k)))+ (label 355)+ (parent 266)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)) ((7 2) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+ (label 357)+ (parent 267)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)) ((7 3) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 358)+ (parent 267)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 359)+ (parent 267)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 3) (1 2))+ ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-1 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv k) (send k)))+ (label 360)+ (parent 267)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 3) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 362)+ (parent 275)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 2) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+ (label 363)+ (parent 275)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 366)+ (parent 275)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+ ((4 3) (1 2)) ((5 2) (4 2)) ((6 3) (0 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-1 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv k) (send k)))+ (label 367)+ (parent 275)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 0))+ ((4 3) (1 2)) ((5 3) (0 2)) ((6 3) (5 2)) ((7 3) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 369)+ (parent 278)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 1) (1 0))+ ((4 3) (1 2)) ((5 3) (0 2)) ((6 3) (5 2)) ((7 2) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+ (label 370)+ (parent 278)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 0))+ ((4 3) (1 2)) ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 371)+ (parent 278)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 1) (1 0))+ ((4 3) (1 2)) ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-1 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))) ((recv k) (send k)))+ (label 372)+ (parent 278)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2))+ ((5 3) (0 2)) ((6 3) (5 2)) ((7 3) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))))+ (label 374)+ (parent 288)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0)) ((4 2) (1 2))+ ((5 3) (0 2)) ((6 3) (5 2)) ((7 2) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a-0 ra-1))+ (recv+ (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+ (label 375)+ (parent 288)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-1)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2))+ ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-1 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+ (send (cat rb-prime-0 (enc ra-prime-1 k)))))+ (label 377)+ (parent 288)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra-0) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+ ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0)) ((4 2) (1 2))+ ((5 3) (0 2)) ((6 3) (5 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-1 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+ (send+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-0)))+ ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+ ((send (cat a ra-0))+ (recv+ (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k))) ((recv k) (send k)))+ (label 378)+ (parent 288)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (6 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2))+ ((7 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-2 (enc ra-prime k)))+ (send (enc ra-prime-2 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+ (recv (cat rb (enc ra-prime-3 k))) (send (enc rb k))))+ (label 380)+ (parent 299)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (6 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2))+ ((7 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-2 (enc ra-prime k)))+ (send (enc ra-prime-2 k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 381)+ (parent 299)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (6 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2))+ ((7 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-2 (enc ra-prime k)))+ (send (enc ra-prime-2 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 382)+ (parent 299)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-2) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (6 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (1 0)) ((6 3) (5 2))+ ((7 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-2 (enc ra-prime k)))+ (send (enc ra-prime-2 k))) ((recv k) (send k)))+ (label 383)+ (parent 299)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3) (rb-prime rb)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))+ ((6 2) (5 2)) ((7 3) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-2))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k))))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+ (recv (cat rb (enc ra-prime-3 k))) (send (enc rb k))))+ (label 384)+ (parent 302)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+ (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 1))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))+ ((6 2) (5 2)) ((7 2) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-2))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k))))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+ (label 385)+ (parent 302)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime rb) (rb-prime rb-prime-0)+ (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))+ ((6 2) (5 2)) ((7 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+ (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-2))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k))))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+ (send (cat rb-prime-0 (enc rb k)))))+ (label 387)+ (parent 302)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-2) (tb tb) (a a) (b b)+ (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 0) (0 0))+ ((6 2) (5 2)) ((7 1) (0 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc rb k) (0 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-2))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k))))+ ((recv k) (send k)))+ (label 388)+ (parent 302)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2))+ ((7 2) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+ (label 391)+ (parent 303)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)+ (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2))+ ((7 3) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+ (recv (cat ra-prime-2 (enc ra-prime-3 k)))+ (send (enc ra-prime-2 k))))+ (label 392)+ (parent 303)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2))+ ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat rb-prime-0 (enc ra-prime-2 k)))))+ (label 393)+ (parent 303)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+ ((4 3) (3 2)) ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2))+ ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-1 (enc ra-prime k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+ ((recv k) (send k)))+ (label 394)+ (parent 303)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 1))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2))+ ((6 3) (0 2)) ((7 2) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+ (label 397)+ (parent 311)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)+ (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2))+ ((6 3) (0 2)) ((7 3) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+ (recv (cat ra-prime-2 (enc ra-prime-3 k)))+ (send (enc ra-prime-2 k))))+ (label 400)+ (parent 311)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2))+ ((6 3) (0 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat rb-prime-0 (enc ra-prime-2 k)))))+ (label 401)+ (parent 311)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2))+ ((6 3) (0 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-1))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k)))+ ((recv k) (send k)))+ (label 402)+ (parent 311)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 3) (1 2))+ ((4 1) (1 0)) ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))+ ((7 2) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+ (label 405)+ (parent 315)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)+ (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+ ((4 1) (1 0)) ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))+ ((7 3) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+ (recv (cat ra-prime-2 (enc ra-prime-3 k)))+ (send (enc ra-prime-2 k))))+ (label 406)+ (parent 315)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+ ((4 1) (1 0)) ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))+ ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat rb-prime-0 (enc ra-prime-2 k)))))+ (label 407)+ (parent 315)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 3) (1 2))+ ((4 1) (1 0)) ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2))+ ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat ra-prime-0 (enc ra-prime k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))) ((recv k) (send k)))+ (label 408)+ (parent 315)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)+ (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2))+ ((6 3) (5 2)) ((7 3) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+ (recv (cat ra-prime-2 (enc ra-prime-3 k)))+ (send (enc ra-prime-2 k))))+ (label 409)+ (parent 325)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1))+ ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2))+ ((6 3) (5 2)) ((7 2) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+ (label 410)+ (parent 325)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2))+ ((6 3) (5 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat rb-prime-0 (enc ra-prime-2 k)))))+ (label 413)+ (parent 325)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0)+ (rb-prime rb-prime) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+ ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0))+ ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2))+ ((6 3) (5 2)) ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ ra-prime-0))+ (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))) ((recv k) (send k)))+ (label 414)+ (parent 325)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)+ (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 0))+ ((3 3) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))+ ((7 3) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+ (recv (cat ra-prime-2 (enc ra-prime-3 k)))+ (send (enc ra-prime-2 k))))+ (label 415)+ (parent 328)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (1 0))+ ((3 3) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))+ ((7 2) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+ (label 416)+ (parent 328)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 0))+ ((3 3) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))+ ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat rb-prime-0 (enc ra-prime-2 k)))))+ (label 417)+ (parent 328)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (1 0))+ ((3 3) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))+ ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime))+ (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))) ((recv k) (send k)))+ (label 418)+ (parent 328)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-3)+ (rb-prime ra-prime-2) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 0) (0 0))+ ((3 2) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))+ ((7 3) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init-reauth 4)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+ (recv (cat ra-prime-2 (enc ra-prime-3 k)))+ (send (enc ra-prime-2 k))))+ (label 420)+ (parent 338)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand init 3 (k k) (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0)+ (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 0) (0 0))+ ((3 2) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))+ ((7 2) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((send (cat a-0 ra-0))+ (recv+ (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+ (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+ (label 421)+ (parent 338)+ (unrealized (7 1))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 2 (k k) (ra-prime ra-prime-2)+ (rb-prime rb-prime-0) (tb tb-0) (a a-0) (b b-0) (ks ks-0))+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 0) (0 0))+ ((3 2) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))+ ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-strand resp-reauth 2)+ (enc ra-prime-2 k) (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k)))+ ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+ (send (cat rb-prime-0 (enc ra-prime-2 k)))))+ (label 423)+ (parent 338)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+ (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+ (vars (k skey)+ (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+ text) (a b ks name))+ (defstrand resp 3 (k k) (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks))+ (defstrand resp-reauth 3 (k k) (ra-prime ra-prime) (rb-prime rb-prime)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand keyserver 2 (k k) (ra ra) (rb rb-0) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init 3 (k k) (ra ra) (rb rb-prime) (tb tb) (a a) (b b)+ (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-0) (rb-prime rb)+ (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-1)+ (rb-prime ra-prime-0) (tb tb) (a a) (b b) (ks ks))+ (defstrand init-reauth 4 (k k) (ra-prime ra-prime-2)+ (rb-prime ra-prime-1) (tb tb) (a a) (b b) (ks ks))+ (deflistener k)+ (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+ ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 0) (0 0))+ ((3 2) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2))+ ((7 1) (6 2)))+ (non-orig (ltk a ks) (ltk b ks))+ (uniq-orig k ra rb ra-prime rb-prime)+ (operation encryption-test (added-listener k) (enc ra-prime-2 k)+ (6 2))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+ ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+ (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+ ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+ (send+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+ ((send (cat a ra))+ (recv+ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+ rb-prime))+ (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+ (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+ (recv (cat ra-prime-0 (enc ra-prime-1 k)))+ (send (enc ra-prime-0 k)))+ ((recv (enc a k tb (ltk b ks)))+ (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+ (recv (cat ra-prime-1 (enc ra-prime-2 k)))+ (send (enc ra-prime-1 k))) ((recv k) (send k)))+ (label 424)+ (parent 338)+ (unrealized (7 0))+ (aborted)+ (maps+ ((0 1)+ ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+ (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb)))) (comment "aborted"))
tst/neuman-stubblebine.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/neuman-stubblebine.scm") (defprotocol neuman-stubblebine basic@@ -35,6 +35,7 @@ (send (cat (enc a k tb (ltk b ks)) (enc rb k))))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (ks ks) (ra ra) (rb rb) (k k) (tb tb)))) (origs (ra (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -59,6 +60,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (ks ks) (ra ra) (rb rb) (k k) (tb tb)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton neuman-stubblebine@@ -123,6 +125,7 @@ (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))) (label 3) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (ks ks) (ra ra) (rb rb) (k k) (tb tb)))) (origs (rb (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -147,6 +150,7 @@ (label 4) (parent 3) (unrealized (0 2) (1 0))+ (maps ((0) ((a a) (b b) (ks ks) (ra ra) (rb rb) (k k) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton neuman-stubblebine@@ -169,6 +173,7 @@ (label 5) (parent 4) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (ks ks) (ra ra) (rb rb) (k k) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton neuman-stubblebine@@ -195,6 +200,7 @@ (label 6) (parent 4) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (ks ks) (ra ra) (rb rb) (k k) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton neuman-stubblebine@@ -224,6 +230,7 @@ (label 7) (parent 5) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (ks ks) (ra ra) (rb rb) (k k) (tb tb)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton neuman-stubblebine@@ -248,6 +255,7 @@ (parent 5) (unrealized (2 0)) (dead)+ (maps ((0) ((a a) (b b) (ks ks) (ra ra) (rb rb) (k k) (tb tb)))) (comment "empty cohort")) (defskeleton neuman-stubblebine@@ -280,6 +288,7 @@ (label 9) (parent 6) (unrealized (3 1))+ (maps ((0) ((a a) (b b) (ks ks) (ra ra) (rb rb) (k k) (tb tb)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton neuman-stubblebine@@ -307,6 +316,7 @@ (parent 6) (unrealized (3 0)) (dead)+ (maps ((0) ((a a) (b b) (ks ks) (ra ra) (rb rb) (k k) (tb tb)))) (comment "empty cohort")) (defskeleton neuman-stubblebine@@ -334,6 +344,7 @@ (label 11) (parent 7) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (ks ks) (ra ra) (rb rb) (k k) (tb tb)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton neuman-stubblebine@@ -364,6 +375,7 @@ (label 12) (parent 9) (unrealized (3 1))+ (maps ((0) ((a a) (b b) (ks ks) (ra ra) (rb rb) (k k) (tb tb)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton neuman-stubblebine@@ -463,6 +475,7 @@ (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))) (label 15) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (ks ks) (ra ra) (rb rb) (k k) (tb tb)))) (origs (k (0 1))) (comment "1 in cohort - 1 not yet seen"))
tst/no_contraction.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/no_contraction.scm") (defprotocol no-contraction basic@@ -26,6 +26,7 @@ (label 0) (unrealized (0 0)) (preskeleton)+ (maps ((0 1) ((a a) (n n) (a-0 a-0) (b b)))) (origs (n (1 0))) (comment "Not a skeleton")) @@ -41,6 +42,7 @@ (label 1) (parent 0) (unrealized (0 0))+ (maps ((0 1) ((a a) (n n) (a-0 a-0) (b b)))) (origs (n (1 0))) (comment "1 in cohort - 1 not yet seen"))
tst/non_transforming.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/non_transforming.scm") (defprotocol non_transforming basic@@ -33,6 +33,7 @@ ((send (enc a d (pubk B0)))) ((send (enc c b (pubk B1))))) (label 0) (unrealized (0 0) (0 1))+ (maps ((0 1 2) ((a a) (b b) (c c) (d d) (B B) (B0 B0) (B1 B1)))) (origs (c (2 0)) (d (1 0)) (a (1 0)) (b (2 0))) (comment "1 in cohort - 1 not yet seen")) @@ -50,6 +51,7 @@ (label 1) (parent 0) (unrealized (0 0) (0 1))+ (maps ((0 1 1) ((a a) (b d) (c a) (d d) (B B) (B0 B0) (B1 B0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton non_transforming@@ -70,6 +72,7 @@ (label 2) (parent 0) (unrealized (0 0) (0 1))+ (maps ((0 1 2) ((a a) (b b) (c c) (d d) (B B) (B0 B0) (B1 B1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton non_transforming@@ -89,6 +92,7 @@ (label 3) (parent 1) (unrealized (0 0) (0 1))+ (maps ((0 1 1) ((a a) (b d) (c a) (d d) (B B) (B0 B0) (B1 B0)))) (origs (a (1 0)) (d (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -110,6 +114,7 @@ (label 4) (parent 2) (unrealized (0 1))+ (maps ((0 1 2) ((a a) (b b) (c c) (d d) (B B0) (B0 B0) (B1 B1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton non_transforming@@ -129,6 +134,7 @@ (label 5) (parent 3) (unrealized (0 1))+ (maps ((0 1 1) ((a a) (b d) (c a) (d d) (B B0) (B0 B0) (B1 B0)))) (origs (a (1 0)) (d (1 0))) (comment "3 in cohort - 3 not yet seen")) @@ -153,6 +159,7 @@ (label 6) (parent 4) (unrealized (0 1))+ (maps ((0 1 2) ((a a) (b b) (c c) (d d) (B B0) (B0 B0) (B1 B1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton non_transforming@@ -175,6 +182,7 @@ (label 7) (parent 4) (unrealized (0 1))+ (maps ((0 1 2) ((a a) (b c) (c c) (d d) (B B0) (B0 B0) (B1 B1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton non_transforming
tst/nonaug-prune.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/nonaug-prune.scm") (defprotocol nonaug-prune basic@@ -35,6 +35,7 @@ ((send (enc n B B k)) (send (enc n A k)) (recv (enc n A A A k)))) (label 0) (unrealized (0 0) (1 0) (2 2))+ (maps ((0 1 2) ((n n) (A A) (B B) (k k)))) (origs (n (2 0))) (comment "4 in cohort - 4 not yet seen")) @@ -57,6 +58,7 @@ (operation nonce-test (added-strand trans2 2) n (1 2) (enc n B k) (enc n B B k)) (strand-map 0 1))) (unrealized (0 0) (1 2))+ (maps ((0 0 1) ((n n) (A B) (B B) (k k)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton nonaug-prune@@ -76,6 +78,7 @@ (label 2) (parent 0) (unrealized (0 0) (1 0))+ (maps ((0 1 2) ((n n) (A B) (B B) (k k)))) (origs (n (2 0))) (comment "1 in cohort - 1 not yet seen")) @@ -98,6 +101,7 @@ (label 3) (parent 0) (unrealized (0 0) (1 0) (2 2) (3 1))+ (maps ((0 1 2) ((n n) (A B) (B B) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nonaug-prune@@ -117,6 +121,7 @@ (label 4) (parent 0) (unrealized (0 0) (1 0))+ (maps ((0 1 2) ((n n) (A A) (B B) (k k)))) (origs (n (2 0))) (comment "1 in cohort - 1 not yet seen")) @@ -139,6 +144,7 @@ (label 5) (parent 0) (unrealized (0 0) (1 0) (3 0))+ (maps ((0 1 2) ((n n) (A A) (B B) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nonaug-prune@@ -158,6 +164,7 @@ (label 6) (parent 1) (unrealized (0 0) (1 2) (2 1))+ (maps ((0 0 1) ((n n) (A B) (B B) (k k)))) (origs (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -176,6 +183,7 @@ (label 7) (parent 1) (unrealized (0 0))+ (maps ((0 0 1) ((n n) (A B) (B B) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nonaug-prune@@ -194,6 +202,7 @@ (label 8) (parent 2) (unrealized (0 0))+ (maps ((0 1 2) ((n n) (A B) (B B) (k k)))) (origs (n (2 0))) (comment "1 in cohort - 1 not yet seen")) @@ -216,6 +225,7 @@ (label 9) (parent 3) (unrealized (0 0) (1 0) (2 2))+ (maps ((0 1 2) ((n n) (A B) (B B) (k k)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton nonaug-prune@@ -234,6 +244,7 @@ (label 10) (parent 4) (unrealized (0 0))+ (maps ((0 1 2) ((n n) (A A) (B B) (k k)))) (origs (n (2 0))) (comment "1 in cohort - 1 not yet seen")) @@ -255,6 +266,7 @@ (label 11) (parent 5) (unrealized (0 0) (1 0))+ (maps ((0 1 2) ((n n) (A A) (B B) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nonaug-prune@@ -278,6 +290,7 @@ (operation nonce-test (added-strand trans2 2) n (1 2) (enc n B k) (enc n n C k) (enc n B B k)) (strand-map 0 1 2))) (unrealized (0 0) (1 2))+ (maps ((0 0 1) ((n n) (A B) (B B) (k k)))) (origs (n (1 0))) (comment "3 in cohort - 2 not yet seen")) @@ -346,6 +359,7 @@ (operation nonce-test (displaced 5 2 orig 2) n (4 1) (enc n B B k)) (strand-map 0 1 2 3 3))) (unrealized (0 0) (1 0) (2 2) (4 1))+ (maps ((0 1 2) ((n n) (A B) (B B) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton nonaug-prune@@ -368,6 +382,7 @@ (label 16) (parent 9) (unrealized (0 0) (1 0))+ (maps ((0 1 2) ((n n) (A B) (B B) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nonaug-prune@@ -392,6 +407,7 @@ (label 17) (parent 9) (unrealized (0 0) (1 0) (4 0))+ (maps ((0 1 2) ((n n) (A B) (B B) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nonaug-prune@@ -415,6 +431,7 @@ (operation nonce-test (contracted (B A)) n (0 0) (enc n A k) (enc n A A k)) (strand-map 0 1 2))) (unrealized (0 0))+ (maps ((0 1 2) ((n n) (A A) (B B) (k k)))) (origs (n (2 0))) (comment "3 in cohort - 2 not yet seen")) @@ -436,6 +453,7 @@ (label 19) (parent 11) (unrealized (0 0))+ (maps ((0 1 2) ((n n) (A A) (B B) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nonaug-prune@@ -463,6 +481,7 @@ (operation nonce-test (displaced 4 1 orig 2) n (3 1) (enc n B B k)) (strand-map 0 1 2 2))) (unrealized (0 0) (1 2) (3 1))+ (maps ((0 0 1) ((n n) (A B) (B B) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton nonaug-prune@@ -483,6 +502,7 @@ (label 21) (parent 12) (unrealized (0 0))+ (maps ((0 0 1) ((n n) (A B) (B B) (k k)))) (origs (n (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -505,6 +525,7 @@ (label 22) (parent 16) (unrealized (0 0))+ (maps ((0 1 2) ((n n) (A B) (B B) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nonaug-prune@@ -528,6 +549,7 @@ (label 23) (parent 17) (unrealized (0 0) (1 0))+ (maps ((0 1 2) ((n n) (A B) (B B) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nonaug-prune@@ -547,6 +569,7 @@ (label 24) (parent 18) (unrealized (0 0))+ (maps ((0 1 2) ((n n) (A A) (B B) (k k)))) (origs (n (2 0))) (comment "1 in cohort - 1 not yet seen")) @@ -570,6 +593,7 @@ (label 25) (parent 18) (unrealized (0 0) (3 0))+ (maps ((0 1 2) ((n n) (A A) (B B) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nonaug-prune@@ -595,6 +619,7 @@ (operation nonce-test (displaced 4 1 trans2 2) n (0 0) (enc n A k) (enc n B B k)) (strand-map 0 1 2 3))) (unrealized (0 0))+ (maps ((0 1 2) ((n n) (A A) (B B) (k k)))) (comment "4 in cohort - 3 not yet seen")) (defskeleton nonaug-prune@@ -617,6 +642,7 @@ (seen-ops (13 (operation generalization deleted (2 0)) (strand-map 0 1))) (realized)+ (maps ((0 0 1) ((n n) (A B) (B B) (k k)))) (origs (n (1 0))) (comment "1 in cohort - 0 not yet seen")) @@ -642,6 +668,7 @@ (seen-ops (14 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps ((0 1 2) ((n n) (A B) (B B) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton nonaug-prune@@ -665,6 +692,7 @@ (label 29) (parent 23) (unrealized (0 0))+ (maps ((0 1 2) ((n n) (A B) (B B) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nonaug-prune@@ -688,6 +716,7 @@ (14 (operation generalization weakened ((1 1) (0 0))) (strand-map 0 1 2))) (realized)+ (maps ((0 1 2) ((n n) (A A) (B A) (k k)))) (origs (n (2 0))) (comment "1 in cohort - 0 not yet seen")) @@ -709,6 +738,7 @@ (label 31) (parent 25) (unrealized (0 0))+ (maps ((0 1 2) ((n n) (A A) (B B) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nonaug-prune@@ -753,6 +783,7 @@ (label 33) (parent 26) (unrealized (0 0))+ (maps ((0 1 2) ((n n) (A A) (B B) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nonaug-prune@@ -777,6 +808,7 @@ (label 34) (parent 26) (unrealized (0 0) (4 0))+ (maps ((0 1 2) ((n n) (A A) (B B) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nonaug-prune@@ -803,6 +835,7 @@ (seen-ops (32 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps ((0 1 2) ((n n) (A B) (B B) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton nonaug-prune@@ -827,6 +860,7 @@ (seen-ops (14 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps ((0 1 2) ((n n) (A A) (B A) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton nonaug-prune@@ -852,6 +886,7 @@ (32 (operation generalization weakened ((3 1) (0 0))) (strand-map 0 1 2 3))) (realized)+ (maps ((0 1 2) ((n n) (A A) (B A) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton nonaug-prune@@ -875,6 +910,7 @@ (label 38) (parent 34) (unrealized (0 0))+ (maps ((0 1 2) ((n n) (A A) (B B) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nonaug-prune@@ -902,6 +938,7 @@ (seen-ops (32 (operation generalization deleted (4 0)) (strand-map 0 1 2 3))) (realized)+ (maps ((0 1 2) ((n n) (A A) (B A) (k k)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
tst/ns-l.tst view
@@ -1,7 +1,7 @@ (herald "Needham-Schroeder-Low Public-Key Protocol" (comment "With deflistener's")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/ns-l.scm") (defprotocol ns basic@@ -34,6 +34,7 @@ (label 0) (unrealized (0 1) (1 0)) (preskeleton)+ (maps ((0 1) ((a a) (b b) (n1 n1) (n2 n2)))) (origs (n1 (0 0))) (comment "Not a skeleton")) @@ -44,12 +45,14 @@ (precedes ((0 0) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n1)+ (comment "Initiator point-of-view with a listener") (traces ((send (enc n1 a (pubk b))) (recv (enc b n1 n2 (pubk a))) (send (enc n2 (pubk b)))) ((recv n1) (send n1))) (label 1) (parent 0) (unrealized (0 1) (1 0))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n2 n2)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -61,6 +64,7 @@ (precedes ((0 0) (2 0)) ((2 1) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n1)+ (comment "Initiator point-of-view with a listener") (operation nonce-test (added-strand resp 2) n1 (1 0) (enc n1 a (pubk b))) (strand-map 0 1)@@ -71,6 +75,7 @@ (label 2) (parent 1) (unrealized (0 1) (1 0))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n2 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -81,6 +86,7 @@ (precedes ((0 0) (2 0)) ((0 2) (1 0)) ((2 1) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n2)+ (comment "Initiator point-of-view with a listener") (operation nonce-test (displaced 3 0 init 3) n2-0 (1 0) (enc n2-0 a (pubk b)) (enc b n2-0 n2-0 (pubk a))) (strand-map 0 1 2)@@ -91,6 +97,7 @@ (label 3) (parent 2) (unrealized (0 1) (1 0))+ (maps ((0 1) ((a a) (b b) (n1 n2) (n2 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -103,6 +110,7 @@ ((3 1) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n2)+ (comment "Initiator point-of-view with a listener") (operation nonce-test (added-strand resp 2) n2 (1 0) (enc n2 (pubk b)) (enc n2 a (pubk b)) (enc b n2 n2 (pubk a))) (strand-map 0 1 2)@@ -115,6 +123,7 @@ (parent 3) (unrealized (0 1) (1 0)) (dead)+ (maps ((0 1) ((a a) (b b) (n1 n2) (n2 n2)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -149,6 +158,7 @@ (label 5) (unrealized (0 2) (1 0)) (preskeleton)+ (maps ((0 1) ((a a) (n2 n2) (b b) (n1 n1)))) (origs (n2 (0 1))) (comment "Not a skeleton")) @@ -159,12 +169,14 @@ (precedes ((0 1) (1 0))) (non-orig (privk a)) (uniq-orig n2)+ (comment "Responder point-of-view with a listener") (traces ((recv (enc n1 a (pubk b))) (send (enc b n1 n2 (pubk a))) (recv (enc n2 (pubk b)))) ((recv n2) (send n2))) (label 6) (parent 5) (unrealized (0 2) (1 0))+ (maps ((0 1) ((a a) (n2 n2) (b b) (n1 n1)))) (origs (n2 (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -176,6 +188,7 @@ (precedes ((0 1) (2 1)) ((2 2) (1 0))) (non-orig (privk a)) (uniq-orig n2)+ (comment "Responder point-of-view with a listener") (operation nonce-test (added-strand init 3) n2 (1 0) (enc b n1 n2 (pubk a))) (strand-map 0 1)@@ -187,6 +200,7 @@ (label 7) (parent 6) (unrealized (0 2))+ (maps ((0 1) ((a a) (n2 n2) (b b) (n1 n1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton ns@@ -197,6 +211,7 @@ (precedes ((0 1) (2 1)) ((2 2) (0 2)) ((2 2) (1 0))) (non-orig (privk a)) (uniq-orig n2)+ (comment "Responder point-of-view with a listener") (operation nonce-test (displaced 3 2 init 3) n2 (0 2) (enc b n1 n2 (pubk a))) (strand-map 0 1 2)@@ -221,6 +236,7 @@ (precedes ((0 1) (2 1)) ((0 1) (3 1)) ((2 2) (1 0)) ((3 2) (0 2))) (non-orig (privk a)) (uniq-orig n2)+ (comment "Responder point-of-view with a listener") (operation nonce-test (added-strand init 3) n2 (0 2) (enc b n1 n2 (pubk a))) (strand-map 0 1 2)
tst/ns-rebinding.scm view
@@ -93,3 +93,11 @@ (non-orig (privk a)) (uniq-orig n2) (comment "Responder point-of-view"))++(defskeleton ns+ (vars (x name) (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Double initiator point-of-view, same nonce"))
tst/ns-rebinding.tst view
@@ -1,6 +1,6 @@ (herald "ALternate Needham-Schroeder Public-Key Protocol Variants") -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/ns-rebinding.scm") (defprotocol ns basic@@ -47,6 +47,7 @@ (send (enc n2 (pubk b))))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (origs (n1 (0 0))) (comment "Not closed under rules")) @@ -56,6 +57,7 @@ (non-orig (privk a) (privk b)) (uniq-orig n1) (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Initiator point-of-view") (rule fact-init-rel11 fact-init-rel20 rebind-x) (traces ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))@@ -63,6 +65,7 @@ (label 1) (parent 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -74,6 +77,7 @@ (non-orig (privk a) (privk b)) (uniq-orig n1) (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Initiator point-of-view") (operation nonce-test (added-strand resp 2) n1 (0 1) (enc n1 a (pubk b))) (strand-map 0)@@ -84,6 +88,7 @@ (label 2) (parent 1) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -94,6 +99,7 @@ (non-orig (privk a) (privk b)) (uniq-orig n1) (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Initiator point-of-view") (operation nonce-test (contracted (n2-0 n2)) n1 (0 1) (enc n1 a (pubk b)) (enc n1 n2 b (pubk a))) (strand-map 0 1)@@ -155,6 +161,7 @@ (send (enc n2 (pubk b))))) (label 4) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (origs (n1 (0 0))) (comment "Not closed under rules")) @@ -164,6 +171,7 @@ (non-orig (privk a) (privk b)) (uniq-orig n1) (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2) (rel n1 n1))+ (comment "Initiator point-of-view") (rule fact-init-rel11 fact-init-rel20 rebind-x) (traces ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))@@ -171,6 +179,7 @@ (label 5) (parent 4) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -182,6 +191,7 @@ (non-orig (privk a) (privk b)) (uniq-orig n1) (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2) (rel n1 n1))+ (comment "Initiator point-of-view") (operation nonce-test (added-strand resp 2) n1 (0 1) (enc n1 a (pubk b))) (strand-map 0)@@ -192,6 +202,7 @@ (label 6) (parent 5) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -202,6 +213,7 @@ (non-orig (privk a) (privk b)) (uniq-orig n1) (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2) (rel n1 n1))+ (comment "Initiator point-of-view") (operation nonce-test (contracted (n2-0 n2)) n1 (0 1) (enc n1 a (pubk b)) (enc n1 n2 b (pubk a))) (strand-map 0 1)@@ -262,6 +274,7 @@ (send (enc n2 (pubk b))))) (label 8) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (origs (n1 (0 0))) (comment "Not closed under rules")) @@ -271,6 +284,7 @@ (non-orig (privk b)) (uniq-orig n1) (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Initiator point-of-view") (rule fact-init-rel11 fact-init-rel20 rebind-x) (traces ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))@@ -278,6 +292,7 @@ (label 9) (parent 8) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -289,6 +304,7 @@ (non-orig (privk b)) (uniq-orig n1) (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Initiator point-of-view") (operation nonce-test (added-strand resp 2) n1 (0 1) (enc n1 a (pubk b))) (strand-map 0)@@ -351,6 +367,7 @@ (label 11) (unrealized (0 1) (1 0)) (preskeleton)+ (maps ((0 1) ((a a) (b b) (n1 n1) (n2 n2)))) (origs (n1 (0 0))) (comment "Not a skeleton")) @@ -361,12 +378,14 @@ (precedes ((0 0) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n1)+ (comment "Initiator point-of-view") (traces ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a))) (send (enc n2 (pubk b)))) ((recv n1) (send n1))) (label 12) (parent 11) (unrealized (0 1) (1 0))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n2 n2)))) (origs (n1 (0 0))) (comment "Not closed under rules")) @@ -378,6 +397,7 @@ (non-orig (privk a) (privk b)) (uniq-orig n1) (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Initiator point-of-view") (rule fact-init-rel11 fact-init-rel20 rebind-x) (traces ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))@@ -385,6 +405,7 @@ (label 13) (parent 12) (unrealized (0 1) (1 0))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n2 n2)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -397,6 +418,7 @@ (non-orig (privk a) (privk b)) (uniq-orig n1) (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Initiator point-of-view") (operation nonce-test (added-strand resp 2) n1 (1 0) (enc n1 a (pubk b))) (strand-map 0 1)@@ -407,6 +429,7 @@ (label 14) (parent 13) (unrealized (0 1) (1 0))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n2 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -418,6 +441,7 @@ (non-orig (privk a) (privk b)) (uniq-orig n2) (facts (rel2 x n2) (rel1 n2 n2) (rel2 n2 n2))+ (comment "Initiator point-of-view") (operation nonce-test (displaced 3 0 init 3) n2-0 (1 0) (enc n2-0 a (pubk b)) (enc n2-0 n2-0 b (pubk a))) (strand-map 0 1 2)@@ -428,6 +452,7 @@ (label 15) (parent 14) (unrealized (0 1) (1 0))+ (maps ((0 1) ((a a) (b b) (n1 n2) (n2 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -441,6 +466,7 @@ (non-orig (privk a) (privk b)) (uniq-orig n2) (facts (rel2 x n2) (rel1 n2 n2) (rel2 n2 n2))+ (comment "Initiator point-of-view") (operation nonce-test (added-strand resp 2) n2 (1 0) (enc n2 (pubk b)) (enc n2 a (pubk b)) (enc n2 n2 b (pubk a))) (strand-map 0 1 2)@@ -453,6 +479,7 @@ (parent 15) (unrealized (0 1) (1 0)) (dead)+ (maps ((0 1) ((a a) (b b) (n1 n2) (n2 n2)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -504,6 +531,7 @@ (send (enc n2-0 (pubk b))))) (label 17) (unrealized (0 1) (1 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0)))) (origs (n1 (0 0)) (n1-0 (1 0))) (comment "Not closed under rules")) @@ -515,6 +543,7 @@ (uniq-orig n1 n1-0) (facts (rel2 x-0 n2-0) (rel2 x n2) (rel1 n1-0 n2-0) (rel1 n1 n2) (rel2 n1-0 n2-0) (rel2 n1 n2))+ (comment "Double initiator point-of-view") (rule fact-init-rel11 fact-init-rel20 rebind-x) (traces ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))@@ -524,6 +553,7 @@ (label 18) (parent 17) (unrealized (0 1) (1 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0)))) (origs (n1 (0 0)) (n1-0 (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -533,6 +563,7 @@ (non-orig (privk a) (privk b)) (uniq-orig n1) (facts (rel2 x-0 n2) (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Double initiator point-of-view") (operation collapsed 1 0) (strand-map 0 0) (traces@@ -541,6 +572,7 @@ (label 19) (parent 18) (unrealized (0 1))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n1-0 n1) (n2 n2) (n2-0 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -553,6 +585,7 @@ (uniq-orig n1 n1-0) (facts (rel2 x-0 n2-0) (rel2 x n2) (rel1 n1-0 n2-0) (rel1 n1 n2) (rel2 n1-0 n2-0) (rel2 n1 n2))+ (comment "Double initiator point-of-view") (operation nonce-test (added-strand resp 2) n1-0 (1 1) (enc n1-0 a (pubk b))) (strand-map 0 1)@@ -565,6 +598,7 @@ (label 20) (parent 18) (unrealized (0 1) (1 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -575,6 +609,7 @@ (non-orig (privk a) (privk b)) (uniq-orig n1) (facts (rel2 x-0 n2) (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Double initiator point-of-view") (operation nonce-test (added-strand resp 2) n1 (0 1) (enc n1 a (pubk b))) (strand-map 0)@@ -585,6 +620,7 @@ (label 21) (parent 19) (unrealized (0 1))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n1-0 n1) (n2 n2) (n2-0 n2)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -598,6 +634,7 @@ (uniq-orig n1 n1-0) (facts (rel2 x-0 n2-0) (rel2 x n2) (rel1 n1-0 n2-0) (rel1 n1 n2) (rel2 n1-0 n2-0) (rel2 n1 n2))+ (comment "Double initiator point-of-view") (operation nonce-test (contracted (n2-1 n2-0)) n1-0 (1 1) (enc n1-0 a (pubk b)) (enc n1-0 n2-0 b (pubk a))) (strand-map 0 1 2)@@ -610,6 +647,7 @@ (label 22) (parent 20) (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -620,6 +658,7 @@ (non-orig (privk a) (privk b)) (uniq-orig n1) (facts (rel2 x-0 n2) (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Double initiator point-of-view") (operation nonce-test (contracted (n2-0 n2)) n1 (0 1) (enc n1 a (pubk b)) (enc n1 n2 b (pubk a))) (strand-map 0 1)@@ -630,9 +669,9 @@ (label 23) (parent 21) (realized)- (shape) (maps ((0 0) ((a a) (b b) (n1 n1) (n1-0 n1) (n2 n2) (n2-0 n2))))- (origs (n1 (0 0))))+ (origs (n1 (0 0)))+ (comment "1 in cohort - 1 not yet seen")) (defskeleton ns (vars (x x-0 name) (n1 n1-0 n2 n2-0 n2-1 text) (a b name))@@ -645,6 +684,7 @@ (uniq-orig n1 n1-0) (facts (rel2 x-0 n2-0) (rel2 x n2) (rel1 n1-0 n2-0) (rel1 n1 n2) (rel2 n1-0 n2-0) (rel2 n1 n2))+ (comment "Double initiator point-of-view") (operation nonce-test (added-strand resp 2) n1 (0 1) (enc n1 a (pubk b))) (strand-map 0 1 2)@@ -658,9 +698,33 @@ (label 24) (parent 22) (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns+ (vars (x name) (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Double initiator point-of-view")+ (rule fact-init-rel11 fact-init-rel20 rebind-x)+ (operation generalization weakened ((0 0) (1 0)))+ (strand-map 0 1)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))))+ (label 25)+ (parent 23)+ (realized)+ (shape)+ (maps ((0 0) ((a a) (b b) (n1 n1) (n1-0 n1) (n2 n2) (n2-0 n2))))+ (origs (n1 (0 0))))++(defskeleton ns (vars (x x-0 name) (n1 n1-0 n2 n2-0 text) (a b name)) (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b)) (defstrand init 3 (n1 n1-0) (n2 n2) (a a) (b b))@@ -671,6 +735,7 @@ (uniq-orig n1 n1-0) (facts (rel2 x-0 n2) (rel2 x n2-0) (rel1 n1-0 n2) (rel1 n1 n2-0) (rel2 n1-0 n2) (rel2 n1 n2-0))+ (comment "Double initiator point-of-view") (operation nonce-test (contracted (n2-1 n2-0)) n1 (0 1) (enc n1 a (pubk b)) (enc n1 n2-0 b (pubk a))) (strand-map 0 1 2 3)@@ -681,7 +746,7 @@ (send (enc n2 (pubk b)))) ((recv (enc n1-0 a (pubk b))) (send (enc n1-0 n2 b (pubk a)))) ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 b (pubk a)))))- (label 25)+ (label 26) (parent 24) (realized) (shape)@@ -735,9 +800,10 @@ (send (enc n2 (pubk b)))) ((send (enc n1 a (pubk b))) (recv (enc n1 n2-0 b (pubk a))) (send (enc n2-0 (pubk b)))))- (label 26)+ (label 27) (realized) (preskeleton)+ (maps ((0 1) ((a a) (b b) (n1 n1) (n2 n2) (n2-0 n2-0)))) (origs (n1 (1 0)) (n1 (0 0))) (comment "Not a skeleton")) @@ -746,13 +812,14 @@ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b)) (non-orig (privk a) (privk b)) (uniq-orig n1)+ (comment "Double initiator point-of-view, same nonce") (traces ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a))) (send (enc n2 (pubk b)))))- (label 27)- (parent 26)+ (label 28)+ (parent 27) (unrealized (0 1))- (origs (n1 (0 0)))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n2 n2) (n2-0 n2)))) (comment "Not closed under rules")) (defskeleton ns@@ -761,14 +828,15 @@ (non-orig (privk a) (privk b)) (uniq-orig n1) (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Double initiator point-of-view, same nonce") (rule fact-init-rel11 fact-init-rel20 rebind-x) (traces ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a))) (send (enc n2 (pubk b)))))- (label 28)- (parent 27)+ (label 29)+ (parent 28) (unrealized (0 1))- (origs (n1 (0 0)))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n2 n2) (n2-0 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -779,6 +847,7 @@ (non-orig (privk a) (privk b)) (uniq-orig n1) (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Double initiator point-of-view, same nonce") (operation nonce-test (added-strand resp 2) n1 (0 1) (enc n1 a (pubk b))) (strand-map 0)@@ -786,9 +855,11 @@ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a))) (send (enc n2 (pubk b)))) ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 b (pubk a)))))- (label 29)- (parent 28)+ (label 30)+ (parent 29) (unrealized (0 1))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n2 n2) (n2-0 n2))))+ (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -799,6 +870,7 @@ (non-orig (privk a) (privk b)) (uniq-orig n1) (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Double initiator point-of-view, same nonce") (operation nonce-test (contracted (n2-0 n2)) n1 (0 1) (enc n1 a (pubk b)) (enc n1 n2 b (pubk a))) (strand-map 0 1)@@ -806,11 +878,11 @@ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a))) (send (enc n2 (pubk b)))) ((recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))))- (label 30)- (parent 29)+ (label 31)+ (parent 30) (realized) (shape)- (maps ((0 0) ((a a) (b b) (n1 n1) (n2 n2))))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n2 n2) (n2-0 n2)))) (origs (n1 (0 0)))) (comment "Nothing left to do")@@ -857,8 +929,9 @@ (traces ((recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a))) (recv (enc n2 (pubk b)))))- (label 31)+ (label 32) (unrealized (0 2))+ (maps ((0) ((a a) (n2 n2) (b b) (n1 n1)))) (origs (n2 (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -870,6 +943,7 @@ (non-orig (privk a)) (uniq-orig n2) (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Responder point-of-view") (rule fact-init-rel11 fact-init-rel20 rebind-x) (operation nonce-test (added-strand init 3) n2 (0 2) (enc n1 n2 b (pubk a)))@@ -879,11 +953,133 @@ (recv (enc n2 (pubk b)))) ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a))) (send (enc n2 (pubk b)))))- (label 32)- (parent 31)+ (label 33)+ (parent 32) (realized) (shape) (maps ((0) ((a a) (n2 n2) (b b) (n1 n1)))) (origs (n2 (0 1))))++(comment "Nothing left to do")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ (facts (rel1 n1 n2) (rel2 n1 n2)))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defrule rebind-x+ (forall ((x y text))+ (implies+ (fact rel1 x y)+ (exists ((x-0 name)) (fact rel2 x-0 y)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (defgenrule fact-init-rel11+ (forall ((z strd) (n2 n1 text))+ (implies+ (and (p "init" z (idx 2)) (p "init" "n1" z n1)+ (p "init" "n2" z n2)) (fact rel1 n1 n2))))+ (defgenrule fact-init-rel20+ (forall ((z strd) (n2 n1 text))+ (implies+ (and (p "init" z (idx 2)) (p "init" "n1" z n1)+ (p "init" "n2" z n2)) (fact rel2 n1 n2))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (x name) (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Double initiator point-of-view, same nonce")+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (label 34)+ (unrealized (0 1))+ (maps ((0) ((x x) (n1 n1) (n2 n2) (a a) (b b))))+ (origs (n1 (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (x name) (n1 n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Double initiator point-of-view, same nonce")+ (operation nonce-test (added-strand resp 2) n1 (0 1)+ (enc n1 a (pubk b)))+ (strand-map 0)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 b (pubk a)))))+ (label 35)+ (parent 34)+ (unrealized (0 1))+ (maps ((0) ((x x) (n1 n1) (n2 n2) (a a) (b b))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (x name) (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (facts (rel2 x n2) (rel1 n1 n2) (rel2 n1 n2))+ (comment "Double initiator point-of-view, same nonce")+ (operation nonce-test (contracted (n2-0 n2)) n1 (0 1)+ (enc n1 a (pubk b)) (enc n1 n2 b (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))))+ (label 36)+ (parent 35)+ (realized)+ (maps ((0) ((x x) (n1 n1) (n2 n2) (a a) (b b))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n2 text) (x x-0 name) (n1 n2-0 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))+ (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (facts (rel2 x-0 n2-0) (rel1 n1 n2-0) (rel2 n1 n2-0) (rel2 x n2)+ (rel1 n1 n2) (rel2 n1 n2))+ (comment "Double initiator point-of-view, same nonce")+ (rule fact-init-rel11 fact-init-rel20 rebind-x)+ (operation generalization separated n2-0)+ (strand-map 0 1)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2-0 b (pubk a)))+ (send (enc n2-0 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 b (pubk a)))))+ (label 37)+ (parent 36)+ (seen 36)+ (seen-ops+ (36 (operation generalization weakened ((0 0) (1 0)))+ (strand-map 0 1)))+ (realized)+ (maps ((0) ((x x-0) (n1 n1) (n2 n2) (a a) (b b))))+ (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
+ tst/ns-unrebinding.scm view
@@ -0,0 +1,81 @@+++(herald "ALternate Needham-Schroeder Public-Key Protocol Variants")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace+ (send (enc n1 a (pubk b)))+ (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ )+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace+ (recv (enc n1 a (pubk b)))+ (send (enc n1 n2 b (pubk a)))+ (recv (enc n2 (pubk b)))))++ ++ (comment "Needham-Schroeder with no role origination assumptions"))++;;; The initiator point-of-view+(defskeleton ns+ (vars (a b name) (n1 text))+ (defstrand init 3 (a a) (b b) (n1 n1))+ (non-orig (privk b) (privk a))+ (uniq-orig n1)+ (comment "Initiator point-of-view"))++(defskeleton ns+ (vars (a b name) (n1 text))+ (defstrand init 3 (a a) (b b) (n1 n1))+ (non-orig (privk b) (privk a))+ (uniq-orig n1)+ (facts (rel n1 n1))+ (comment "Initiator point-of-view"))++(defskeleton ns+ (vars (a b name) (n1 text))+ (defstrand init 3 (a a) (b b) (n1 n1))+ (non-orig (privk b))+ (uniq-orig n1)+ (comment "Initiator point-of-view"))++(defskeleton ns+ (vars (a b name) (n1 text))+ (defstrand init 3 (a a) (b b) (n1 n1))+ (deflistener n1)+ (non-orig (privk b) (privk a))+ (uniq-orig n1)+ (comment "Initiator point-of-view"))++;;; Double initiator point-of-view+(defskeleton ns+ (vars (a b name) (n1 n1-0 text))+ (defstrand init 3 (a a) (b b) (n1 n1))+ (defstrand init 3 (a a) (b b) (n1 n1-0))+ (non-orig (privk b) (privk a))+ (uniq-orig n1 n1-0)+ (comment "Double initiator point-of-view"))++;;; Double initiator point-of-view, same nonce+(defskeleton ns+ (vars (a b name) (n1 text))+ (defstrand init 3 (a a) (b b) (n1 n1))+ (defstrand init 3 (a a) (b b) (n1 n1))+ (non-orig (privk b) (privk a))+ (uniq-orig n1)+ (comment "Double initiator point-of-view, same nonce"))++;;; The responder point-of-view+(defskeleton ns+ (vars (a name) (n2 text))+ (defstrand resp 3 (a a) (n2 n2))+ (non-orig (privk a))+ (uniq-orig n2)+ (comment "Responder point-of-view"))++
+ tst/ns-unrebinding.tst view
@@ -0,0 +1,694 @@+(herald "ALternate Needham-Schroeder Public-Key Protocol Variants")++(comment "CPSA 4.4.7")+(comment "All input read from tst/ns-unrebinding.scm")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (comment "Initiator point-of-view")+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (label 0)+ (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2))))+ (origs (n1 (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (comment "Initiator point-of-view")+ (operation nonce-test (added-strand resp 2) n1 (0 1)+ (enc n1 a (pubk b)))+ (strand-map 0)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 b (pubk a)))))+ (label 1)+ (parent 0)+ (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (comment "Initiator point-of-view")+ (operation nonce-test (contracted (n2-0 n2)) n1 (0 1)+ (enc n1 a (pubk b)) (enc n1 n2 b (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))))+ (label 2)+ (parent 1)+ (realized)+ (shape)+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2))))+ (origs (n1 (0 0))))++(comment "Nothing left to do")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (facts (rel n1 n1))+ (comment "Initiator point-of-view")+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (label 3)+ (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2))))+ (origs (n1 (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (facts (rel n1 n1))+ (comment "Initiator point-of-view")+ (operation nonce-test (added-strand resp 2) n1 (0 1)+ (enc n1 a (pubk b)))+ (strand-map 0)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 b (pubk a)))))+ (label 4)+ (parent 3)+ (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (facts (rel n1 n1))+ (comment "Initiator point-of-view")+ (operation nonce-test (contracted (n2-0 n2)) n1 (0 1)+ (enc n1 a (pubk b)) (enc n1 n2 b (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))))+ (label 5)+ (parent 4)+ (realized)+ (shape)+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2))))+ (origs (n1 (0 0))))++(comment "Nothing left to do")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (non-orig (privk b))+ (uniq-orig n1)+ (comment "Initiator point-of-view")+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (label 6)+ (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2))))+ (origs (n1 (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk b))+ (uniq-orig n1)+ (comment "Initiator point-of-view")+ (operation nonce-test (added-strand resp 2) n1 (0 1)+ (enc n1 a (pubk b)))+ (strand-map 0)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 b (pubk a)))))+ (label 7)+ (parent 6)+ (realized)+ (shape)+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2))))+ (origs (n1 (0 0))))++(comment "Nothing left to do")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (deflistener n1)+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (comment "Initiator point-of-view")+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))) ((recv n1) (send n1)))+ (label 8)+ (unrealized (0 1) (1 0))+ (preskeleton)+ (maps ((0 1) ((a a) (b b) (n1 n1) (n2 n2))))+ (origs (n1 (0 0)))+ (comment "Not a skeleton"))++(defskeleton ns+ (vars (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (deflistener n1)+ (precedes ((0 0) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (comment "Initiator point-of-view")+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))) ((recv n1) (send n1)))+ (label 9)+ (parent 8)+ (unrealized (0 1) (1 0))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n2 n2))))+ (origs (n1 (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (deflistener n1)+ (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (precedes ((0 0) (2 0)) ((2 1) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (comment "Initiator point-of-view")+ (operation nonce-test (added-strand resp 2) n1 (1 0)+ (enc n1 a (pubk b)))+ (strand-map 0 1)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))) ((recv n1) (send n1))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 b (pubk a)))))+ (label 10)+ (parent 9)+ (unrealized (0 1) (1 0))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n2 n2))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n2 text) (a b name))+ (defstrand init 3 (n1 n2) (n2 n2) (a a) (b b))+ (deflistener n2)+ (defstrand resp 2 (n2 n2) (n1 n2) (b b) (a a))+ (precedes ((0 0) (2 0)) ((0 2) (1 0)) ((2 1) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-orig n2)+ (comment "Initiator point-of-view")+ (operation nonce-test (displaced 3 0 init 3) n2-0 (1 0)+ (enc n2-0 a (pubk b)) (enc n2-0 n2-0 b (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (enc n2 a (pubk b))) (recv (enc n2 n2 b (pubk a)))+ (send (enc n2 (pubk b)))) ((recv n2) (send n2))+ ((recv (enc n2 a (pubk b))) (send (enc n2 n2 b (pubk a)))))+ (label 11)+ (parent 10)+ (unrealized (0 1) (1 0))+ (maps ((0 1) ((a a) (b b) (n1 n2) (n2 n2))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n2) (n2 n2) (a a) (b b))+ (deflistener n2)+ (defstrand resp 2 (n2 n2) (n1 n2) (b b) (a a))+ (defstrand resp 2 (n2 n2-0) (n1 n2) (b b) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 2) (1 0)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-orig n2)+ (comment "Initiator point-of-view")+ (operation nonce-test (added-strand resp 2) n2 (1 0) (enc n2 (pubk b))+ (enc n2 a (pubk b)) (enc n2 n2 b (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (enc n2 a (pubk b))) (recv (enc n2 n2 b (pubk a)))+ (send (enc n2 (pubk b)))) ((recv n2) (send n2))+ ((recv (enc n2 a (pubk b))) (send (enc n2 n2 b (pubk a))))+ ((recv (enc n2 a (pubk b))) (send (enc n2 n2-0 b (pubk a)))))+ (label 12)+ (parent 11)+ (unrealized (0 1) (1 0))+ (dead)+ (maps ((0 1) ((a a) (b b) (n1 n2) (n2 n2))))+ (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (n1 n1-0 n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand init 3 (n1 n1-0) (n2 n2-0) (a a) (b b))+ (non-orig (privk a) (privk b))+ (uniq-orig n1 n1-0)+ (comment "Double initiator point-of-view")+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((send (enc n1-0 a (pubk b))) (recv (enc n1-0 n2-0 b (pubk a)))+ (send (enc n2-0 (pubk b)))))+ (label 13)+ (unrealized (0 1) (1 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0))))+ (origs (n1 (0 0)) (n1-0 (1 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (comment "Double initiator point-of-view")+ (operation collapsed 1 0)+ (strand-map 0 0)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (label 14)+ (parent 13)+ (unrealized (0 1))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n1-0 n1) (n2 n2) (n2-0 n2))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n1-0 n2 n2-0 n2-1 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand init 3 (n1 n1-0) (n2 n2-0) (a a) (b b))+ (defstrand resp 2 (n2 n2-1) (n1 n1-0) (b b) (a a))+ (precedes ((1 0) (2 0)) ((2 1) (1 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1 n1-0)+ (comment "Double initiator point-of-view")+ (operation nonce-test (added-strand resp 2) n1-0 (1 1)+ (enc n1-0 a (pubk b)))+ (strand-map 0 1)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((send (enc n1-0 a (pubk b))) (recv (enc n1-0 n2-0 b (pubk a)))+ (send (enc n2-0 (pubk b))))+ ((recv (enc n1-0 a (pubk b))) (send (enc n1-0 n2-1 b (pubk a)))))+ (label 15)+ (parent 13)+ (unrealized (0 1) (1 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (comment "Double initiator point-of-view")+ (operation nonce-test (added-strand resp 2) n1 (0 1)+ (enc n1 a (pubk b)))+ (strand-map 0)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 b (pubk a)))))+ (label 16)+ (parent 14)+ (unrealized (0 1))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n1-0 n1) (n2 n2) (n2-0 n2))))+ (origs (n1 (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n1-0 n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand init 3 (n1 n1-0) (n2 n2-0) (a a) (b b))+ (defstrand resp 2 (n2 n2-0) (n1 n1-0) (b b) (a a))+ (precedes ((1 0) (2 0)) ((2 1) (1 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1 n1-0)+ (comment "Double initiator point-of-view")+ (operation nonce-test (contracted (n2-1 n2-0)) n1-0 (1 1)+ (enc n1-0 a (pubk b)) (enc n1-0 n2-0 b (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((send (enc n1-0 a (pubk b))) (recv (enc n1-0 n2-0 b (pubk a)))+ (send (enc n2-0 (pubk b))))+ ((recv (enc n1-0 a (pubk b))) (send (enc n1-0 n2-0 b (pubk a)))))+ (label 17)+ (parent 15)+ (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (comment "Double initiator point-of-view")+ (operation nonce-test (contracted (n2-0 n2)) n1 (0 1)+ (enc n1 a (pubk b)) (enc n1 n2 b (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))))+ (label 18)+ (parent 16)+ (realized)+ (shape)+ (maps ((0 0) ((a a) (b b) (n1 n1) (n1-0 n1) (n2 n2) (n2-0 n2))))+ (origs (n1 (0 0))))++(defskeleton ns+ (vars (n1 n1-0 n2 n2-0 n2-1 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand init 3 (n1 n1-0) (n2 n2-0) (a a) (b b))+ (defstrand resp 2 (n2 n2-0) (n1 n1-0) (b b) (a a))+ (defstrand resp 2 (n2 n2-1) (n1 n1) (b b) (a a))+ (precedes ((0 0) (3 0)) ((1 0) (2 0)) ((2 1) (1 1)) ((3 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1 n1-0)+ (comment "Double initiator point-of-view")+ (operation nonce-test (added-strand resp 2) n1 (0 1)+ (enc n1 a (pubk b)))+ (strand-map 0 1 2)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((send (enc n1-0 a (pubk b))) (recv (enc n1-0 n2-0 b (pubk a)))+ (send (enc n2-0 (pubk b))))+ ((recv (enc n1-0 a (pubk b))) (send (enc n1-0 n2-0 b (pubk a))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2-1 b (pubk a)))))+ (label 19)+ (parent 17)+ (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n1-0 n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))+ (defstrand init 3 (n1 n1-0) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2) (n1 n1-0) (b b) (a a))+ (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (precedes ((0 0) (3 0)) ((1 0) (2 0)) ((2 1) (1 1)) ((3 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1 n1-0)+ (comment "Double initiator point-of-view")+ (operation nonce-test (contracted (n2-1 n2-0)) n1 (0 1)+ (enc n1 a (pubk b)) (enc n1 n2-0 b (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2-0 b (pubk a)))+ (send (enc n2-0 (pubk b))))+ ((send (enc n1-0 a (pubk b))) (recv (enc n1-0 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1-0 a (pubk b))) (send (enc n1-0 n2 b (pubk a))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 b (pubk a)))))+ (label 20)+ (parent 19)+ (realized)+ (shape)+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2-0) (n2-0 n2))))+ (origs (n1 (0 0)) (n1-0 (1 0))))++(comment "Nothing left to do")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (n1 n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (comment "Double initiator point-of-view, same nonce")+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2-0 b (pubk a)))+ (send (enc n2-0 (pubk b)))))+ (label 21)+ (realized)+ (preskeleton)+ (maps ((0 1) ((a a) (b b) (n1 n1) (n2 n2) (n2-0 n2-0))))+ (origs (n1 (1 0)) (n1 (0 0)))+ (comment "Not a skeleton"))++(defskeleton ns+ (vars (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (comment "Double initiator point-of-view, same nonce")+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (label 22)+ (parent 21)+ (unrealized (0 1))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n2 n2) (n2-0 n2))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 n2-0 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (comment "Double initiator point-of-view, same nonce")+ (operation nonce-test (added-strand resp 2) n1 (0 1)+ (enc n1 a (pubk b)))+ (strand-map 0)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 b (pubk a)))))+ (label 23)+ (parent 22)+ (unrealized (0 1))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n2 n2) (n2-0 n2))))+ (origs (n1 (0 0)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n1 n2 text) (a b name))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (defstrand resp 2 (n2 n2) (n1 n1) (b b) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-orig n1)+ (comment "Double initiator point-of-view, same nonce")+ (operation nonce-test (contracted (n2-0 n2)) n1 (0 1)+ (enc n1 a (pubk b)) (enc n1 n2 b (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b))))+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))))+ (label 24)+ (parent 23)+ (realized)+ (shape)+ (maps ((0 0) ((a a) (b b) (n1 n1) (n2 n2) (n2-0 n2))))+ (origs (n1 (0 0))))++(comment "Nothing left to do")++(defprotocol ns basic+ (defrole init+ (vars (a b name) (n1 n2 text))+ (trace (send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (defrole resp+ (vars (b a name) (n2 n1 text))+ (trace (recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))+ (recv (enc n2 (pubk b)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false))))+ (comment "Needham-Schroeder with no role origination assumptions"))++(defskeleton ns+ (vars (n2 n1 text) (a b name))+ (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))+ (non-orig (privk a))+ (uniq-orig n2)+ (comment "Responder point-of-view")+ (traces+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))+ (recv (enc n2 (pubk b)))))+ (label 25)+ (unrealized (0 2))+ (maps ((0) ((a a) (n2 n2) (b b) (n1 n1))))+ (origs (n2 (0 1)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns+ (vars (n2 n1 text) (a b name))+ (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))+ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+ (precedes ((0 1) (1 1)) ((1 2) (0 2)))+ (non-orig (privk a))+ (uniq-orig n2)+ (comment "Responder point-of-view")+ (operation nonce-test (added-strand init 3) n2 (0 2)+ (enc n1 n2 b (pubk a)))+ (strand-map 0)+ (traces+ ((recv (enc n1 a (pubk b))) (send (enc n1 n2 b (pubk a)))+ (recv (enc n2 (pubk b))))+ ((send (enc n1 a (pubk b))) (recv (enc n1 n2 b (pubk a)))+ (send (enc n2 (pubk b)))))+ (label 26)+ (parent 25)+ (realized)+ (shape)+ (maps ((0) ((a a) (n2 n2) (b b) (n1 n1))))+ (origs (n2 (0 1))))++(comment "Nothing left to do")
tst/ns.tst view
@@ -1,6 +1,6 @@ (herald "Needham-Schroeder Public-Key Protocol Variants") -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/ns.scm") (defprotocol ns basic@@ -31,6 +31,7 @@ (send (enc n2 (pubk b))))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -41,6 +42,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1)+ (comment "Initiator point-of-view") (operation nonce-test (added-strand resp 2) n1 (0 1) (enc n1 a (pubk b))) (strand-map 0)@@ -51,6 +53,7 @@ (label 1) (parent 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -60,6 +63,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1)+ (comment "Initiator point-of-view") (operation nonce-test (contracted (n2-0 n2)) n1 (0 1) (enc n1 n2 (pubk a)) (enc n1 a (pubk b))) (strand-map 0 1)@@ -107,6 +111,7 @@ (send (enc n2-0 (pubk b))))) (label 3) (unrealized (0 1) (1 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0)))) (origs (n1 (0 0)) (n1-0 (1 0))) (comment "1 in cohort - 1 not yet seen")) @@ -115,6 +120,7 @@ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b)) (non-orig (privk a) (privk b)) (uniq-orig n1)+ (comment "Double initiator point-of-view") (operation collapsed 1 0) (strand-map 0 0) (traces@@ -123,6 +129,7 @@ (label 4) (parent 3) (unrealized (0 1))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n1-0 n1) (n2 n2) (n2-0 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -133,6 +140,7 @@ (precedes ((1 0) (2 0)) ((2 1) (1 1))) (non-orig (privk a) (privk b)) (uniq-orig n1 n1-0)+ (comment "Double initiator point-of-view") (operation nonce-test (added-strand resp 2) n1-0 (1 1) (enc n1-0 a (pubk b))) (strand-map 0 1)@@ -145,6 +153,7 @@ (label 5) (parent 3) (unrealized (0 1) (1 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -154,6 +163,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1)+ (comment "Double initiator point-of-view") (operation nonce-test (added-strand resp 2) n1 (0 1) (enc n1 a (pubk b))) (strand-map 0)@@ -164,6 +174,7 @@ (label 6) (parent 4) (unrealized (0 1))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n1-0 n1) (n2 n2) (n2-0 n2)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -175,6 +186,7 @@ (precedes ((1 0) (2 0)) ((2 1) (1 1))) (non-orig (privk a) (privk b)) (uniq-orig n1 n1-0)+ (comment "Double initiator point-of-view") (operation nonce-test (contracted (n2-1 n2-0)) n1-0 (1 1) (enc n1-0 n2-0 (pubk a)) (enc n1-0 a (pubk b))) (strand-map 0 1 2)@@ -187,6 +199,7 @@ (label 7) (parent 5) (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -196,6 +209,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1)+ (comment "Double initiator point-of-view") (operation nonce-test (contracted (n2-0 n2)) n1 (0 1) (enc n1 n2 (pubk a)) (enc n1 a (pubk b))) (strand-map 0 1)@@ -219,6 +233,7 @@ (precedes ((0 0) (3 0)) ((1 0) (2 0)) ((2 1) (1 1)) ((3 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1 n1-0)+ (comment "Double initiator point-of-view") (operation nonce-test (added-strand resp 2) n1 (0 1) (enc n1 a (pubk b))) (strand-map 0 1 2)@@ -232,6 +247,7 @@ (label 9) (parent 7) (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2) (n2-0 n2-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -243,6 +259,7 @@ (precedes ((0 0) (3 0)) ((1 0) (2 0)) ((2 1) (1 1)) ((3 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1 n1-0)+ (comment "Double initiator point-of-view") (operation nonce-test (contracted (n2-1 n2-0)) n1 (0 1) (enc n1 n2-0 (pubk a)) (enc n1 a (pubk b))) (strand-map 0 1 2 3)@@ -294,6 +311,7 @@ (label 11) (realized) (preskeleton)+ (maps ((0 1) ((a a) (b b) (n1 n1) (n2 n2) (n2-0 n2-0)))) (origs (n1 (1 0)) (n1 (0 0))) (comment "Not a skeleton")) @@ -302,13 +320,14 @@ (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b)) (non-orig (privk a) (privk b)) (uniq-orig n1)+ (comment "Double initiator point-of-view, same nonce") (traces ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a))) (send (enc n2 (pubk b))))) (label 12) (parent 11) (unrealized (0 1))- (origs (n1 (0 0)))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n2 n2) (n2-0 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -318,6 +337,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1)+ (comment "Double initiator point-of-view, same nonce") (operation nonce-test (added-strand resp 2) n1 (0 1) (enc n1 a (pubk b))) (strand-map 0)@@ -328,6 +348,8 @@ (label 13) (parent 12) (unrealized (0 1))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n2 n2) (n2-0 n2))))+ (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -337,6 +359,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1)+ (comment "Double initiator point-of-view, same nonce") (operation nonce-test (contracted (n2-0 n2)) n1 (0 1) (enc n1 n2 (pubk a)) (enc n1 a (pubk b))) (strand-map 0 1)@@ -348,7 +371,7 @@ (parent 13) (realized) (shape)- (maps ((0 0) ((a a) (b b) (n1 n1) (n2 n2))))+ (maps ((0 0) ((a a) (b b) (n1 n1) (n2 n2) (n2-0 n2)))) (origs (n1 (0 0)))) (comment "Nothing left to do")@@ -381,6 +404,7 @@ (recv (enc n2 (pubk b))))) (label 15) (unrealized (0 2))+ (maps ((0) ((a a) (n2 n2) (b b) (n1 n1)))) (origs (n2 (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -391,6 +415,7 @@ (precedes ((0 1) (1 1)) ((1 2) (0 2))) (non-orig (privk a)) (uniq-orig n2)+ (comment "Responder point-of-view") (operation nonce-test (added-strand init 3) n2 (0 2) (enc n1 n2 (pubk a))) (strand-map 0)@@ -440,6 +465,7 @@ (send (enc n2 (pubk b))))) (label 17) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -460,6 +486,7 @@ (label 18) (parent 17) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns-role-origs@@ -517,6 +544,7 @@ (recv (enc n2 (pubk b))))) (label 20) (unrealized (0 2))+ (maps ((0) ((b b) (a a) (n2 n2) (n1 n1)))) (origs (n2 (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -538,6 +566,7 @@ (label 21) (parent 20) (unrealized (0 0) (0 2))+ (maps ((0) ((b b) (a a) (n2 n2) (n1 n1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton ns-role-origs@@ -582,6 +611,7 @@ (label 23) (parent 21) (unrealized (0 0) (0 2))+ (maps ((0) ((b b) (a a) (n2 n2) (n1 n1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns-role-origs@@ -607,6 +637,7 @@ (seen-ops (22 (operation generalization deleted (2 0)) (strand-map 0 1))) (realized)+ (maps ((0) ((b b) (a a) (n2 n2) (n1 n1)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")@@ -639,6 +670,7 @@ (send (enc n2 (pubk b))))) (label 25) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2) (n3 n3)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -659,6 +691,7 @@ (label 26) (parent 25) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n3) (n2 n2) (n3 n3)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns2@@ -749,6 +782,7 @@ (label 29) (unrealized (1 0)) (preskeleton)+ (maps ((0 1) ((a a) (b b) (n2 n2) (n1 n1)))) (origs (n2 (0 1))) (comment "Not a skeleton")) @@ -759,11 +793,13 @@ (precedes ((0 1) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n2)+ (comment "Shows typeflaw in typeless NSL") (traces ((recv (enc a n1 (pubk b))) (send (enc n1 n2 b (pubk a)))) ((recv n2) (send n2))) (label 30) (parent 29) (unrealized (1 0))+ (maps ((0 1) ((a a) (b b) (n2 n2) (n1 n1)))) (origs (n2 (0 1))) (comment "2 in cohort - 2 not yet seen")) @@ -775,6 +811,7 @@ (precedes ((0 1) (2 1)) ((2 2) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n2)+ (comment "Shows typeflaw in typeless NSL") (operation nonce-test (added-strand init 3) n2 (1 0) (enc n1 n2 b (pubk a))) (strand-map 0 1)@@ -786,6 +823,7 @@ (parent 30) (unrealized (1 0)) (dead)+ (maps ((0 1) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "empty cohort")) (defskeleton nsl-typeless@@ -796,6 +834,7 @@ (precedes ((0 1) (2 0)) ((2 1) (1 0))) (non-orig (privk a) (privk b)) (uniq-orig n2)+ (comment "Shows typeflaw in typeless NSL") (operation nonce-test (added-strand resp 2) n2 (1 0) (enc a-0 n2 b (pubk a))) (strand-map 0 1)
tst/nsl3.tst view
@@ -1,6 +1,6 @@ (herald "Three Party Needham-Schroeder-Lowe Protocol") -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/nsl3.scm") (defprotocol nsl3 basic@@ -58,6 +58,10 @@ (pubk b))))) (label 0) (unrealized (0 1))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (origs (na1 (0 0)) (na0 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -88,6 +92,10 @@ (label 1) (parent 0) (unrealized (0 1))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nsl3@@ -128,6 +136,10 @@ (label 2) (parent 1) (unrealized (0 1))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton nsl3@@ -226,6 +238,10 @@ (label 4) (parent 2) (unrealized (0 1))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nsl3@@ -280,6 +296,10 @@ (seen-ops (3 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")@@ -339,6 +359,10 @@ (pubk b))) (send (enc nc0 (enc nc1 (pubk c)) (pubk c))))) (label 6) (unrealized (0 2))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (origs (nb1 (0 1)) (nb0 (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -372,6 +396,10 @@ (label 7) (parent 6) (unrealized (0 2))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nsl3@@ -415,6 +443,10 @@ (label 8) (parent 7) (unrealized (0 2))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton nsl3@@ -519,6 +551,10 @@ (label 10) (parent 8) (unrealized (0 2))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nsl3@@ -577,6 +613,10 @@ (seen-ops (9 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")@@ -636,6 +676,10 @@ (recv (enc nc0 (enc nc1 (pubk c)) (pubk c))))) (label 12) (unrealized (0 2))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (origs (nc1 (0 1)) (nc0 (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -670,6 +714,10 @@ (label 13) (parent 12) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nsl3@@ -708,6 +756,10 @@ (label 14) (parent 13) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton nsl3@@ -748,6 +800,10 @@ (label 15) (parent 14) (unrealized (0 2))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nsl3@@ -798,6 +854,10 @@ (label 16) (parent 14) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton nsl3@@ -842,6 +902,10 @@ (label 17) (parent 15) (unrealized (2 2))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nsl3@@ -893,6 +957,10 @@ (label 18) (parent 16) (unrealized (0 2))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nsl3@@ -952,6 +1020,10 @@ (label 19) (parent 16) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton nsl3@@ -1053,6 +1125,10 @@ (label 21) (parent 18) (unrealized (3 2))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nsl3@@ -1113,6 +1189,10 @@ (label 22) (parent 19) (unrealized (0 2))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nsl3@@ -1173,6 +1253,10 @@ (label 23) (parent 19) (unrealized (0 2))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0-0) (nb1 nb1-0)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nsl3@@ -1227,6 +1311,10 @@ (seen-ops (20 (operation generalization deleted (2 0)) (strand-map 0 1 3))) (realized)+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton nsl3@@ -1287,6 +1375,10 @@ (label 25) (parent 22) (unrealized (4 2))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nsl3@@ -1348,6 +1440,10 @@ (label 26) (parent 23) (unrealized (4 2))+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0-0) (nb1 nb1-0)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nsl3@@ -1406,6 +1502,10 @@ (label 27) (parent 25) (realized)+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nsl3@@ -1467,6 +1567,10 @@ (seen-ops (29 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0-0) (nb1 nb1-0)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton nsl3@@ -1517,6 +1621,10 @@ (seen-ops (20 (operation generalization deleted (2 0)) (strand-map 0 1 3))) (realized)+ (maps+ ((0)+ ((a a) (b b) (c c) (na0 na0) (na1 na1) (nb0 nb0) (nb1 nb1)+ (nc0 nc0) (nc1 nc1)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
tst/nslsk.tst view
@@ -1,6 +1,6 @@ (herald "Needham-Schroeder-Lowe Protocol with symmetric encryption") -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/nslsk.scm") (defprotocol nslsk basic@@ -29,6 +29,7 @@ (recv (enc t k)))) (label 0) (unrealized (0 2))+ (maps ((0) ((a a) (k k) (b b) (n n) (t t)))) (origs (k (0 1))) (comment "2 in cohort - 2 not yet seen")) @@ -49,6 +50,7 @@ (label 1) (parent 0) (unrealized (1 1))+ (maps ((0) ((a a) (k k) (b b) (n n) (t t)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nslsk@@ -67,6 +69,7 @@ (parent 0) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (k k) (b b) (n n) (t t)))) (comment "empty cohort")) (defskeleton nslsk@@ -119,6 +122,7 @@ (send (enc t k)))) (label 4) (unrealized (0 1))+ (maps ((0) ((b b) (n n) (a a) (k k) (t t)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -171,6 +175,7 @@ (recv (enc "t" k)))) (label 6) (unrealized (0 2))+ (maps ((0) ((a a) (k k) (b b) (n n)))) (origs (k (0 1))) (comment "2 in cohort - 2 not yet seen")) @@ -191,6 +196,7 @@ (label 7) (parent 6) (unrealized (1 1))+ (maps ((0) ((a a) (k k) (b b) (n n)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton nslsk-tag-term@@ -209,6 +215,7 @@ (parent 6) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (k k) (b b) (n n)))) (comment "empty cohort")) (defskeleton nslsk-tag-term@@ -261,6 +268,7 @@ (send (enc "t" k)))) (label 10) (unrealized (0 1))+ (maps ((0) ((b b) (n n) (a a) (k k)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen"))
tst/open-closed-multiloc.tst view
@@ -1,6 +1,6 @@ (herald open-closed (bound 44)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/open-closed-multiloc.scm") (comment "Strand count bounded at 44") @@ -41,21 +41,21 @@ (defrule gen-state-close (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)- (p "dev-close" "o" z o) (p "dev-close" "k" z k)- (p "dev-close" "any" z (cat o o)))+ (and (p "dev-close" z (idx 1)) (p "dev-close" "any" z (cat o o))+ (p "dev-close" "k" z k) (p "dev-close" "o" z o)+ (p "dev-close" "d" z d)) (gen-st (cat "st" d o o))))) (defrule gen-state-pass (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)- (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o))))) (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z1 z2)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -83,9 +83,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -158,6 +157,7 @@ (label 0) (unrealized (0 1) (1 0)) (preskeleton)+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (origs (k (0 0))) (comment "Not a skeleton")) @@ -173,6 +173,7 @@ (label 1) (parent 0) (unrealized (0 1) (1 0))+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (origs (k (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -201,6 +202,7 @@ (parent 1) (unrealized (0 1) (1 0)) (dead)+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -242,21 +244,21 @@ (defrule gen-state-close (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)- (p "dev-close" "o" z o) (p "dev-close" "k" z k)- (p "dev-close" "any" z (cat o o)))+ (and (p "dev-close" z (idx 1)) (p "dev-close" "any" z (cat o o))+ (p "dev-close" "k" z k) (p "dev-close" "o" z o)+ (p "dev-close" "d" z d)) (gen-st (cat "st" d o o))))) (defrule gen-state-pass (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)- (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o))))) (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z1 z2)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -284,9 +286,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -357,6 +358,7 @@ (load ls (cat pt-0 "st" d o o)) (send (enc "you may pass" n k)))) (label 3) (realized)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (origs (n (0 3))) (comment "Not closed under rules")) @@ -372,6 +374,7 @@ (label 4) (parent 3) (unrealized (0 2))+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (origs (n (0 3))) (comment "1 in cohort - 1 not yet seen")) @@ -441,21 +444,21 @@ (defrule gen-state-close (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)- (p "dev-close" "o" z o) (p "dev-close" "k" z k)- (p "dev-close" "any" z (cat o o)))+ (and (p "dev-close" z (idx 1)) (p "dev-close" "any" z (cat o o))+ (p "dev-close" "k" z k) (p "dev-close" "o" z o)+ (p "dev-close" "d" z d)) (gen-st (cat "st" d o o))))) (defrule gen-state-pass (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)- (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o))))) (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z1 z2)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -483,9 +486,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -561,6 +563,10 @@ (label 6) (unrealized (0 1) (1 0) (1 1)) (preskeleton)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "Not a skeleton")) @@ -579,6 +585,10 @@ (label 7) (parent 6) (unrealized (0 1) (1 0) (1 1))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "Not closed under rules")) @@ -599,6 +609,10 @@ (label 8) (parent 7) (unrealized (0 1) (1 0) (1 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -630,6 +644,10 @@ (label 9) (parent 8) (unrealized (0 1) (1 0) (1 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton open-closed@@ -659,6 +677,10 @@ (label 10) (parent 9) (unrealized (0 1) (1 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton open-closed@@ -687,6 +709,10 @@ (label 11) (parent 10) (unrealized (0 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton open-closed@@ -715,6 +741,10 @@ (label 12) (parent 10) (unrealized (0 1) (1 2) (3 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton open-closed@@ -750,6 +780,10 @@ (label 13) (parent 11) (unrealized (0 1))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton open-closed@@ -757,31 +791,34 @@ (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk ls-0 locn)) (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch)) (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))- (deflistener k) (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o) (start-ch start-ch) (lk lk) (ls ls-0))- (precedes ((0 0) (3 0)) ((2 1) (1 1)) ((3 4) (1 0)) ((3 4) (2 0)))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((2 4) (1 0)) ((2 4) (3 0)) ((3 1) (1 1))) (uniq-orig k n) (gen-st (cat "st" d o o)) (conf start-ch) (auth start-ch)- (leads-to ((3 4) (1 0)))+ (leads-to ((2 4) (1 0))) (rule power-deliver-once trRl_dev-up-at-1 trRl_dev-up-at-2 trRl_dev-up-at-3 trRl_dev-up-at-4) (operation nonce-test (added-strand dev-up 5) k (3 0) (ch-msg start-ch (cat "power-up" d o k)))- (strand-map 0 1 3 2)+ (strand-map 0 1 2 3) (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k))) ((load lk (cat pt-3 "st-k" d o k)) (recv (enc "may I pass" k)) (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))- ((recv k) (send k)) ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old)) (load ls-0 (cat pt-1 old1)) (stor ls-0 (cat pt-2 "st" d o))- (stor lk (cat pt-3 "st-k" d o k))))+ (stor lk (cat pt-3 "st-k" d o k))) ((recv k) (send k))) (label 14) (parent 12)- (unrealized (0 1) (1 2) (2 0))+ (unrealized (0 1) (1 2) (3 0)) (dead)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "empty cohort")) (defskeleton open-closed@@ -858,46 +895,53 @@ (label 16) (parent 13) (unrealized (5 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton open-closed- (vars (any old old1 mesg) (k k-0 skey) (n n-0 text) (d o name)+ (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)- (ls lk lk-0 ls-0 locn))+ (ls lk ls-0 lk-0 locn)) (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))- (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk-0) (ls ls))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)+ (start-ch start-ch) (lk lk) (ls ls-0)) (defstrand user-pass 1 (k k))- (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk)+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0) (ls ls)) (deflistener k)- (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)- (start-ch start-ch) (lk lk-0) (ls ls-0))- (precedes ((0 0) (5 0)) ((2 0) (1 1)) ((3 3) (1 2)) ((4 1) (0 1))- ((5 4) (1 0)) ((5 4) (4 0)))+ (precedes ((0 0) (2 0)) ((2 4) (1 0)) ((2 4) (5 0)) ((3 0) (1 1))+ ((4 3) (1 2)) ((5 1) (0 1))) (uniq-orig k n) (gen-st (cat "st" d o o)) (conf start-ch) (auth start-ch)- (leads-to ((3 3) (1 2)) ((5 4) (1 0)))+ (leads-to ((2 4) (1 0)) ((4 3) (1 2))) (rule power-deliver-once trRl_dev-up-at-1 trRl_dev-up-at-2 trRl_dev-up-at-3 trRl_dev-up-at-4) (operation nonce-test (added-strand dev-up 5) k (5 0) (ch-msg start-ch (cat "power-up" d o k)))- (strand-map 0 1 3 4 5 2)+ (strand-map 0 1 2 3 4 5) (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))- ((load lk-0 (cat pt-5 "st-k" d o k)) (recv (enc "may I pass" k))+ ((load lk (cat pt-3 "st-k" d o k)) (recv (enc "may I pass" k)) (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))- ((send (enc "may I pass" k)))- ((load lk (cat pt-0 "st-k" d o k-0)) (recv (enc "open" d o n-0 k-0))- (load ls (cat pt-1 "st" d any)) (stor ls (cat pt "st" d o o)))- ((recv k) (send k))- ((recv start-ch (cat "power-up" d o k)) (load lk-0 (cat pt-2 old))- (load ls-0 (cat pt-3 old1)) (stor ls-0 (cat pt-4 "st" d o))- (stor lk-0 (cat pt-5 "st-k" d o k))))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (load ls-0 (cat pt-1 old1)) (stor ls-0 (cat pt-2 "st" d o))+ (stor lk (cat pt-3 "st-k" d o k))) ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-4 "st-k" d o k-0))+ (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-5 "st" d any))+ (stor ls (cat pt "st" d o o))) ((recv k) (send k))) (label 17) (parent 16)- (unrealized (4 0))+ (unrealized (5 0)) (dead)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/open-closed-tag.tst view
@@ -1,6 +1,6 @@ (herald open-closed (bound 44)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/open-closed-tag.scm") (comment "Strand count bounded at 44") @@ -43,21 +43,21 @@ (defrule gen-state-close (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)- (p "dev-close" "o" z o) (p "dev-close" "k" z k)- (p "dev-close" "any" z "opened"))+ (and (p "dev-close" z (idx 1)) (p "dev-close" "any" z "opened")+ (p "dev-close" "k" z k) (p "dev-close" "o" z o)+ (p "dev-close" "d" z d)) (gen-st (cat "st" d "opened"))))) (defrule gen-state-pass (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)- (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d)) (gen-st (cat "st" d "opened"))))) (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z1 z2)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -85,9 +85,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -151,6 +150,7 @@ (label 0) (unrealized (0 1) (1 0)) (preskeleton)+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (origs (k (0 0))) (comment "Not a skeleton")) @@ -166,6 +166,7 @@ (label 1) (parent 0) (unrealized (0 1) (1 0))+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (origs (k (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -192,6 +193,7 @@ (parent 1) (unrealized (0 1) (1 0)) (dead)+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -235,21 +237,21 @@ (defrule gen-state-close (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)- (p "dev-close" "o" z o) (p "dev-close" "k" z k)- (p "dev-close" "any" z "opened"))+ (and (p "dev-close" z (idx 1)) (p "dev-close" "any" z "opened")+ (p "dev-close" "k" z k) (p "dev-close" "o" z o)+ (p "dev-close" "d" z d)) (gen-st (cat "st" d "opened"))))) (defrule gen-state-pass (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)- (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d)) (gen-st (cat "st" d "opened"))))) (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z1 z2)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -277,9 +279,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -342,6 +343,7 @@ (send (enc "you may pass" n k)))) (label 3) (realized)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (origs (n (0 3))) (comment "Not closed under rules")) @@ -358,6 +360,7 @@ (label 4) (parent 3) (unrealized (0 2))+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (origs (n (0 3))) (comment "1 in cohort - 1 not yet seen")) @@ -430,21 +433,21 @@ (defrule gen-state-close (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)- (p "dev-close" "o" z o) (p "dev-close" "k" z k)- (p "dev-close" "any" z "opened"))+ (and (p "dev-close" z (idx 1)) (p "dev-close" "any" z "opened")+ (p "dev-close" "k" z k) (p "dev-close" "o" z o)+ (p "dev-close" "d" z d)) (gen-st (cat "st" d "opened"))))) (defrule gen-state-pass (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)- (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d)) (gen-st (cat "st" d "opened"))))) (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z1 z2)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -472,9 +475,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -541,6 +543,10 @@ (label 6) (unrealized (0 1) (1 0) (1 1)) (preskeleton)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "Not a skeleton")) @@ -559,6 +565,10 @@ (label 7) (parent 6) (unrealized (0 1) (1 0) (1 1))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "Not closed under rules")) @@ -579,6 +589,10 @@ (label 8) (parent 7) (unrealized (0 1) (1 0) (1 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -607,6 +621,10 @@ (label 9) (parent 8) (unrealized (0 1) (1 0) (1 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton open-closed@@ -636,6 +654,10 @@ (label 10) (parent 9) (unrealized (0 1) (1 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton open-closed@@ -664,6 +686,10 @@ (label 11) (parent 10) (unrealized (0 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton open-closed@@ -692,6 +718,10 @@ (label 12) (parent 10) (unrealized (0 1) (1 2) (3 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton open-closed@@ -726,6 +756,10 @@ (label 13) (parent 11) (unrealized (0 1))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton open-closed@@ -733,29 +767,33 @@ (start-ch chan) (ls lk locn)) (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch)) (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))- (deflistener k) (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch) (lk lk))- (precedes ((0 0) (3 0)) ((2 1) (1 1)) ((3 2) (1 0)) ((3 2) (2 0)))+ (deflistener k)+ (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((2 2) (3 0)) ((3 1) (1 1))) (uniq-orig k n) (gen-st (cat "st" d "opened")) (conf start-ch) (auth start-ch)- (leads-to ((3 2) (1 0)))+ (leads-to ((2 2) (1 0))) (rule power-deliver-once trRl_dev-up-at-1 trRl_dev-up-at-2) (operation nonce-test (added-strand dev-up 3) k (3 0) (ch-msg start-ch (cat "power-up" d o k)))- (strand-map 0 1 3 2)+ (strand-map 0 1 2 3) (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k))) ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k)) (load ls (cat pt "st" d "opened"))- (send (enc "you may pass" n k))) ((recv k) (send k))+ (send (enc "you may pass" n k))) ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))- (stor lk (cat pt-1 "st-k" d o k))))+ (stor lk (cat pt-1 "st-k" d o k))) ((recv k) (send k))) (label 14) (parent 12)- (unrealized (0 1) (1 2) (2 0))+ (unrealized (0 1) (1 2) (3 0)) (dead)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "empty cohort")) (defskeleton open-closed@@ -832,43 +870,51 @@ (label 16) (parent 13) (unrealized (5 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton open-closed- (vars (any old mesg) (k k-0 skey) (n n-0 text) (d o o-0 name)+ (vars (old any mesg) (k k-0 skey) (n n-0 text) (d o o-0 name) (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk lk-0 locn)) (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))- (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk-0) (ls ls))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk)) (defstrand user-pass 1 (k k))- (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o-0) (lk lk)- (ls ls))+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o-0)+ (lk lk-0) (ls ls)) (deflistener k)- (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)- (lk lk-0))- (precedes ((0 0) (5 0)) ((2 0) (1 1)) ((3 3) (1 2)) ((4 1) (0 1))- ((5 2) (1 0)) ((5 2) (4 0)))+ (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((2 2) (5 0)) ((3 0) (1 1))+ ((4 3) (1 2)) ((5 1) (0 1))) (uniq-orig k n) (gen-st (cat "st" d "opened")) (conf start-ch) (auth start-ch)- (leads-to ((3 3) (1 2)) ((5 2) (1 0)))+ (leads-to ((2 2) (1 0)) ((4 3) (1 2))) (rule power-deliver-once trRl_dev-up-at-1 trRl_dev-up-at-2) (operation nonce-test (added-strand dev-up 3) k (5 0) (ch-msg start-ch (cat "power-up" d o k)))- (strand-map 0 1 3 4 5 2)+ (strand-map 0 1 2 3 4 5) (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))- ((load lk-0 (cat pt-3 "st-k" d o k)) (recv (enc "may I pass" k))+ ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k)) (load ls (cat pt "st" d "opened"))- (send (enc "you may pass" n k))) ((send (enc "may I pass" k)))- ((load lk (cat pt-0 "st-k" d o-0 k-0))- (recv (enc "open" d o-0 n-0 k-0)) (load ls (cat pt-1 "st" d any))- (stor ls (cat pt "st" d "opened"))) ((recv k) (send k))- ((recv start-ch (cat "power-up" d o k)) (load lk-0 (cat pt-2 old))- (stor lk-0 (cat pt-3 "st-k" d o k))))+ (send (enc "you may pass" n k)))+ ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))+ (stor lk (cat pt-1 "st-k" d o k))) ((send (enc "may I pass" k)))+ ((load lk-0 (cat pt-2 "st-k" d o-0 k-0))+ (recv (enc "open" d o-0 n-0 k-0)) (load ls (cat pt-3 "st" d any))+ (stor ls (cat pt "st" d "opened"))) ((recv k) (send k))) (label 17) (parent 16)- (unrealized (4 0))+ (unrealized (5 0)) (dead)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -912,21 +958,21 @@ (defrule gen-state-close (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)- (p "dev-close" "o" z o) (p "dev-close" "k" z k)- (p "dev-close" "any" z "opened"))+ (and (p "dev-close" z (idx 1)) (p "dev-close" "any" z "opened")+ (p "dev-close" "k" z k) (p "dev-close" "o" z o)+ (p "dev-close" "d" z d)) (gen-st (cat "st" d "opened"))))) (defrule gen-state-pass (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)- (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d)) (gen-st (cat "st" d "opened"))))) (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z1 z2)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -954,9 +1000,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -1038,6 +1083,11 @@ (stor ls (cat pt-7 "st" d "opened")))) (label 18) (unrealized (1 0))+ (maps+ ((0 1 2 3 4)+ ((old old) (old1 old1) (any any) (n n) (n-0 n-0) (d d) (o o) (k k)+ (k-0 k-0) (start-ch start-ch) (ls ls) (lk lk) (ls-0 ls-0)+ (lk-0 lk-0)))) (origs (pt-7 (4 3)) (pt-4 (2 4)) (pt-2 (2 2)) (n (1 3)) (k (0 0))) (comment "Not closed under rules")) @@ -1074,6 +1124,11 @@ (label 19) (parent 18) (unrealized (1 0) (1 2))+ (maps+ ((0 1 2 3 4)+ ((old old) (old1 old1) (any any) (n n) (n-0 n-0) (d d) (o o) (k k)+ (k-0 k-0) (start-ch start-ch) (ls ls) (lk lk) (ls-0 ls-0)+ (lk-0 lk-0)))) (origs (pt-7 (4 3)) (pt-4 (2 4)) (pt-2 (2 2)) (n (1 3)) (k (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -1113,6 +1168,11 @@ (label 20) (parent 19) (unrealized (1 2))+ (maps+ ((0 1 2 3 4)+ ((old old) (old1 old1) (any any) (n n) (n-0 n-0) (d d) (o o) (k k)+ (k-0 k-0) (start-ch start-ch) (ls ls) (lk lk) (ls-0 ls-0)+ (lk-0 lk-0)))) (origs (pt-6 (4 3)) (pt-3 (2 4)) (pt-1 (2 2)) (n (1 3)) (k (0 0))) (comment "2 in cohort - 2 not yet seen"))
tst/open-closed.tst view
@@ -1,6 +1,6 @@ (herald open-closed (bound 44)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/open-closed.scm") (comment "Strand count bounded at 44") @@ -41,21 +41,21 @@ (defrule gen-state-close (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)- (p "dev-close" "o" z o) (p "dev-close" "k" z k)- (p "dev-close" "any" z (cat o o)))+ (and (p "dev-close" z (idx 1)) (p "dev-close" "any" z (cat o o))+ (p "dev-close" "k" z k) (p "dev-close" "o" z o)+ (p "dev-close" "d" z d)) (gen-st (cat "st" d o o))))) (defrule gen-state-pass (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)- (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o))))) (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z2 z1)))) (defrule same-locn (forall ((z1 z2 strd) (i1 i2 indx))@@ -91,9 +91,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -157,6 +156,7 @@ (label 0) (unrealized (0 1) (1 0)) (preskeleton)+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (origs (k (0 0))) (comment "Not a skeleton")) @@ -172,6 +172,7 @@ (label 1) (parent 0) (unrealized (0 1) (1 0))+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (origs (k (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -200,6 +201,7 @@ (parent 1) (unrealized (0 1) (1 0)) (dead)+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -241,21 +243,21 @@ (defrule gen-state-close (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)- (p "dev-close" "o" z o) (p "dev-close" "k" z k)- (p "dev-close" "any" z (cat o o)))+ (and (p "dev-close" z (idx 1)) (p "dev-close" "any" z (cat o o))+ (p "dev-close" "k" z k) (p "dev-close" "o" z o)+ (p "dev-close" "d" z d)) (gen-st (cat "st" d o o))))) (defrule gen-state-pass (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)- (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o))))) (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z2 z1)))) (defrule same-locn (forall ((z1 z2 strd) (i1 i2 indx))@@ -291,9 +293,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -355,6 +356,7 @@ (load ls (cat pt-0 "st" d o o)) (send (enc "you may pass" n k)))) (label 3) (realized)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (origs (n (0 3))) (comment "Not closed under rules")) @@ -371,6 +373,7 @@ (label 4) (parent 3) (unrealized (0 2))+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (origs (n (0 3))) (comment "1 in cohort - 1 not yet seen")) @@ -446,21 +449,21 @@ (defrule gen-state-close (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-close" z (idx 1)) (p "dev-close" "d" z d)- (p "dev-close" "o" z o) (p "dev-close" "k" z k)- (p "dev-close" "any" z (cat o o)))+ (and (p "dev-close" z (idx 1)) (p "dev-close" "any" z (cat o o))+ (p "dev-close" "k" z k) (p "dev-close" "o" z o)+ (p "dev-close" "d" z d)) (gen-st (cat "st" d o o))))) (defrule gen-state-pass (forall ((z strd) (d o name) (k skey)) (implies- (and (p "dev-pass" z (idx 1)) (p "dev-pass" "d" z d)- (p "dev-pass" "o" z o) (p "dev-pass" "k" z k))+ (and (p "dev-pass" z (idx 1)) (p "dev-pass" "k" z k)+ (p "dev-pass" "o" z o) (p "dev-pass" "d" z d)) (gen-st (cat "st" d o o))))) (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z2 z1)))) (defrule same-locn (forall ((z1 z2 strd) (i1 i2 indx))@@ -496,9 +499,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -565,6 +567,10 @@ (label 6) (unrealized (0 1) (1 0) (1 1)) (preskeleton)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "Not a skeleton")) @@ -583,6 +589,10 @@ (label 7) (parent 6) (unrealized (0 1) (1 0) (1 1))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "Not closed under rules")) @@ -604,6 +614,10 @@ (label 8) (parent 7) (unrealized (0 1) (1 0) (1 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -635,6 +649,10 @@ (label 9) (parent 8) (unrealized (0 1) (1 0) (1 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton open-closed@@ -670,6 +688,10 @@ (label 10) (parent 9) (unrealized (0 1) (1 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton open-closed@@ -703,6 +725,10 @@ (label 11) (parent 10) (unrealized (0 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton open-closed@@ -736,6 +762,10 @@ (label 12) (parent 10) (unrealized (0 1) (1 2) (3 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton open-closed@@ -780,6 +810,10 @@ (label 13) (parent 11) (unrealized (0 1))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton open-closed@@ -787,34 +821,39 @@ (start-ch chan) (ls lk locn)) (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch)) (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))+ (deflistener k) (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch) (lk lk))- (deflistener k)- (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((2 2) (3 0)) ((3 1) (1 1)))+ (precedes ((0 0) (3 0)) ((2 1) (1 1)) ((3 2) (1 0)) ((3 2) (2 0))) (uniq-orig k n) (gen-st (cat "st" d o o)) (conf start-ch) (auth start-ch)- (facts (ha 2 (idx 1) 2 (idx 1)) (ha 2 (idx 1) 2 (idx 2))- (ha 2 (idx 2) 2 (idx 1)) (ha 2 (idx 2) 2 (idx 2))- (ha 1 (idx 0) 2 (idx 1)) (ha 1 (idx 0) 2 (idx 2))- (ha 2 (idx 1) 1 (idx 0)) (ha 2 (idx 2) 1 (idx 0))- (la 2 (idx 2) 1 (idx 0)) (ha 1 (idx 0) 1 (idx 0))+ (facts (ha 3 (idx 1) 3 (idx 1)) (ha 3 (idx 1) 3 (idx 2))+ (ha 3 (idx 2) 3 (idx 1)) (ha 3 (idx 2) 3 (idx 2))+ (ha 1 (idx 0) 3 (idx 1)) (ha 1 (idx 0) 3 (idx 2))+ (ha 3 (idx 1) 1 (idx 0)) (ha 3 (idx 2) 1 (idx 0))+ (la 3 (idx 2) 1 (idx 0)) (ha 1 (idx 0) 1 (idx 0)) (ha 1 (idx 2) 1 (idx 2)))- (leads-to ((2 2) (1 0)))+ (leads-to ((3 2) (1 0))) (rule power-deliver-once same-locn trRl_dev-up-at-1 trRl_dev-up-at-2) (operation nonce-test (added-strand dev-up 3) k (3 0) (ch-msg start-ch (cat "power-up" d o k)))- (strand-map 0 1 2 3)+ (strand-map 0 1 3 2) (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k))) ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k)) (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))+ ((recv k) (send k)) ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))- (stor lk (cat pt-1 "st-k" d o k))) ((recv k) (send k)))+ (stor lk (cat pt-1 "st-k" d o k)))) (label 14) (parent 12)- (unrealized (0 1) (1 2) (3 0))+ (unrealized (0 1) (1 2) (2 0)) (dead)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "empty cohort")) (defskeleton open-closed@@ -913,53 +952,62 @@ (label 16) (parent 13) (unrealized (5 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton open-closed- (vars (old any mesg) (k k-0 skey) (n n-0 text) (d o name)+ (vars (any old mesg) (k k-0 skey) (n n-0 text) (d o name) (pt pt-0 pt-1 pt-2 pt-3 pval) (start-ch chan) (ls lk lk-0 locn)) (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch))- (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls))- (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)- (lk lk))+ (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk-0) (ls ls)) (defstrand user-pass 1 (k k))- (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk-0)+ (defstrand dev-open 4 (any any) (k k-0) (n n-0) (d d) (o o) (lk lk) (ls ls)) (deflistener k)- (precedes ((0 0) (2 0)) ((2 2) (1 0)) ((2 2) (5 0)) ((3 0) (1 1))- ((4 3) (1 2)) ((5 1) (0 1)))+ (defstrand dev-up 3 (old old) (k k) (d d) (o o) (start-ch start-ch)+ (lk lk-0))+ (precedes ((0 0) (5 0)) ((2 0) (1 1)) ((3 3) (1 2)) ((4 1) (0 1))+ ((5 2) (1 0)) ((5 2) (4 0))) (uniq-orig k n) (gen-st (cat "st" d o o)) (conf start-ch) (auth start-ch)- (facts (ha 2 (idx 1) 2 (idx 1)) (ha 2 (idx 1) 2 (idx 2))- (ha 2 (idx 2) 2 (idx 1)) (ha 2 (idx 2) 2 (idx 2))- (ha 1 (idx 2) 4 (idx 2)) (ha 1 (idx 2) 4 (idx 3))- (ha 4 (idx 0) 4 (idx 0)) (ha 4 (idx 2) 1 (idx 2))- (ha 4 (idx 2) 4 (idx 2)) (ha 4 (idx 2) 4 (idx 3))- (ha 4 (idx 3) 1 (idx 2)) (ha 4 (idx 3) 4 (idx 2))- (ha 4 (idx 3) 4 (idx 3)) (la 4 (idx 3) 1 (idx 2))- (ha 1 (idx 0) 2 (idx 1)) (ha 1 (idx 0) 2 (idx 2))- (ha 2 (idx 1) 1 (idx 0)) (ha 2 (idx 2) 1 (idx 0))- (la 2 (idx 2) 1 (idx 0)) (ha 1 (idx 0) 1 (idx 0))+ (facts (ha 5 (idx 1) 5 (idx 1)) (ha 5 (idx 1) 5 (idx 2))+ (ha 5 (idx 2) 5 (idx 1)) (ha 5 (idx 2) 5 (idx 2))+ (ha 1 (idx 2) 3 (idx 2)) (ha 1 (idx 2) 3 (idx 3))+ (ha 3 (idx 0) 3 (idx 0)) (ha 3 (idx 2) 1 (idx 2))+ (ha 3 (idx 2) 3 (idx 2)) (ha 3 (idx 2) 3 (idx 3))+ (ha 3 (idx 3) 1 (idx 2)) (ha 3 (idx 3) 3 (idx 2))+ (ha 3 (idx 3) 3 (idx 3)) (la 3 (idx 3) 1 (idx 2))+ (ha 1 (idx 0) 5 (idx 1)) (ha 1 (idx 0) 5 (idx 2))+ (ha 5 (idx 1) 1 (idx 0)) (ha 5 (idx 2) 1 (idx 0))+ (la 5 (idx 2) 1 (idx 0)) (ha 1 (idx 0) 1 (idx 0)) (ha 1 (idx 2) 1 (idx 2)))- (leads-to ((2 2) (1 0)) ((4 3) (1 2)))+ (leads-to ((3 3) (1 2)) ((5 2) (1 0))) (rule power-deliver-once same-locn trRl_dev-up-at-1 trRl_dev-up-at-2) (operation nonce-test (added-strand dev-up 3) k (5 0) (ch-msg start-ch (cat "power-up" d o k)))- (strand-map 0 1 2 3 4 5)+ (strand-map 0 1 3 4 5 2) (traces ((send start-ch (cat "power-up" d o k)) (recv (enc "up" k)))- ((load lk (cat pt-1 "st-k" d o k)) (recv (enc "may I pass" k))+ ((load lk-0 (cat pt-3 "st-k" d o k)) (recv (enc "may I pass" k)) (load ls (cat pt "st" d o o)) (send (enc "you may pass" n k)))- ((recv start-ch (cat "power-up" d o k)) (load lk (cat pt-0 old))- (stor lk (cat pt-1 "st-k" d o k))) ((send (enc "may I pass" k)))- ((load lk-0 (cat pt-2 "st-k" d o k-0))- (recv (enc "open" d o n-0 k-0)) (load ls (cat pt-3 "st" d any))- (stor ls (cat pt "st" d o o))) ((recv k) (send k)))+ ((send (enc "may I pass" k)))+ ((load lk (cat pt-0 "st-k" d o k-0)) (recv (enc "open" d o n-0 k-0))+ (load ls (cat pt-1 "st" d any)) (stor ls (cat pt "st" d o o)))+ ((recv k) (send k))+ ((recv start-ch (cat "power-up" d o k)) (load lk-0 (cat pt-2 old))+ (stor lk-0 (cat pt-3 "st-k" d o k)))) (label 17) (parent 16)- (unrealized (5 0))+ (unrealized (4 0)) (dead)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk-0) (ls ls)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/or.tst view
@@ -1,7 +1,7 @@ (herald "Otway-Rees Protocol" (comment "Standard version using variables of sort mesg")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/or.scm") (defprotocol or basic@@ -38,6 +38,7 @@ (recv (cat m y (enc nb k (ltk b s)))) (send y))) (label 0) (unrealized (0 2))+ (maps ((0) ((nb nb) (s s) (a a) (b b) (k k) (m m) (x x) (y y)))) (origs (nb (0 1))) (comment "2 in cohort - 2 not yet seen")) @@ -61,6 +62,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0) ((nb nb) (s s) (a a) (b b) (k k) (m m) (x x) (y y)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton or@@ -83,6 +85,7 @@ (label 2) (parent 0) (unrealized (1 0))+ (maps ((0) ((nb nb) (s s) (a a) (b b) (k k) (m m) (x x) (y y)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton or@@ -104,6 +107,7 @@ (label 3) (parent 1) (unrealized (1 0))+ (maps ((0) ((nb nb) (s s) (a a) (b b) (k k) (m m) (x x) (y y)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton or@@ -130,6 +134,7 @@ (operation encryption-test (displaced 2 0 resp 2) (enc nb-0 m a a (ltk a s)) (1 0)) (strand-map 0 1))) (unrealized (1 0))+ (maps ((0) ((nb nb) (s s) (a a) (b a) (k k) (m m) (x x) (y y)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton or
tst/ordered.tst view
@@ -1,6 +1,6 @@ (herald ordered) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/ordered.scm") (defprotocol ordered basic@@ -10,7 +10,7 @@ (defrule order (forall ((y z strd)) (implies- (and (p "dec" y (idx 2)) (p "dec" z (idx 2)))+ (and (p "dec" z (idx 2)) (p "dec" y (idx 2))) (or (prec y (idx 1) z (idx 0)) (prec z (idx 1) y (idx 0))@@ -30,6 +30,7 @@ (traces ((recv (enc a k)) (send a)) ((recv (enc b k-0)) (send b))) (label 0) (realized)+ (maps ((0 1) ((a a) (b b) (k k) (k-0 k-0)))) (origs) (comment "Not closed under rules")) @@ -37,7 +38,7 @@ (vars (a b text) (k k-0 akey)) (defstrand dec 2 (t a) (k k)) (defstrand dec 2 (t b) (k k-0))- (precedes ((1 1) (0 0)))+ (precedes ((0 1) (1 0))) (facts (neq a b)) (rule order) (traces ((recv (enc a k)) (send a)) ((recv (enc b k-0)) (send b)))@@ -52,7 +53,7 @@ (vars (a b text) (k k-0 akey)) (defstrand dec 2 (t a) (k k)) (defstrand dec 2 (t b) (k k-0))- (precedes ((0 1) (1 0)))+ (precedes ((1 1) (0 0))) (facts (neq a b)) (rule order) (traces ((recv (enc a k)) (send a)) ((recv (enc b k-0)) (send b)))@@ -72,7 +73,7 @@ (defrule order (forall ((y z strd)) (implies- (and (p "dec" y (idx 2)) (p "dec" z (idx 2)))+ (and (p "dec" z (idx 2)) (p "dec" y (idx 2))) (or (prec y (idx 1) z (idx 0)) (prec z (idx 1) y (idx 0))@@ -91,6 +92,7 @@ (traces ((recv (enc b k)) (send b))) (label 3) (realized)+ (maps ((0) ((b b) (k k)))) (origs) (comment "Not closed under rules"))
+ tst/orderedvar.scm view
@@ -0,0 +1,39 @@+(herald ordered)++(defprotocol ordered basic++ (defrole dec+ (vars (t text) (k akey))+ (trace (recv (enc t k)) (send t)))++;; (defrule neq+;; (forall ((x mesg))+;; (implies (fact neq x x) (false))))++ (defrule order+ (forall ((y z strd))+ (implies+ (and (strand dec y 2)+ (strand dec z 2))+ (or (prec y 1 z 0)+ (prec z 1 y 0)+ (= y z))))))++(defskeleton ordered+ (vars (a b text))+ (defstrand dec 2 (t a))+ (defstrand dec 2 (t b))+ (facts (neq a b)))++(defskeleton ordered+ (vars (b text) (k akey))+ (defstrand dec 2 (t b) (k k))+ (facts (neq b b))+ (rule order)+ (traces ((recv (enc b k)) (send b)))+ (label 3)+ (parent 0)+ (unrealized)+ (shape)+ (maps ((0 0) ((a b) (b b) (k k) (k-0 k))))+ (origs))
+ tst/orderedvar.tst view
@@ -0,0 +1,99 @@+(herald ordered)++(comment "CPSA 4.4.7")+(comment "All input read from tst/orderedvar.scm")++(defprotocol ordered basic+ (defrole dec+ (vars (t text) (k akey))+ (trace (recv (enc t k)) (send t)))+ (defrule order+ (forall ((y z strd))+ (implies+ (and (p "dec" z (idx 2)) (p "dec" y (idx 2)))+ (or+ (prec y (idx 1) z (idx 0))+ (prec z (idx 1) y (idx 0))+ (= y z)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false)))))++(defskeleton ordered+ (vars (a b text) (k k-0 akey))+ (defstrand dec 2 (t a) (k k))+ (defstrand dec 2 (t b) (k k-0))+ (facts (neq a b))+ (traces ((recv (enc a k)) (send a)) ((recv (enc b k-0)) (send b)))+ (label 0)+ (realized)+ (maps ((0 1) ((a a) (b b) (k k) (k-0 k-0))))+ (origs)+ (comment "Not closed under rules"))++(defskeleton ordered+ (vars (a b text) (k k-0 akey))+ (defstrand dec 2 (t a) (k k))+ (defstrand dec 2 (t b) (k k-0))+ (precedes ((0 1) (1 0)))+ (facts (neq a b))+ (rule order)+ (traces ((recv (enc a k)) (send a)) ((recv (enc b k-0)) (send b)))+ (label 1)+ (parent 0)+ (realized)+ (shape)+ (maps ((0 1) ((a a) (b b) (k k) (k-0 k-0))))+ (origs))++(defskeleton ordered+ (vars (a b text) (k k-0 akey))+ (defstrand dec 2 (t a) (k k))+ (defstrand dec 2 (t b) (k k-0))+ (precedes ((1 1) (0 0)))+ (facts (neq a b))+ (rule order)+ (traces ((recv (enc a k)) (send a)) ((recv (enc b k-0)) (send b)))+ (label 2)+ (parent 0)+ (realized)+ (shape)+ (maps ((0 1) ((a a) (b b) (k k) (k-0 k-0))))+ (origs))++(comment "Nothing left to do")++(defprotocol ordered basic+ (defrole dec+ (vars (t text) (k akey))+ (trace (recv (enc t k)) (send t)))+ (defrule order+ (forall ((y z strd))+ (implies+ (and (p "dec" z (idx 2)) (p "dec" y (idx 2)))+ (or+ (prec y (idx 1) z (idx 0))+ (prec z (idx 1) y (idx 0))+ (= y z)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false)))))++(defskeleton ordered+ (vars (b text) (k akey))+ (defstrand dec 2 (t b) (k k))+ (facts (neq b b))+ (traces ((recv (enc b k)) (send b)))+ (label 3)+ (realized)+ (maps ((0) ((b b) (k k))))+ (origs)+ (comment "Not closed under rules"))++(comment "Nothing left to do")
tst/pca.tst view
@@ -1,7 +1,7 @@ (herald "Privacy Certificate Authority" (bound 15) (comment "Generation of an Attestation Identity Certificate")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/pca.scm") (comment "Strand count bounded at 15") @@ -36,6 +36,7 @@ (traces ((recv (enc ki a t (invk kp))))) (label 0) (unrealized (0 0))+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -54,6 +55,7 @@ (label 1) (parent 0) (unrealized (0 0) (1 0))+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton pca@@ -75,6 +77,7 @@ (label 2) (parent 1) (unrealized (0 0) (1 0))+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton pca@@ -95,6 +98,7 @@ (label 3) (parent 2) (unrealized (0 0))+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton pca@@ -118,6 +122,7 @@ (label 4) (parent 2) (unrealized (0 0))+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton pca@@ -140,6 +145,7 @@ (label 5) (parent 3) (unrealized (2 1))+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton pca@@ -169,6 +175,7 @@ (operation encryption-test (displaced 4 2 tpm 1) (enc t ke-0 (invk km-0)) (3 0)) (strand-map 0 1 2 1))) (unrealized (0 0) (3 0))+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton pca@@ -194,6 +201,7 @@ (label 7) (parent 4) (unrealized (3 1))+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton pca@@ -226,6 +234,7 @@ (operation encryption-test (displaced 5 3 tpm 1) (enc t ke-1 (invk km-1)) (4 0)) (strand-map 0 1 2 3 1))) (unrealized (0 0) (4 0))+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton pca@@ -277,6 +286,7 @@ (label 10) (parent 5) (unrealized (2 1) (3 0))+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton pca@@ -333,6 +343,7 @@ (label 12) (parent 7) (unrealized (3 1) (4 0))+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton pca@@ -362,6 +373,7 @@ (seen-ops (9 (operation generalization deleted (1 0)) (strand-map 0 2 3))) (realized)+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton pca@@ -391,6 +403,7 @@ (label 14) (parent 10) (unrealized (2 1))+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton pca@@ -423,6 +436,7 @@ (seen-ops (11 (operation generalization deleted (1 0)) (strand-map 0 2 3 4))) (realized)+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton pca@@ -452,6 +466,7 @@ (label 16) (parent 12) (realized)+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton pca@@ -483,6 +498,7 @@ (label 17) (parent 12) (unrealized (3 1))+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton pca@@ -515,6 +531,7 @@ (seen-ops (11 (operation generalization deleted (1 0)) (strand-map 0 2 3 4))) (realized)+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton pca@@ -544,6 +561,7 @@ (label 19) (parent 14) (realized)+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton pca@@ -581,6 +599,7 @@ (operation encryption-test (displaced 6 4 tpm 1) (enc t ke-1 (invk km-1)) (5 0)) (strand-map 0 1 2 3 4 3))) (unrealized (2 1) (5 0))+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton pca@@ -608,6 +627,7 @@ (seen-ops (9 (operation generalization deleted (1 0)) (strand-map 0 2 3))) (realized)+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton pca@@ -639,6 +659,7 @@ (label 22) (parent 17) (realized)+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton pca@@ -670,6 +691,7 @@ (label 23) (parent 17) (realized)+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton pca@@ -712,6 +734,7 @@ (operation encryption-test (displaced 7 5 tpm 1) (enc t ke-1 (invk km-2)) (6 0)) (strand-map 0 1 2 3 4 5 4))) (unrealized (3 1) (6 0))+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton pca@@ -739,6 +762,7 @@ (seen-ops (9 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton pca@@ -769,6 +793,7 @@ (seen-ops (11 (operation generalization deleted (1 0)) (strand-map 0 2 3 4))) (realized)+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton pca@@ -799,6 +824,7 @@ (seen-ops (11 (operation generalization deleted (4 0)) (strand-map 0 1 2 3))) (realized)+ (maps ((0) ((ki ki) (kp kp) (t t) (a a)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
tst/pen-non-orig-test.tst view
@@ -1,6 +1,6 @@ (herald "pen-non-orig test") -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/pen-non-orig-test.scm") (defprotocol pennonorigtest basic@@ -25,6 +25,7 @@ (traces ((recv (cat userid pwd)))) (label 0) (unrealized (0 0))+ (maps ((0) ((pwd pwd) (userid userid)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -69,6 +70,7 @@ (traces ((recv (cat userid pwd))) ((recv pwd) (send pwd))) (label 2) (unrealized (0 0) (1 0))+ (maps ((0 1) ((pwd pwd) (userid userid)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -86,6 +88,7 @@ (label 3) (parent 2) (unrealized (0 0))+ (maps ((0 1) ((pwd pwd) (userid userid)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton pennonorigtest
tst/pfs-via-pubkey.tst view
@@ -1,6 +1,6 @@ (herald pfs-via-pubkey) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/pfs-via-pubkey.scm") (defprotocol pfs-easy basic@@ -31,6 +31,7 @@ (send (privk "sgn" a)))) (label 0) (unrealized (0 1))+ (maps ((0) ((new-akey new-akey) (a a) (b b) (n n) (s s)))) (origs ((privk "sgn" a) (0 2)) (new-akey (0 0)) (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -53,6 +54,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0) ((new-akey new-akey) (a a) (b b) (n n) (s s)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton pfs-easy@@ -106,6 +108,7 @@ (send (enc (enc a n s (privk "sgn" b)) new-akey)))) (label 3) (unrealized (0 0))+ (maps ((0) ((new-akey new-akey) (a a) (b b) (n n) (s s)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -165,6 +168,8 @@ (label 5) (unrealized (2 0)) (preskeleton)+ (maps+ ((0 1 2) ((s s) (n n) (a a) (b b) (new-akey new-akey) (s-0 s-0)))) (origs ((privk "sgn" a) (1 2)) (s (0 1))) (comment "Not a skeleton")) @@ -186,6 +191,8 @@ (parent 5) (unrealized (2 0)) (dead)+ (maps+ ((0 1 2) ((s s) (n n) (a a) (b b) (new-akey new-akey) (s-0 s-0)))) (origs ((privk "sgn" a) (1 2)) (s (0 1))) (comment "empty cohort"))
tst/pkinit.tst view
@@ -1,6 +1,6 @@ (herald "Kerberos PK init") -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/pkinit.scm") (defprotocol pkinit basic@@ -38,6 +38,10 @@ (enc ak n1 tk t k))))) (label 0) (unrealized (0 1))+ (maps+ ((0)+ ((c c) (as as) (t t) (n2 n2) (n1 n1) (tc tc) (tk tk) (tgt tgt)+ (k k) (ak ak)))) (origs (n2 (0 0)) (n1 (0 0))) (comment "1 in cohort - 1 not yet seen"))
tst/preprocess.tst view
@@ -1,6 +1,6 @@ (herald "Pre-processing test example: modified NS with two responders") -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/preprocess.scm") (defprotocol ns basic@@ -40,6 +40,8 @@ (label 0) (unrealized (0 1) (1 0) (1 2) (2 0) (2 2)) (preskeleton)+ (maps+ ((0 1 2) ((a a) (b b) (n1 n1) (n2 n2) (n3 n3) (n2p n2p) (n3p n3p)))) (origs (n3 (2 1)) (n2p (2 1)) (n3p (1 1)) (n2 (1 1)) (n1 (0 0))) (comment "Not a skeleton")) @@ -62,6 +64,8 @@ (parent 0) (unrealized (0 1) (1 2) (2 2)) (dead)+ (maps+ ((0 1 2) ((a a) (b b) (n1 n1) (n2 n2) (n3 n3) (n2p n2p) (n3p n3p)))) (origs (n3 (2 1)) (n2p (2 1)) (n3p (1 1)) (n2 (1 1)) (n1 (0 0))) (comment "empty cohort")) @@ -82,6 +86,8 @@ (label 2) (parent 1) (unrealized (1 2))+ (maps+ ((0 1 1) ((a a) (b b) (n1 n1) (n2 n2) (n3 n3p) (n2p n2) (n3p n3p)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns
tst/print.tst view
@@ -1,7 +1,7 @@ (herald "Print Test" (comment "See if read forms look like printed ones")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/print.scm") (defprotocol print-test basic
tst/prottrans.tst view
@@ -1,6 +1,6 @@ (herald "Protocol Transformations With Rules") -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/prottrans.scm") (defprotocol ns basic@@ -27,6 +27,7 @@ (traces ((send (enc na a b)) (recv (enc na nb a)) (send (enc nb b)))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (na na) (nb nb)))) (origs (na (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -37,6 +38,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk a) (invk b)) (uniq-orig na)+ (comment "Initiator point-of-view") (operation nonce-test (added-strand resp 2) na (0 1) (enc na a b)) (strand-map 0) (traces ((send (enc na a b)) (recv (enc na nb a)) (send (enc nb b)))@@ -44,6 +46,7 @@ (label 1) (parent 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (na na) (nb nb)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton ns@@ -53,6 +56,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk a) (invk b)) (uniq-orig na)+ (comment "Initiator point-of-view") (operation nonce-test (contracted (nb-0 nb)) na (0 1) (enc na nb a) (enc na a b)) (strand-map 0 1)@@ -91,6 +95,7 @@ (traces ((recv (enc na a b)) (send (enc na nb a)) (recv (enc nb b)))) (label 3) (unrealized (0 2))+ (maps ((0) ((a a) (nb nb) (b b) (na na)))) (origs (nb (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -101,6 +106,7 @@ (precedes ((0 1) (1 1)) ((1 2) (0 2))) (non-orig (invk a)) (uniq-orig nb)+ (comment "Responder point-of-view") (operation nonce-test (added-strand init 3) nb (0 2) (enc na nb a)) (strand-map 0) (traces ((recv (enc na a b)) (send (enc na nb a)) (recv (enc nb b)))@@ -146,6 +152,7 @@ (traces ((send (enc n k)) (recv n))) (label 5) (unrealized (0 1))+ (maps ((0) ((k k) (n n)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -156,6 +163,16 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk k)) (uniq-orig n)+ (comment "The shape analysis sentence for this problem:"+ (defgoal unilateral+ (forall ((n text) (k akey) (z strd))+ (implies+ (and (p "init" z 2) (p "init" "n" z n) (p "init" "k" z k)+ (non (invk k)) (uniq-at n z 0))+ (exists ((z-0 strd))+ (and (p "resp" z-0 2) (p "resp" "n" z-0 n)+ (p "resp" "k" z-0 k) (prec z 0 z-0 0)+ (prec z-0 1 z 1))))))) (operation nonce-test (added-strand resp 2) n (0 1) (enc n k)) (strand-map 0) (traces ((send (enc n k)) (recv n)) ((recv (enc n k)) (send n)))@@ -178,12 +195,12 @@ (defrule unilateral (forall ((r strd) (a akey) (nb text)) (implies- (and (p "resp" r (idx 3)) (p "resp" "a" r a)- (p "resp" "nb" r nb) (non (invk a)) (uniq nb))+ (and (p "resp" r (idx 3)) (p "resp" "nb" r nb)+ (p "resp" "a" r a) (non (invk a)) (uniq nb)) (exists ((i strd))- (and (p "init" i (idx 3)) (p "init" "a" i a)- (p "init" "nb" i nb) (prec r (idx 1) i (idx 1))- (prec i (idx 2) r (idx 2))))))+ (and (p "init" i (idx 3)) (p "init" "nb" i nb)+ (p "init" "a" i a) (prec i (idx 2) r (idx 2))+ (prec r (idx 1) i (idx 1)))))) (comment "Unilateral sas under the predicate mapping:") (comment (p "init" 2) "->" (p "resp" 3) "and") (comment (p "init" "n") "->" (p "resp" "nb") "and")@@ -208,6 +225,7 @@ (traces ((recv (enc na a b)) (send (enc na nb a)) (recv (enc nb b)))) (label 7) (unrealized (0 2))+ (maps ((0) ((a a) (nb nb) (b b) (na na)))) (origs (nb (0 1))) (comment "Not closed under rules")) @@ -218,6 +236,7 @@ (precedes ((0 1) (1 1)) ((1 2) (0 2))) (non-orig (invk a)) (uniq-orig nb)+ (comment "Responder point-of-view") (rule unilateral) (traces ((recv (enc na a b)) (send (enc na nb a)) (recv (enc nb b))) ((send (enc na-0 a b-0)) (recv (enc na-0 nb a))@@ -225,6 +244,7 @@ (label 8) (parent 7) (unrealized (1 1))+ (maps ((0) ((a a) (nb nb) (b b) (na na)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton ns-with-rule@@ -234,6 +254,7 @@ (precedes ((0 1) (1 1)) ((1 2) (0 2))) (non-orig (invk a)) (uniq-orig nb)+ (comment "Responder point-of-view") (operation nonce-test (contracted (na-0 na)) nb (1 1) (enc na nb a)) (strand-map 0 1) (traces ((recv (enc na a b)) (send (enc na nb a)) (recv (enc nb b)))@@ -253,6 +274,7 @@ (precedes ((0 1) (2 1)) ((1 2) (0 2)) ((2 2) (1 1))) (non-orig (invk a)) (uniq-orig nb)+ (comment "Responder point-of-view") (operation nonce-test (added-strand init 3) nb (1 1) (enc na nb a)) (strand-map 0 1) (traces ((recv (enc na a b)) (send (enc na nb a)) (recv (enc nb b)))@@ -264,6 +286,7 @@ (seen-ops (9 (operation generalization deleted (1 0)) (strand-map 0 2))) (realized)+ (maps ((0) ((a a) (nb nb) (b b) (na na)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
tst/pruning1.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/pruning1.scm") (defprotocol prune basic@@ -30,6 +30,7 @@ (recv (enc n (privk b) (pubk a))))) (label 0) (unrealized (0 1) (0 2))+ (maps ((0) ((a a) (b b) (n n)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -49,6 +50,7 @@ (label 1) (parent 0) (unrealized (0 1) (0 2))+ (maps ((0) ((a a) (b b) (n n)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton prune@@ -69,6 +71,7 @@ (label 2) (parent 1) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n n)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton prune@@ -91,6 +94,7 @@ (label 3) (parent 2) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n n)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton prune
tst/puzzle_example.tst view
@@ -1,6 +1,6 @@ (herald puzzle_example) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/puzzle_example.scm") (defprotocol puzzle basic@@ -28,6 +28,7 @@ ((send na) (recv (enc na s (ltk a b))) (send (enc payload s)))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (na na) (payload payload) (s s)))) (origs (na (0 0)) (payload (0 2))) (comment "1 in cohort - 1 not yet seen")) @@ -79,6 +80,7 @@ (label 2) (unrealized (0 1) (1 0)) (preskeleton)+ (maps ((0 1) ((a a) (b b) (na na) (payload payload) (s s)))) (origs (na (0 0)) (payload (0 2))) (comment "Not a skeleton")) @@ -94,6 +96,7 @@ (label 3) (parent 2) (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (na na) (payload payload) (s s)))) (origs (na (0 0)) (payload (0 2))) (comment "1 in cohort - 1 not yet seen")) @@ -149,6 +152,7 @@ (label 5) (unrealized (2 0)) (preskeleton)+ (maps ((0 1 2) ((na na) (payload payload) (a a) (b b) (s s)))) (origs (s (1 1)) (na (0 0)) (payload (0 2))) (comment "Not a skeleton")) @@ -166,6 +170,7 @@ (parent 5) (unrealized (2 0)) (dead)+ (maps ((0 1 2) ((na na) (payload payload) (a a) (b b) (s s)))) (origs (s (1 1)) (na (0 0)) (payload (0 2))) (comment "empty cohort")) @@ -201,6 +206,7 @@ (label 7) (unrealized (2 0)) (preskeleton)+ (maps ((0 1 2) ((na na) (payload payload) (a a) (b b) (s s)))) (origs (s (1 1)) (na (0 0)) (payload (0 2))) (comment "Not a skeleton")) @@ -218,6 +224,7 @@ (label 8) (parent 7) (unrealized (2 0))+ (maps ((0 1 2) ((na na) (payload payload) (a a) (b b) (s s)))) (origs (s (1 1)) (na (0 0)) (payload (0 2))) (comment "1 in cohort - 1 not yet seen")) @@ -241,6 +248,7 @@ (parent 8) (unrealized (3 0)) (dead)+ (maps ((0 1 2) ((na na) (payload payload) (a a) (b b) (s s)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -270,6 +278,7 @@ ((recv na) (send (enc na s (ltk a b))) (recv (enc payload s)))) (label 10) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (payload payload) (s s) (na na)))) (origs (s (0 1))) (comment "2 in cohort - 2 not yet seen")) @@ -289,6 +298,7 @@ (label 11) (parent 10) (unrealized (1 1))+ (maps ((0) ((a a) (b b) (payload payload) (s s) (na na)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton puzzle@@ -306,6 +316,7 @@ (parent 10) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (b b) (payload payload) (s s) (na na)))) (comment "empty cohort")) (defskeleton puzzle@@ -356,6 +367,7 @@ (label 14) (unrealized (0 2) (1 0)) (preskeleton)+ (maps ((0 1) ((a a) (b b) (payload payload) (s s) (na na)))) (origs (s (0 1))) (comment "Not a skeleton")) @@ -372,6 +384,7 @@ (parent 14) (unrealized (0 2) (1 0)) (dead)+ (maps ((0 1) ((a a) (b b) (payload payload) (s s) (na na)))) (origs (s (0 1))) (comment "empty cohort")) @@ -407,6 +420,7 @@ (label 16) (unrealized (2 0)) (preskeleton)+ (maps ((0 1 2) ((payload payload) (na na) (a a) (b b) (s s)))) (origs (s (0 1)) (payload (1 2))) (comment "Not a skeleton")) @@ -424,6 +438,7 @@ (label 17) (parent 16) (unrealized (2 0))+ (maps ((0 1 2) ((payload payload) (na na) (a a) (b b) (s s)))) (origs (s (0 1)) (payload (1 2))) (comment "1 in cohort - 1 not yet seen")) @@ -447,6 +462,7 @@ (parent 17) (unrealized (3 0)) (dead)+ (maps ((0 1 2) ((payload payload) (na na) (a a) (b b) (s s)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/reflect.tst view
@@ -1,6 +1,6 @@ (herald reflect) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/reflect.scm") (defprotocol reflect basic@@ -24,6 +24,7 @@ (traces ((recv (enc b (invk a))))) (label 0) (unrealized (0 0))+ (maps ((0) ((a a) (b b)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -58,6 +59,7 @@ (label 2) (parent 0) (unrealized (1 0))+ (maps ((0) ((a a) (b b)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton reflect@@ -96,6 +98,7 @@ (label 4) (parent 2) (unrealized (2 0))+ (maps ((0) ((a a) (b b)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton reflect@@ -116,6 +119,7 @@ (label 5) (parent 4) (realized)+ (maps ((0) ((a a) (b b)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton reflect@@ -141,6 +145,7 @@ (operation encryption-test (added-strand resp 2) (enc a (invk b)) (3 0)) (strand-map 0 1 2 1))) (unrealized (3 0))+ (maps ((0) ((a a) (b b)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton reflect@@ -161,6 +166,7 @@ (seen-ops (1 (operation generalization deleted (1 0)) (strand-map 0 2))) (realized)+ (maps ((0) ((a a) (b b)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")@@ -186,6 +192,7 @@ (traces ((send (enc b (invk a))) (recv (enc a (invk b))))) (label 8) (unrealized (0 1))+ (maps ((0) ((a a) (b b)))) (origs) (comment "3 in cohort - 3 not yet seen")) @@ -236,6 +243,7 @@ (label 11) (parent 8) (unrealized (1 0))+ (maps ((0) ((a a) (b b)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton reflect@@ -292,6 +300,7 @@ (label 14) (parent 11) (unrealized (2 0))+ (maps ((0) ((a a) (b b)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton reflect@@ -310,6 +319,7 @@ (seen 9) (seen-ops (9 (operation generalization deleted (1 0)) (strand-map 0))) (realized)+ (maps ((0) ((a b) (b b)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton reflect@@ -330,6 +340,7 @@ (label 16) (parent 14) (realized)+ (maps ((0) ((a a) (b b)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton reflect@@ -355,6 +366,7 @@ (operation encryption-test (added-strand resp 2) (enc b (invk a)) (3 0)) (strand-map 0 1 2 1))) (unrealized (3 0))+ (maps ((0) ((a a) (b b)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton reflect@@ -375,6 +387,7 @@ (seen-ops (10 (operation generalization deleted (1 0)) (strand-map 0 2))) (realized)+ (maps ((0) ((a a) (b b)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")@@ -400,6 +413,7 @@ (traces ((recv (enc (invk b) (invk a))))) (label 19) (unrealized (0 0))+ (maps ((0) ((a a) (b b)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -435,6 +449,7 @@ (label 21) (parent 19) (unrealized (1 0))+ (maps ((0) ((a a) (b b)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton reflect@@ -473,6 +488,7 @@ (label 23) (parent 21) (unrealized (2 0))+ (maps ((0) ((a a) (b (invk b))))) (comment "2 in cohort - 2 not yet seen")) (defskeleton reflect@@ -493,6 +509,7 @@ (label 24) (parent 23) (realized)+ (maps ((0) ((a a) (b (invk b))))) (comment "1 in cohort - 1 not yet seen")) (defskeleton reflect@@ -518,6 +535,7 @@ (operation encryption-test (added-strand resp 2) (enc a (invk b)) (3 0)) (strand-map 0 1 2 1))) (unrealized (3 0))+ (maps ((0) ((a a) (b (invk b))))) (comment "1 in cohort - 0 not yet seen")) (defskeleton reflect@@ -538,6 +556,7 @@ (seen-ops (20 (operation generalization deleted (1 0)) (strand-map 0 2))) (realized)+ (maps ((0) ((a a) (b (invk b))))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
tst/renamings.tst view
@@ -2,7 +2,7 @@ (comment "There is a flaw in this protocol by design") (comment "It also shows how variable renaming works")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/renamings.scm") (defprotocol blanchet basic@@ -29,6 +29,7 @@ (traces ((recv (enc (enc a (privk s)) (pubk d))) (send (enc b a)))) (label 0) (unrealized (0 0))+ (maps ((0) ((s s) (d d) (a a) (b b)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -39,6 +40,7 @@ (precedes ((1 0) (0 0))) (non-orig (privk s) (privk d)) (uniq-orig a)+ (comment "Analyze from the responder's perspective") (operation encryption-test (added-strand init 1) (enc a (privk s)) (0 0)) (strand-map 0)@@ -77,6 +79,7 @@ (traces ((send (enc (enc a (privk s)) (pubk d))) (recv (enc b a)))) (label 2) (unrealized (0 1))+ (maps ((0) ((s s) (d d) (a a) (b b)))) (origs (a (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -87,6 +90,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk d)) (uniq-orig a)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-strand resp 2) (enc b a) (0 1)) (strand-map 0) (traces ((send (enc (enc a (privk s)) (pubk d))) (recv (enc b a)))@@ -94,6 +98,7 @@ (label 3) (parent 2) (unrealized (1 0))+ (maps ((0) ((s s) (d d) (a a) (b b)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet@@ -103,6 +108,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk d)) (uniq-orig a)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-listener a) (enc b a) (0 1)) (strand-map 0) (traces ((send (enc (enc a (privk s)) (pubk d))) (recv (enc b a)))@@ -111,6 +117,7 @@ (parent 2) (unrealized (1 0)) (dead)+ (maps ((0) ((s s) (d d) (a a) (b b)))) (comment "empty cohort")) (defskeleton blanchet@@ -120,6 +127,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk d)) (uniq-orig a)+ (comment "Analyze from the initiator's perspective") (operation nonce-test (contracted (d-0 s) (a-0 d)) a (1 0) (enc (enc a (privk s)) (pubk d))) (strand-map 0 1)
tst/role_uniq.tst view
@@ -1,6 +1,6 @@ (herald "Role Unique Origination") -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/role_uniq.scm") (defprotocol blanchet basic@@ -28,6 +28,7 @@ (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs (s (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -38,6 +39,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-strand resp 2) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))@@ -45,6 +47,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet@@ -54,6 +57,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-listener s) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))@@ -62,6 +66,7 @@ (parent 0) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (defskeleton blanchet@@ -71,6 +76,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation nonce-test (contracted (a-0 a) (b-0 b)) s (1 0) (enc (enc s (invk a)) b)) (strand-map 0 1)@@ -109,6 +115,7 @@ (traces ((recv (enc (enc s (invk a)) b)) (send (enc d s)))) (label 4) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -119,6 +126,7 @@ (precedes ((1 0) (0 0))) (non-orig (invk a) (invk b)) (uniq-orig s)+ (comment "Analyze from the responder's perspective") (operation encryption-test (added-strand init 1) (enc s (invk a)) (0 0)) (strand-map 0)@@ -158,6 +166,7 @@ (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))) (label 6) (realized)+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs) (comment "Not closed under rules")) @@ -166,11 +175,13 @@ (defstrand init 2 (d d) (s s) (a a) (b b)) (non-orig (invk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (rule role-uniq) (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))) (label 7) (parent 6) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs (s (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -181,6 +192,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-strand resp 2) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))@@ -188,6 +200,7 @@ (label 8) (parent 7) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton blanchet@@ -197,6 +210,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation encryption-test (added-listener s) (enc d s) (0 1)) (strand-map 0) (traces ((send (enc (enc s (invk a)) b)) (recv (enc d s)))@@ -205,6 +219,7 @@ (parent 7) (unrealized (1 0)) (dead)+ (maps ((0) ((a a) (b b) (s s) (d d)))) (comment "empty cohort")) (defskeleton blanchet@@ -214,6 +229,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk b)) (uniq-orig s)+ (comment "Analyze from the initiator's perspective") (operation nonce-test (contracted (a-0 a) (b-0 b)) s (1 0) (enc (enc s (invk a)) b)) (strand-map 0 1)@@ -253,6 +269,7 @@ (traces ((recv (enc (enc s (invk a)) b)) (send (enc d s)))) (label 11) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (s s) (d d)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -263,6 +280,7 @@ (precedes ((1 0) (0 0))) (non-orig (invk a) (invk b)) (uniq-orig s)+ (comment "Analyze from the responder's perspective") (rule role-uniq) (operation encryption-test (added-strand init 1) (enc s (invk a)) (0 0))
tst/rule-node.tst view
@@ -1,6 +1,6 @@ (herald rule-node) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/rule-node.scm") (defprotocol rule-order basic@@ -11,7 +11,7 @@ (forall ((z1 z2 strd) (i1 i2 indx)) (implies (fact le z1 i1 z2 i2)- (or (and (= z1 z2) (= i1 i2)) (fact lt z1 i1 z2 i2)))))+ (or (and (= i1 i2) (= z1 z2)) (fact lt z1 i1 z2 i2))))) (defrule lt-le (forall ((z1 z2 strd) (i1 i2 indx)) (implies (fact lt z1 i1 z2 i2) (fact le z1 i1 z2 i2))))@@ -37,6 +37,7 @@ ((send (cat t s)) (recv (cat s t)))) (label 0) (realized)+ (maps ((0 1) ((s s) (t t)))) (origs) (comment "Not closed under rules")) @@ -68,7 +69,7 @@ (forall ((z1 z2 strd) (i1 i2 indx)) (implies (fact le z1 i1 z2 i2)- (or (and (= z1 z2) (= i1 i2)) (fact lt z1 i1 z2 i2)))))+ (or (and (= i1 i2) (= z1 z2)) (fact lt z1 i1 z2 i2))))) (defrule lt-le (forall ((z1 z2 strd) (i1 i2 indx)) (implies (fact lt z1 i1 z2 i2) (fact le z1 i1 z2 i2))))@@ -94,6 +95,7 @@ ((send (cat t s)) (recv (cat s t)))) (label 2) (realized)+ (maps ((0 1) ((s s) (t t)))) (origs) (comment "Not closed under rules")) @@ -126,7 +128,7 @@ (parent 3) (realized) (shape)- (maps)+ (maps ((0 0) ((s s) (t s)))) (origs)) (comment "Nothing left to do")@@ -151,6 +153,7 @@ (traces ((send (cat s t)) (recv (cat t s)))) (label 5) (realized)+ (maps ((0) ((s s) (t t)))) (origs) (comment "Not closed under rules")) @@ -192,6 +195,7 @@ ((send (cat t s)) (recv (cat s t)))) (label 7) (realized)+ (maps ((0 1) ((s s) (t t)))) (origs) (comment "Not closed under rules")) @@ -223,7 +227,7 @@ (parent 8) (realized) (shape)- (maps)+ (maps ((0 0) ((s s) (t s)))) (origs)) (comment "Nothing left to do")@@ -251,6 +255,7 @@ ((send (cat s t)) (recv (cat t s)))) (label 10) (realized)+ (maps ((0 1) ((s s) (t t)))) (origs) (comment "Not closed under rules")) @@ -282,7 +287,7 @@ (parent 11) (realized) (shape)- (maps)+ (maps ((0 0) ((s s) (t t)))) (origs)) (comment "Nothing left to do")
tst/rule-order.tst view
@@ -1,6 +1,6 @@ (herald rule-order) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/rule-order.scm") (defprotocol rule-order basic@@ -22,6 +22,7 @@ (traces ((send (cat s t)))) (label 0) (realized)+ (maps ((0) ((s s) (t t)))) (origs) (comment "Not closed under rules"))
tst/sigenc.tst view
@@ -1,7 +1,7 @@ (herald "Signed Encrypted Message Example" (comment "Shows examples of key usage of asymmetric keys")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/sigenc.scm") (defprotocol mult-keys-sig-enc basic@@ -33,6 +33,7 @@ (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b))))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -55,6 +56,7 @@ (label 1) (parent 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton mult-keys-sig-enc@@ -112,6 +114,7 @@ (recv (enc (enc n2 (privk "sig" a)) (pubk "enc" b))))) (label 3) (unrealized (0 0) (0 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (origs (n2 (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -133,6 +136,7 @@ (label 4) (parent 3) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton mult-keys-sig-enc@@ -216,6 +220,7 @@ (recv (enc (enc n2 (privk "sig" a)) (pubk "enc" b))))) (label 7) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (origs (n2 (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -274,6 +279,7 @@ (recv (enc (enc n2 (privk "sig" a)) (pubk "enc" b))))) (label 9) (unrealized (0 0) (0 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (origs (n2 (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -295,6 +301,7 @@ (label 10) (parent 9) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton mult-keys-sig-enc@@ -317,6 +324,7 @@ (label 11) (parent 10) (unrealized (1 1))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton mult-keys-sig-enc@@ -341,6 +349,7 @@ (label 12) (parent 10) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton mult-keys-sig-enc@@ -394,6 +403,7 @@ (seen-ops (15 (operation generalization deleted (1 1)) (strand-map 0 1 2))) (realized)+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton mult-keys-sig-enc@@ -449,6 +459,7 @@ (seen-ops (13 (operation generalization deleted (1 0)) (strand-map 0 2))) (realized)+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton mult-keys-sig-enc@@ -480,6 +491,7 @@ (seen-ops (15 (operation generalization deleted (2 0)) (strand-map 0 1 3))) (realized)+ (maps ((0) ((a a) (b b) (n2 n2) (n1 n1)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
tst/sorted_epmo_acctnum.tst view
@@ -4,7 +4,7 @@ "This version uses sorts to avoid confusion" "between a nonce and other data")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/sorted_epmo_acctnum.scm") (defprotocol sorted_epmo_acctnum basic@@ -103,6 +103,10 @@ (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))) (label 0) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (origs (nm (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -132,6 +136,10 @@ (label 1) (parent 0) (unrealized (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -166,6 +174,10 @@ (label 2) (parent 1) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -201,6 +213,10 @@ (label 3) (parent 2) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -246,6 +262,10 @@ (label 4) (parent 2) (unrealized (0 0) (0 2) (1 0) (3 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -279,6 +299,10 @@ (label 5) (parent 3) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -318,6 +342,10 @@ (label 6) (parent 3) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -362,6 +390,10 @@ (label 7) (parent 4) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -446,6 +478,10 @@ (label 9) (parent 6) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -489,6 +525,10 @@ (label 10) (parent 7) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -534,6 +574,10 @@ (label 11) (parent 7) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -592,6 +636,10 @@ (operation nonce-test (displaced 5 2 customer 3) nm (4 0) (enc nc nm m price (pubk c))) (strand-map 0 1 2 3 3))) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -640,6 +688,10 @@ (seen-ops (8 (operation generalization deleted (2 0)) (strand-map 0 1 3))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -682,6 +734,10 @@ (label 14) (parent 10) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -728,6 +784,10 @@ (label 15) (parent 10) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -772,6 +832,10 @@ (label 16) (parent 11) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -825,6 +889,10 @@ (label 17) (parent 11) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -878,6 +946,10 @@ (label 18) (parent 11) (unrealized (0 0) (0 2) (1 0) (3 3))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -929,6 +1001,10 @@ (seen-ops (8 (operation generalization deleted (2 0)) (strand-map 0 1 3))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -975,6 +1051,10 @@ (label 20) (parent 15) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -1017,6 +1097,10 @@ (label 21) (parent 16) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -1063,6 +1147,10 @@ (label 22) (parent 16) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -1123,6 +1211,10 @@ (enc c nc nb-1 acctnum-0 price (pubk b-0))) (strand-map 0 1 2 3 3))) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -1175,6 +1267,10 @@ (label 24) (parent 18) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -1235,6 +1331,10 @@ (label 25) (parent 18) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -1290,6 +1390,10 @@ (seen-ops (13 (operation generalization deleted (2 0)) (strand-map 0 1 3 4))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -1341,6 +1445,10 @@ (seen-ops (8 (operation generalization deleted (2 0)) (strand-map 0 1 3))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -1387,6 +1495,10 @@ (label 28) (parent 22) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -1439,6 +1551,10 @@ (label 29) (parent 24) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -1501,6 +1617,10 @@ (label 30) (parent 24) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -1560,6 +1680,10 @@ (label 31) (parent 24) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -1619,6 +1743,10 @@ (label 32) (parent 25) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -1674,6 +1802,10 @@ (seen-ops (13 (operation generalization deleted (2 0)) (strand-map 0 1 3 4))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -1725,6 +1857,10 @@ (parent 29) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -1779,6 +1915,10 @@ (label 35) (parent 29) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -1838,6 +1978,10 @@ (label 36) (parent 30) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -1900,6 +2044,10 @@ (operation nonce-test (displaced 5 4 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -1972,6 +2120,10 @@ (operation nonce-test (displaced 6 3 customer 3) nb-0 (5 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5))) (unrealized (0 0) (0 2) (1 0) (5 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -2031,6 +2183,10 @@ (label 39) (parent 32) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -2099,6 +2255,10 @@ (enc c nc nb-0 acctnum-0 price (pubk b-0))) (strand-map 0 1 2 3 2))) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -2167,6 +2327,10 @@ (label 41) (parent 32) (unrealized (0 0) (0 2) (1 0) (4 0) (5 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -2222,6 +2386,10 @@ (parent 35) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -2284,6 +2452,10 @@ (label 43) (parent 36) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -2360,6 +2532,10 @@ (operation nonce-test (displaced 6 3 customer 3) nb-0 (5 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 4))) (unrealized (0 0) (0 2) (1 0) (5 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -2428,6 +2604,10 @@ (label 45) (parent 36) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -2483,6 +2663,10 @@ (parent 37) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -2543,6 +2727,10 @@ (label 47) (parent 37) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -2602,6 +2790,10 @@ (label 48) (parent 39) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -2672,6 +2864,10 @@ (label 49) (parent 39) (unrealized (0 0) (0 2) (1 0) (5 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -2739,6 +2935,10 @@ (label 50) (parent 39) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -2806,6 +3006,10 @@ (label 51) (parent 41) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "4 in cohort - 4 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -2865,6 +3069,10 @@ (parent 43) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -2929,6 +3137,10 @@ (label 53) (parent 43) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -3002,6 +3214,10 @@ (operation nonce-test (displaced 6 5 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -3083,6 +3299,10 @@ (operation nonce-test (displaced 7 3 customer 3) nb-0 (6 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 4))) (unrealized (0 0) (0 2) (1 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -3143,6 +3363,10 @@ (parent 47) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -3201,6 +3425,10 @@ (parent 48) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -3263,6 +3491,10 @@ (label 58) (parent 48) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -3330,6 +3562,10 @@ (label 59) (parent 49) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -3400,6 +3636,10 @@ (operation nonce-test (displaced 6 5 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -3479,6 +3719,10 @@ (operation nonce-test (displaced 7 3 customer 3) nb-0 (6 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6))) (unrealized (0 0) (0 2) (1 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -3548,6 +3792,10 @@ (label 62) (parent 51) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -3617,6 +3865,10 @@ (label 63) (parent 51) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -3686,6 +3938,10 @@ (label 64) (parent 51) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -3767,6 +4023,10 @@ (operation nonce-test (displaced 7 3 customer 3) nb-0 (6 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 5))) (unrealized (0 0) (0 2) (1 0) (4 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -3831,6 +4091,10 @@ (parent 53) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -3895,6 +4159,10 @@ (parent 54) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -3963,6 +4231,10 @@ (label 68) (parent 54) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -4026,6 +4298,10 @@ (parent 58) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -4096,6 +4372,10 @@ (label 70) (parent 59) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -4179,6 +4459,10 @@ (operation nonce-test (displaced 7 3 customer 3) nb-0 (6 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 5))) (unrealized (0 0) (0 2) (1 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -4254,6 +4538,10 @@ (label 72) (parent 59) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -4317,6 +4605,10 @@ (parent 60) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -4384,6 +4676,10 @@ (label 74) (parent 60) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -4452,6 +4748,10 @@ (label 75) (parent 62) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -4521,6 +4821,10 @@ (label 76) (parent 62) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -4597,6 +4901,10 @@ (label 77) (parent 62) (unrealized (0 0) (0 2) (1 0) (4 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -4667,6 +4975,10 @@ (label 78) (parent 63) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -4745,6 +5057,10 @@ (label 79) (parent 63) (unrealized (0 0) (0 2) (1 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -4820,6 +5136,10 @@ (label 80) (parent 63) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -4890,6 +5210,10 @@ (label 81) (parent 64) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -4972,6 +5296,10 @@ (operation nonce-test (displaced 7 3 customer 3) nb-0 (6 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 5))) (unrealized (0 0) (0 2) (1 0) (4 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -5041,6 +5369,10 @@ (parent 68) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -5108,6 +5440,10 @@ (parent 70) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -5179,6 +5515,10 @@ (label 85) (parent 70) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -5259,6 +5599,10 @@ (operation nonce-test (displaced 7 6 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -5348,6 +5692,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 5))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -5415,6 +5763,10 @@ (parent 74) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -5484,6 +5836,10 @@ (label 89) (parent 75) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -5562,6 +5918,10 @@ (label 90) (parent 75) (unrealized (0 0) (0 2) (1 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -5637,6 +5997,10 @@ (label 91) (parent 75) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -5706,6 +6070,10 @@ (label 92) (parent 76) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -5783,6 +6151,10 @@ (label 93) (parent 76) (unrealized (0 0) (0 2) (1 0) (4 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -5866,6 +6238,10 @@ (enc c nc nb-1 acctnum-0 price (pubk b-0))) (strand-map 0 1 2 3 4 5 5))) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -5933,6 +6309,10 @@ (parent 78) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -6004,6 +6384,10 @@ (label 96) (parent 78) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -6078,6 +6462,10 @@ (label 97) (parent 79) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -6158,6 +6546,10 @@ (operation nonce-test (displaced 7 6 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -6247,6 +6639,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 7))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -6317,6 +6713,10 @@ (label 100) (parent 81) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -6395,6 +6795,10 @@ (label 101) (parent 81) (unrealized (0 0) (0 2) (1 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -6470,6 +6874,10 @@ (label 102) (parent 81) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -6541,6 +6949,10 @@ (parent 85) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -6612,6 +7024,10 @@ (parent 86) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -6688,6 +7104,10 @@ (label 105) (parent 86) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -6755,6 +7175,10 @@ (parent 89) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -6825,6 +7249,10 @@ (label 107) (parent 89) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -6899,6 +7327,10 @@ (label 108) (parent 90) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -6978,6 +7410,10 @@ (operation nonce-test (displaced 7 6 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -7066,6 +7502,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 7))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -7135,6 +7575,10 @@ (label 111) (parent 92) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -7213,6 +7657,10 @@ (label 112) (parent 92) (unrealized (0 0) (0 2) (1 0) (6 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -7288,6 +7736,10 @@ (label 113) (parent 92) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -7372,6 +7824,10 @@ (enc c nc nb-1 acctnum-0 price (pubk b-0))) (strand-map 0 1 2 3 4 5 5))) (unrealized (0 0) (0 2) (1 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -7443,6 +7899,10 @@ (parent 96) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -7521,6 +7981,10 @@ (label 116) (parent 97) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -7613,6 +8077,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 6))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -7697,6 +8165,10 @@ (label 118) (parent 97) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -7768,6 +8240,10 @@ (parent 98) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -7843,6 +8319,10 @@ (label 120) (parent 98) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -7910,6 +8390,10 @@ (parent 100) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -7981,6 +8465,10 @@ (label 122) (parent 100) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -8055,6 +8543,10 @@ (label 123) (parent 101) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -8135,6 +8627,10 @@ (operation nonce-test (displaced 7 6 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -8224,6 +8720,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 7))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -8301,6 +8801,10 @@ (parent 105) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -8372,6 +8876,10 @@ (parent 107) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -8450,6 +8958,10 @@ (label 128) (parent 108) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -8542,6 +9054,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 6))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -8626,6 +9142,10 @@ (label 130) (parent 108) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -8697,6 +9217,10 @@ (parent 109) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -8772,6 +9296,10 @@ (label 132) (parent 109) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -8839,6 +9367,10 @@ (parent 111) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -8909,6 +9441,10 @@ (label 134) (parent 111) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -8983,6 +9519,10 @@ (label 135) (parent 112) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -9062,6 +9602,10 @@ (operation nonce-test (displaced 7 6 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -9150,6 +9694,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 7))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -9224,6 +9772,10 @@ (parent 116) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -9302,6 +9854,10 @@ (label 139) (parent 116) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -9391,6 +9947,10 @@ (operation nonce-test (displaced 8 7 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6 7))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -9488,6 +10048,10 @@ (operation nonce-test (displaced 9 3 customer 3) nb-0 (8 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 7 6))) (unrealized (0 0) (0 2) (1 0) (8 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -9564,6 +10128,10 @@ (parent 120) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -9635,6 +10203,10 @@ (parent 122) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -9713,6 +10285,10 @@ (label 144) (parent 123) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -9805,6 +10381,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 6))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -9889,6 +10469,10 @@ (label 146) (parent 123) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -9960,6 +10544,10 @@ (parent 124) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -10035,6 +10623,10 @@ (label 148) (parent 124) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -10109,6 +10701,10 @@ (parent 128) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -10187,6 +10783,10 @@ (label 150) (parent 128) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -10276,6 +10876,10 @@ (operation nonce-test (displaced 8 7 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6 7))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -10373,6 +10977,10 @@ (operation nonce-test (displaced 9 3 customer 3) nb-0 (8 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 7 6))) (unrealized (0 0) (0 2) (1 0) (8 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -10449,6 +11057,10 @@ (parent 132) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -10520,6 +11132,10 @@ (parent 134) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -10598,6 +11214,10 @@ (label 155) (parent 135) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -10690,6 +11310,10 @@ (operation nonce-test (displaced 8 3 customer 3) nb-0 (7 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 6))) (unrealized (0 0) (0 2) (1 0) (7 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -10774,6 +11398,10 @@ (label 157) (parent 135) (unrealized (0 0) (0 2) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -10845,6 +11473,10 @@ (parent 136) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -10920,6 +11552,10 @@ (label 159) (parent 136) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -10999,6 +11635,10 @@ (parent 139) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -11079,6 +11719,10 @@ (parent 140) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -11162,6 +11806,10 @@ (label 162) (parent 140) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -11236,6 +11884,10 @@ (parent 144) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -11314,6 +11966,10 @@ (label 164) (parent 144) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -11403,6 +12059,10 @@ (operation nonce-test (displaced 8 7 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6 7))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -11500,6 +12160,10 @@ (operation nonce-test (displaced 9 3 customer 3) nb-0 (8 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 7 6))) (unrealized (0 0) (0 2) (1 0) (8 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -11576,6 +12240,10 @@ (parent 148) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -11654,6 +12322,10 @@ (parent 150) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -11733,6 +12405,10 @@ (parent 151) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -11816,6 +12492,10 @@ (label 170) (parent 151) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -11890,6 +12570,10 @@ (parent 155) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -11968,6 +12652,10 @@ (label 172) (parent 155) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -12057,6 +12745,10 @@ (operation nonce-test (displaced 8 7 merchant 2) nc (0 0) (enc c nc goods-0 (pubk m))) (strand-map 0 1 2 3 4 5 6 7))) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -12154,6 +12846,10 @@ (operation nonce-test (displaced 9 3 customer 3) nb-0 (8 0) (enc nc nb-0 m price (pubk c))) (strand-map 0 1 2 3 4 5 6 7 6))) (unrealized (0 0) (0 2) (1 0) (8 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -12230,6 +12926,10 @@ (parent 159) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -12314,6 +13014,10 @@ (parent 162) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -12393,6 +13097,10 @@ (parent 164) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -12473,6 +13181,10 @@ (parent 165) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -12556,6 +13268,10 @@ (label 179) (parent 165) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -12640,6 +13356,10 @@ (parent 170) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -12718,6 +13438,10 @@ (parent 172) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -12797,6 +13521,10 @@ (parent 173) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -12880,6 +13608,10 @@ (label 183) (parent 173) (unrealized (0 0) (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -12964,6 +13696,10 @@ (parent 179) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (defskeleton sorted_epmo_acctnum@@ -13048,6 +13784,10 @@ (parent 183) (unrealized (0 2)) (dead)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nc nc) (nb nb) (hash hash)+ (goods goods) (price price)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -13147,6 +13887,10 @@ (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))) (label 186) (unrealized (0 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (origs (nb (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -13179,6 +13923,10 @@ (label 187) (parent 186) (unrealized (1 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -13209,6 +13957,10 @@ (label 188) (parent 187) (unrealized (0 0) (1 2))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -13251,6 +14003,10 @@ (label 189) (parent 188) (unrealized (0 0) (2 1) (2 3))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -13293,6 +14049,10 @@ (label 190) (parent 189) (unrealized (0 0) (1 0) (2 3))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -13335,6 +14095,10 @@ (label 191) (parent 190) (unrealized (0 0) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -13377,6 +14141,10 @@ (label 192) (parent 191) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -13424,6 +14192,10 @@ (label 193) (parent 191) (unrealized (0 0) (1 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -13466,6 +14238,10 @@ (label 194) (parent 192) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -13512,6 +14288,10 @@ (label 195) (parent 193) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -13607,6 +14387,10 @@ (label 197) (parent 194) (unrealized (0 0) (3 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -13653,6 +14437,10 @@ (label 198) (parent 195) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -13702,6 +14490,10 @@ (label 199) (parent 197) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -13751,6 +14543,10 @@ (seen-ops (196 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -13806,6 +14602,10 @@ (label 201) (parent 198) (unrealized (0 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -13859,6 +14659,10 @@ (seen-ops (196 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -13909,6 +14713,10 @@ (label 203) (parent 199) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -13973,6 +14781,10 @@ (operation nonce-test (displaced 5 2 customer 3) nm (4 0) (enc nc nm m price (pubk c))) (strand-map 0 1 2 3 3))) (unrealized (0 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -14027,6 +14839,10 @@ (label 205) (parent 201) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -14081,6 +14897,10 @@ (seen-ops (196 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -14141,6 +14961,10 @@ (label 207) (parent 203) (unrealized (0 0) (4 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -14198,6 +15022,10 @@ (seen-ops (202 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -14254,6 +15082,10 @@ (label 209) (parent 205) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -14323,6 +15155,10 @@ (operation nonce-test (displaced 6 2 customer 3) nm (5 0) (enc nc nm m price (pubk c))) (strand-map 0 1 2 3 4 4))) (unrealized (0 0) (5 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -14390,6 +15226,10 @@ (enc c nc nb-1 acctnum-0 price (pubk b))) (strand-map 0 1 2 3 3))) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -14448,6 +15288,10 @@ (seen-ops (206 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -14513,6 +15357,10 @@ (label 213) (parent 209) (unrealized (0 0) (5 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton sorted_epmo_acctnum@@ -14585,6 +15433,10 @@ (enc c nc nb-1 acctnum-0 price (pubk b))) (strand-map 0 1 2 3 4 4))) (unrealized (0 0))+ (maps+ ((0)+ ((b b) (m m) (c c) (nm nb-0) (nb nb) (nc nc) (hash hash)+ (acctnum acctnum) (price price)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
tst/sts.tst view
@@ -1,7 +1,7 @@ (herald "Station-to-station protocol" (bound 20) (algebra diffie-hellman)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/sts.scm") (comment "Strand count bounded at 20") @@ -52,6 +52,7 @@ (exp (gen) (mul x eta)))))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (x x) (eta eta)))) (origs) (ugens (x (0 0))) (comment "2 in cohort - 2 not yet seen"))@@ -86,6 +87,7 @@ (label 1) (parent 0) (unrealized (1 1))+ (maps ((0) ((a a) (b b) (x x-0) (eta x)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton station-to-station@@ -154,6 +156,7 @@ (label 3) (parent 1) (unrealized (2 0))+ (maps ((0) ((a a) (b b) (x x-0) (eta x)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton station-to-station@@ -192,6 +195,7 @@ (parent 3) (unrealized (3 0)) (dead)+ (maps ((0) ((a a) (b b) (x x-0) (eta x)))) (comment "empty cohort")) (defskeleton station-to-station@@ -230,6 +234,7 @@ (parent 3) (unrealized (3 0)) (dead)+ (maps ((0) ((a a) (b b) (x x-0) (eta x)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -282,6 +287,7 @@ (exp (gen) (mul y chi)))))) (label 6) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (y y) (chi chi)))) (origs) (ugens (y (0 1))) (comment "1 in cohort - 1 not yet seen"))@@ -317,6 +323,7 @@ (label 7) (parent 6) (unrealized (1 1))+ (maps ((0) ((a a) (b b) (y y) (chi x)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton station-to-station@@ -390,6 +397,7 @@ (label 9) (parent 7) (unrealized (2 0))+ (maps ((0) ((a a) (b b) (y y) (chi x)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton station-to-station@@ -429,6 +437,7 @@ (parent 9) (unrealized (3 0)) (dead)+ (maps ((0) ((a a) (b b) (y y) (chi x)))) (comment "empty cohort")) (defskeleton station-to-station@@ -468,6 +477,7 @@ (parent 9) (unrealized (3 0)) (dead)+ (maps ((0) ((a a) (b b) (y y) (chi x)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -522,6 +532,7 @@ (label 12) (unrealized (0 1) (1 0)) (preskeleton)+ (maps ((0 1) ((a a) (b b) (x x) (eta eta)))) (origs) (ugens (x (0 0))) (comment "Not a skeleton"))@@ -546,6 +557,7 @@ (label 13) (parent 12) (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (x x) (eta eta)))) (origs) (ugens (x (0 0))) (comment "2 in cohort - 2 not yet seen"))@@ -582,6 +594,7 @@ (label 14) (parent 13) (unrealized (1 0) (2 1))+ (maps ((0 1) ((a a) (b b) (x x-0) (eta x)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton station-to-station@@ -614,6 +627,7 @@ (label 15) (parent 13) (unrealized (1 0))+ (maps ((0 1) ((a a) (b b) (x x) (eta y)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton station-to-station@@ -652,6 +666,7 @@ (label 16) (parent 14) (unrealized (1 0) (3 0))+ (maps ((0 1) ((a a) (b b) (x x-0) (eta x)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton station-to-station@@ -687,6 +702,7 @@ (parent 15) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (x x) (eta y)))) (comment "empty cohort")) (defskeleton station-to-station@@ -722,6 +738,7 @@ (parent 15) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (x x) (eta y)))) (comment "empty cohort")) (defskeleton station-to-station@@ -762,6 +779,7 @@ (parent 16) (unrealized (1 0) (4 0)) (dead)+ (maps ((0 1) ((a a) (b b) (x x-0) (eta x)))) (comment "empty cohort")) (defskeleton station-to-station@@ -802,6 +820,7 @@ (parent 16) (unrealized (1 0) (4 0)) (dead)+ (maps ((0 1) ((a a) (b b) (x x-0) (eta x)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -857,6 +876,7 @@ (label 21) (unrealized (0 2) (1 0)) (preskeleton)+ (maps ((0 1) ((a a) (b b) (y y) (chi chi)))) (origs) (ugens (y (0 1))) (comment "Not a skeleton"))@@ -882,6 +902,7 @@ (label 22) (parent 21) (unrealized (0 2))+ (maps ((0 1) ((a a) (b b) (y y) (chi chi)))) (origs) (ugens (y (0 1))) (comment "1 in cohort - 1 not yet seen"))@@ -919,6 +940,7 @@ (label 23) (parent 22) (unrealized (1 0) (2 1))+ (maps ((0 1) ((a a) (b b) (y y) (chi x)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton station-to-station@@ -955,6 +977,7 @@ (label 24) (parent 23) (unrealized (1 0))+ (maps ((0 1) ((a a) (b b) (y y) (chi x)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton station-to-station@@ -994,6 +1017,7 @@ (label 25) (parent 23) (unrealized (1 0) (3 0))+ (maps ((0 1) ((a a) (b b) (y y) (chi x)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton station-to-station@@ -1033,6 +1057,7 @@ (parent 24) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (y y) (chi x)))) (comment "empty cohort")) (defskeleton station-to-station@@ -1072,6 +1097,7 @@ (parent 24) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (y y) (chi x)))) (comment "empty cohort")) (defskeleton station-to-station@@ -1113,6 +1139,7 @@ (parent 25) (unrealized (1 0) (4 0)) (dead)+ (maps ((0 1) ((a a) (b b) (y y) (chi x)))) (comment "empty cohort")) (defskeleton station-to-station@@ -1154,6 +1181,7 @@ (parent 25) (unrealized (1 0) (4 0)) (dead)+ (maps ((0 1) ((a a) (b b) (y y) (chi x)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -1216,6 +1244,7 @@ (exp (gen) (mul x y)))) (send (privk b)))) (label 30) (unrealized (1 2))+ (maps ((0 1) ((a a) (b b) (x x) (y y) (a-0 a-0)))) (origs ((privk b) (1 3)) ((privk a) (0 3))) (ugens (y (1 1)) (x (0 0))) (comment "2 in cohort - 2 not yet seen"))@@ -1291,6 +1320,7 @@ (label 32) (parent 30) (unrealized (2 0))+ (maps ((0 1) ((a a) (b b) (x x) (y y) (a-0 a-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton station-to-station@@ -1330,6 +1360,7 @@ (parent 32) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (x x) (y y) (a-0 a-0)))) (comment "empty cohort")) (defskeleton station-to-station@@ -1369,6 +1400,7 @@ (parent 32) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (x x) (y y) (a-0 a-0)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -1434,6 +1466,7 @@ (label 35) (unrealized (1 2) (2 0)) (preskeleton)+ (maps ((0 1 2) ((a a) (b b) (x x) (y y) (a-0 a-0)))) (origs ((privk b) (1 3)) ((privk a) (0 3))) (ugens (y (1 1)) (x (0 0))) (comment "Not a skeleton"))@@ -1468,6 +1501,7 @@ (label 36) (parent 35) (unrealized (1 2) (2 0))+ (maps ((0 1 2) ((a a) (b b) (x x) (y y) (a-0 a-0)))) (origs ((privk b) (1 3)) ((privk a) (0 3))) (ugens (y (1 1)) (x (0 0))) (comment "2 in cohort - 2 not yet seen"))@@ -1508,6 +1542,7 @@ (parent 36) (unrealized (1 2) (3 0)) (dead)+ (maps ((0 1 2) ((a a) (b b) (x x) (y y) (a-0 a-0)))) (comment "empty cohort")) (defskeleton station-to-station@@ -1546,6 +1581,7 @@ (parent 36) (unrealized (1 2) (3 0)) (dead)+ (maps ((0 1 2) ((a a) (b b) (x x) (y y) (a-0 a-0)))) (comment "empty cohort")) (comment "Nothing left to do")
+ tst/sts_non_role.tst view
@@ -0,0 +1,1492 @@+(herald "Station-to-station protocol: Weakened version" (bound 20)+ (algebra diffie-hellman))++(comment "CPSA 4.4.7")+(comment "All input read from tst/sts_non_role.scm")+(comment "Strand count bounded at 20")++(defprotocol station-weak diffie-hellman+ (defrole init+ (vars (x rndx) (eta expt) (a b name))+ (trace (send (exp (gen) x))+ (recv+ (cat (exp (gen) eta)+ (enc (enc (exp (gen) eta) (exp (gen) x) (privk b))+ (exp (gen) (mul x eta)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) eta) (privk a))+ (exp (gen) (mul x eta)))) (send (privk a))))+ (defrole resp+ (vars (y rndx) (chi expt) (a b name))+ (trace (recv (exp (gen) chi))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) chi) (privk b))+ (exp (gen) (mul y chi)))))+ (recv+ (enc (enc (exp (gen) chi) (exp (gen) y) (privk a))+ (exp (gen) (mul y chi)))) (send (privk b))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false)))))++(defskeleton station-weak+ (vars (a b name) (x y rndx))+ (defstrand init 3 (a a) (b b) (x x) (eta y))+ (non-orig (privk a) (privk b))+ (uniq-gen x y)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y))))))+ (label 0)+ (unrealized (0 1))+ (maps ((0) ((a a) (b b) (x x) (y y))))+ (origs)+ (ugens (x (0 0)))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton station-weak+ (vars (a b b-0 name) (x x-0 rndx))+ (defstrand init 3 (a a) (b b) (x x-0) (eta x))+ (defstrand init 3 (a b) (b b-0) (x x) (eta x-0))+ (precedes ((0 0) (1 1)) ((1 2) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-gen x x-0)+ (operation encryption-test (added-strand init 3)+ (enc (exp (gen) x) (exp (gen) x-0) (privk b)) (0 1))+ (strand-map 0)+ (traces+ ((send (exp (gen) x-0))+ (recv+ (cat (exp (gen) x)+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk a))+ (exp (gen) (mul x x-0)))))+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) x-0)+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk b-0))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0))))))+ (label 1)+ (parent 0)+ (unrealized (1 1))+ (maps ((0) ((a a) (b b) (x x-0) (y x))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton station-weak+ (vars (a b name) (y x rndx))+ (defstrand init 3 (a a) (b b) (x x) (eta y))+ (defstrand resp 2 (b b) (y y) (chi x))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-gen y x)+ (operation encryption-test (added-strand resp 2)+ (enc (exp (gen) y) (exp (gen) x) (privk b)) (0 1))+ (strand-map 0)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul y x)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul y x)))))+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul y x)))))))+ (label 2)+ (parent 0)+ (realized)+ (shape)+ (maps ((0) ((a a) (b b) (x x) (y y))))+ (origs)+ (ugens (x (0 0)) (y (1 1))))++(defskeleton station-weak+ (vars (a b b-0 name) (x x-0 rndx))+ (defstrand init 3 (a a) (b b) (x x-0) (eta x))+ (defstrand init 3 (a b) (b b-0) (x x) (eta x-0))+ (deflistener (exp (gen) (mul x x-0)))+ (precedes ((0 0) (2 0)) ((1 0) (2 0)) ((1 2) (0 1)) ((2 1) (1 1)))+ (non-orig (privk a) (privk b))+ (uniq-gen x x-0)+ (operation encryption-test (added-listener (exp (gen) (mul x x-0)))+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk b-0))+ (exp (gen) (mul x x-0))) (1 1))+ (strand-map 0 1)+ (traces+ ((send (exp (gen) x-0))+ (recv+ (cat (exp (gen) x)+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk a))+ (exp (gen) (mul x x-0)))))+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) x-0)+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk b-0))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0)))))+ ((recv (exp (gen) (mul x x-0))) (send (exp (gen) (mul x x-0)))))+ (label 3)+ (parent 1)+ (unrealized (2 0))+ (maps ((0) ((a a) (b b) (x x-0) (y x))))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton station-weak+ (vars (a b b-0 name) (x x-0 rndx))+ (defstrand init 3 (a a) (b b) (x x-0) (eta x))+ (defstrand init 3 (a b) (b b-0) (x x) (eta x-0))+ (deflistener (exp (gen) (mul x x-0)))+ (deflistener (cat (exp (gen) x) x-0))+ (precedes ((0 0) (3 0)) ((1 0) (3 0)) ((1 2) (0 1)) ((2 1) (1 1))+ ((3 1) (2 0)))+ (non-orig (privk a) (privk b))+ (uniq-gen x x-0)+ (operation nonce-test (added-listener (cat (exp (gen) x) x-0))+ (exp (gen) (mul x x-0)) (2 0))+ (strand-map 0 1 2)+ (traces+ ((send (exp (gen) x-0))+ (recv+ (cat (exp (gen) x)+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk a))+ (exp (gen) (mul x x-0)))))+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) x-0)+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk b-0))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0)))))+ ((recv (exp (gen) (mul x x-0))) (send (exp (gen) (mul x x-0))))+ ((recv (cat (exp (gen) x) x-0)) (send (cat (exp (gen) x) x-0))))+ (label 4)+ (parent 3)+ (unrealized (3 0))+ (dead)+ (maps ((0) ((a a) (b b) (x x-0) (y x))))+ (comment "empty cohort"))++(defskeleton station-weak+ (vars (a b b-0 name) (x x-0 rndx))+ (defstrand init 3 (a a) (b b) (x x-0) (eta x))+ (defstrand init 3 (a b) (b b-0) (x x) (eta x-0))+ (deflistener (exp (gen) (mul x x-0)))+ (deflistener (cat (exp (gen) x-0) x))+ (precedes ((0 0) (3 0)) ((1 0) (3 0)) ((1 2) (0 1)) ((2 1) (1 1))+ ((3 1) (2 0)))+ (non-orig (privk a) (privk b))+ (uniq-gen x x-0)+ (operation nonce-test (added-listener (cat (exp (gen) x-0) x))+ (exp (gen) (mul x x-0)) (2 0))+ (strand-map 0 1 2)+ (traces+ ((send (exp (gen) x-0))+ (recv+ (cat (exp (gen) x)+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk a))+ (exp (gen) (mul x x-0)))))+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) x-0)+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk b-0))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0)))))+ ((recv (exp (gen) (mul x x-0))) (send (exp (gen) (mul x x-0))))+ ((recv (cat (exp (gen) x-0) x)) (send (cat (exp (gen) x-0) x))))+ (label 5)+ (parent 3)+ (unrealized (3 0))+ (dead)+ (maps ((0) ((a a) (b b) (x x-0) (y x))))+ (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol station-weak diffie-hellman+ (defrole init+ (vars (x rndx) (eta expt) (a b name))+ (trace (send (exp (gen) x))+ (recv+ (cat (exp (gen) eta)+ (enc (enc (exp (gen) eta) (exp (gen) x) (privk b))+ (exp (gen) (mul x eta)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) eta) (privk a))+ (exp (gen) (mul x eta)))) (send (privk a))))+ (defrole resp+ (vars (y rndx) (chi expt) (a b name))+ (trace (recv (exp (gen) chi))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) chi) (privk b))+ (exp (gen) (mul y chi)))))+ (recv+ (enc (enc (exp (gen) chi) (exp (gen) y) (privk a))+ (exp (gen) (mul y chi)))) (send (privk b))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false)))))++(defskeleton station-weak+ (vars (a b name) (x y rndx))+ (defstrand resp 3 (a a) (b b) (y y) (chi x))+ (non-orig (privk a) (privk b))+ (uniq-gen x y)+ (traces+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (recv+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y))))))+ (label 6)+ (unrealized (0 2))+ (maps ((0) ((a a) (b b) (x x) (y y))))+ (origs)+ (ugens (y (0 1)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton station-weak+ (vars (a b b-0 name) (x y rndx))+ (defstrand resp 3 (a a) (b b) (y y) (chi x))+ (defstrand init 3 (a a) (b b-0) (x x) (eta y))+ (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2)))+ (non-orig (privk a) (privk b))+ (uniq-gen x y)+ (operation encryption-test (added-strand init 3)+ (enc (exp (gen) x) (exp (gen) y) (privk a)) (0 2))+ (strand-map 0)+ (traces+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (recv+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))))+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b-0))+ (exp (gen) (mul x y)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y))))))+ (label 7)+ (parent 6)+ (unrealized (1 1))+ (maps ((0) ((a a) (b b) (x x) (y y))))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton station-weak+ (vars (a b name) (y x rndx))+ (defstrand resp 3 (a a) (b b) (y y) (chi x))+ (defstrand init 3 (a a) (b b) (x x) (eta y))+ (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2)))+ (non-orig (privk a) (privk b))+ (uniq-gen y x)+ (operation encryption-test (displaced 2 0 resp 2)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b-0))+ (exp (gen) (mul y x))) (1 1))+ (strand-map 0 1)+ (traces+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul y x)))))+ (recv+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul y x)))))+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul y x)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul y x))))))+ (label 8)+ (parent 7)+ (realized)+ (shape)+ (maps ((0) ((a a) (b b) (x x) (y y))))+ (origs)+ (ugens (x (1 0)) (y (0 1))))++(defskeleton station-weak+ (vars (a b b-0 name) (x y rndx))+ (defstrand resp 3 (a a) (b b) (y y) (chi x))+ (defstrand init 3 (a a) (b b-0) (x x) (eta y))+ (deflistener (exp (gen) (mul x y)))+ (precedes ((0 1) (2 0)) ((1 0) (0 0)) ((1 2) (0 2)) ((2 1) (1 1)))+ (non-orig (privk a) (privk b))+ (uniq-gen x y)+ (operation encryption-test (added-listener (exp (gen) (mul x y)))+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b-0))+ (exp (gen) (mul x y))) (1 1))+ (strand-map 0 1)+ (traces+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (recv+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))))+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b-0))+ (exp (gen) (mul x y)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))))+ ((recv (exp (gen) (mul x y))) (send (exp (gen) (mul x y)))))+ (label 9)+ (parent 7)+ (unrealized (2 0))+ (maps ((0) ((a a) (b b) (x x) (y y))))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton station-weak+ (vars (a b b-0 name) (x y rndx))+ (defstrand resp 3 (a a) (b b) (y y) (chi x))+ (defstrand init 3 (a a) (b b-0) (x x) (eta y))+ (deflistener (exp (gen) (mul x y)))+ (deflistener (cat (exp (gen) x) y))+ (precedes ((0 1) (3 0)) ((1 0) (0 0)) ((1 2) (0 2)) ((2 1) (1 1))+ ((3 1) (2 0)))+ (non-orig (privk a) (privk b))+ (uniq-gen x y)+ (operation nonce-test (added-listener (cat (exp (gen) x) y))+ (exp (gen) (mul x y)) (2 0))+ (strand-map 0 1 2)+ (traces+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (recv+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))))+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b-0))+ (exp (gen) (mul x y)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))))+ ((recv (exp (gen) (mul x y))) (send (exp (gen) (mul x y))))+ ((recv (cat (exp (gen) x) y)) (send (cat (exp (gen) x) y))))+ (label 10)+ (parent 9)+ (unrealized (3 0))+ (dead)+ (maps ((0) ((a a) (b b) (x x) (y y))))+ (comment "empty cohort"))++(defskeleton station-weak+ (vars (a b b-0 name) (x y rndx))+ (defstrand resp 3 (a a) (b b) (y y) (chi x))+ (defstrand init 3 (a a) (b b-0) (x x) (eta y))+ (deflistener (exp (gen) (mul x y)))+ (deflistener (cat (exp (gen) y) x))+ (precedes ((0 1) (3 0)) ((1 0) (0 0)) ((1 2) (0 2)) ((2 1) (1 1))+ ((3 1) (2 0)))+ (non-orig (privk a) (privk b))+ (uniq-gen x y)+ (operation nonce-test (added-listener (cat (exp (gen) y) x))+ (exp (gen) (mul x y)) (2 0))+ (strand-map 0 1 2)+ (traces+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (recv+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))))+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b-0))+ (exp (gen) (mul x y)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))))+ ((recv (exp (gen) (mul x y))) (send (exp (gen) (mul x y))))+ ((recv (cat (exp (gen) y) x)) (send (cat (exp (gen) y) x))))+ (label 11)+ (parent 9)+ (unrealized (3 0))+ (dead)+ (maps ((0) ((a a) (b b) (x x) (y y))))+ (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol station-weak diffie-hellman+ (defrole init+ (vars (x rndx) (eta expt) (a b name))+ (trace (send (exp (gen) x))+ (recv+ (cat (exp (gen) eta)+ (enc (enc (exp (gen) eta) (exp (gen) x) (privk b))+ (exp (gen) (mul x eta)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) eta) (privk a))+ (exp (gen) (mul x eta)))) (send (privk a))))+ (defrole resp+ (vars (y rndx) (chi expt) (a b name))+ (trace (recv (exp (gen) chi))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) chi) (privk b))+ (exp (gen) (mul y chi)))))+ (recv+ (enc (enc (exp (gen) chi) (exp (gen) y) (privk a))+ (exp (gen) (mul y chi)))) (send (privk b))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false)))))++(defskeleton station-weak+ (vars (a b name) (x y rndx))+ (defstrand init 3 (a a) (b b) (x x) (eta y))+ (deflistener (exp (gen) (mul x y)))+ (non-orig (privk a) (privk b))+ (uniq-gen x y)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))))+ ((recv (exp (gen) (mul x y))) (send (exp (gen) (mul x y)))))+ (label 12)+ (unrealized (0 1) (1 0))+ (preskeleton)+ (maps ((0 1) ((a a) (b b) (x x) (y y))))+ (origs)+ (ugens (x (0 0)))+ (comment "Not a skeleton"))++(defskeleton station-weak+ (vars (a b name) (x y rndx))+ (defstrand init 3 (a a) (b b) (x x) (eta y))+ (deflistener (exp (gen) (mul x y)))+ (precedes ((0 0) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-gen x y)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))))+ ((recv (exp (gen) (mul x y))) (send (exp (gen) (mul x y)))))+ (label 13)+ (parent 12)+ (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (x x) (y y))))+ (origs)+ (ugens (x (0 0)))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton station-weak+ (vars (a b b-0 name) (x x-0 rndx))+ (defstrand init 3 (a a) (b b) (x x-0) (eta x))+ (deflistener (exp (gen) (mul x x-0)))+ (defstrand init 3 (a b) (b b-0) (x x) (eta x-0))+ (precedes ((0 0) (1 0)) ((0 0) (2 1)) ((2 0) (1 0)) ((2 2) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-gen x x-0)+ (operation encryption-test (added-strand init 3)+ (enc (exp (gen) x) (exp (gen) x-0) (privk b)) (0 1))+ (strand-map 0 1)+ (traces+ ((send (exp (gen) x-0))+ (recv+ (cat (exp (gen) x)+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk a))+ (exp (gen) (mul x x-0)))))+ ((recv (exp (gen) (mul x x-0))) (send (exp (gen) (mul x x-0))))+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) x-0)+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk b-0))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0))))))+ (label 14)+ (parent 13)+ (unrealized (1 0) (2 1))+ (maps ((0 1) ((a a) (b b) (x x-0) (y x))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton station-weak+ (vars (a b name) (y x rndx))+ (defstrand init 3 (a a) (b b) (x x) (eta y))+ (deflistener (exp (gen) (mul y x)))+ (defstrand resp 2 (b b) (y y) (chi x))+ (precedes ((0 0) (2 0)) ((2 1) (0 1)) ((2 1) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-gen y x)+ (operation encryption-test (added-strand resp 2)+ (enc (exp (gen) y) (exp (gen) x) (privk b)) (0 1))+ (strand-map 0 1)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul y x)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul y x)))))+ ((recv (exp (gen) (mul y x))) (send (exp (gen) (mul y x))))+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul y x)))))))+ (label 15)+ (parent 13)+ (unrealized (1 0))+ (maps ((0 1) ((a a) (b b) (x x) (y y))))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton station-weak+ (vars (a b b-0 name) (x x-0 rndx))+ (defstrand init 3 (a a) (b b) (x x-0) (eta x))+ (deflistener (exp (gen) (mul x x-0)))+ (defstrand init 3 (a b) (b b-0) (x x) (eta x-0))+ (deflistener (exp (gen) (mul x x-0)))+ (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((2 0) (1 0)) ((2 0) (3 0))+ ((2 2) (0 1)) ((3 1) (2 1)))+ (non-orig (privk a) (privk b))+ (uniq-gen x x-0)+ (operation encryption-test (added-listener (exp (gen) (mul x x-0)))+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk b-0))+ (exp (gen) (mul x x-0))) (2 1))+ (strand-map 0 1 2)+ (traces+ ((send (exp (gen) x-0))+ (recv+ (cat (exp (gen) x)+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk a))+ (exp (gen) (mul x x-0)))))+ ((recv (exp (gen) (mul x x-0))) (send (exp (gen) (mul x x-0))))+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) x-0)+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk b-0))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0)))))+ ((recv (exp (gen) (mul x x-0))) (send (exp (gen) (mul x x-0)))))+ (label 16)+ (parent 14)+ (unrealized (1 0) (3 0))+ (maps ((0 1) ((a a) (b b) (x x-0) (y x))))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton station-weak+ (vars (a b name) (y x rndx))+ (defstrand init 3 (a a) (b b) (x x) (eta y))+ (deflistener (exp (gen) (mul y x)))+ (defstrand resp 2 (b b) (y y) (chi x))+ (deflistener (cat (exp (gen) y) x))+ (precedes ((0 0) (2 0)) ((2 1) (0 1)) ((2 1) (3 0)) ((3 1) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-gen y x)+ (operation nonce-test (added-listener (cat (exp (gen) y) x))+ (exp (gen) (mul y x)) (1 0))+ (strand-map 0 1 2)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul y x)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul y x)))))+ ((recv (exp (gen) (mul y x))) (send (exp (gen) (mul y x))))+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul y x))))))+ ((recv (cat (exp (gen) y) x)) (send (cat (exp (gen) y) x))))+ (label 17)+ (parent 15)+ (unrealized (3 0))+ (dead)+ (maps ((0 1) ((a a) (b b) (x x) (y y))))+ (comment "empty cohort"))++(defskeleton station-weak+ (vars (a b name) (y x rndx))+ (defstrand init 3 (a a) (b b) (x x) (eta y))+ (deflistener (exp (gen) (mul y x)))+ (defstrand resp 2 (b b) (y y) (chi x))+ (deflistener (cat (exp (gen) x) y))+ (precedes ((0 0) (2 0)) ((2 1) (0 1)) ((2 1) (3 0)) ((3 1) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-gen y x)+ (operation nonce-test (added-listener (cat (exp (gen) x) y))+ (exp (gen) (mul y x)) (1 0))+ (strand-map 0 1 2)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul y x)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul y x)))))+ ((recv (exp (gen) (mul y x))) (send (exp (gen) (mul y x))))+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul y x))))))+ ((recv (cat (exp (gen) x) y)) (send (cat (exp (gen) x) y))))+ (label 18)+ (parent 15)+ (unrealized (3 0))+ (dead)+ (maps ((0 1) ((a a) (b b) (x x) (y y))))+ (comment "empty cohort"))++(defskeleton station-weak+ (vars (a b b-0 name) (x x-0 rndx))+ (defstrand init 3 (a a) (b b) (x x-0) (eta x))+ (deflistener (exp (gen) (mul x x-0)))+ (defstrand init 3 (a b) (b b-0) (x x) (eta x-0))+ (deflistener (exp (gen) (mul x x-0)))+ (deflistener (cat (exp (gen) x) x-0))+ (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((2 0) (1 0)) ((2 0) (4 0))+ ((2 2) (0 1)) ((3 1) (2 1)) ((4 1) (3 0)))+ (non-orig (privk a) (privk b))+ (uniq-gen x x-0)+ (operation nonce-test (added-listener (cat (exp (gen) x) x-0))+ (exp (gen) (mul x x-0)) (3 0))+ (strand-map 0 1 2 3)+ (traces+ ((send (exp (gen) x-0))+ (recv+ (cat (exp (gen) x)+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk a))+ (exp (gen) (mul x x-0)))))+ ((recv (exp (gen) (mul x x-0))) (send (exp (gen) (mul x x-0))))+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) x-0)+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk b-0))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0)))))+ ((recv (exp (gen) (mul x x-0))) (send (exp (gen) (mul x x-0))))+ ((recv (cat (exp (gen) x) x-0)) (send (cat (exp (gen) x) x-0))))+ (label 19)+ (parent 16)+ (unrealized (1 0) (4 0))+ (dead)+ (maps ((0 1) ((a a) (b b) (x x-0) (y x))))+ (comment "empty cohort"))++(defskeleton station-weak+ (vars (a b b-0 name) (x x-0 rndx))+ (defstrand init 3 (a a) (b b) (x x-0) (eta x))+ (deflistener (exp (gen) (mul x x-0)))+ (defstrand init 3 (a b) (b b-0) (x x) (eta x-0))+ (deflistener (exp (gen) (mul x x-0)))+ (deflistener (cat (exp (gen) x-0) x))+ (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((2 0) (1 0)) ((2 0) (4 0))+ ((2 2) (0 1)) ((3 1) (2 1)) ((4 1) (3 0)))+ (non-orig (privk a) (privk b))+ (uniq-gen x x-0)+ (operation nonce-test (added-listener (cat (exp (gen) x-0) x))+ (exp (gen) (mul x x-0)) (3 0))+ (strand-map 0 1 2 3)+ (traces+ ((send (exp (gen) x-0))+ (recv+ (cat (exp (gen) x)+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk a))+ (exp (gen) (mul x x-0)))))+ ((recv (exp (gen) (mul x x-0))) (send (exp (gen) (mul x x-0))))+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) x-0)+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk b-0))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0)))))+ ((recv (exp (gen) (mul x x-0))) (send (exp (gen) (mul x x-0))))+ ((recv (cat (exp (gen) x-0) x)) (send (cat (exp (gen) x-0) x))))+ (label 20)+ (parent 16)+ (unrealized (1 0) (4 0))+ (dead)+ (maps ((0 1) ((a a) (b b) (x x-0) (y x))))+ (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol station-weak diffie-hellman+ (defrole init+ (vars (x rndx) (eta expt) (a b name))+ (trace (send (exp (gen) x))+ (recv+ (cat (exp (gen) eta)+ (enc (enc (exp (gen) eta) (exp (gen) x) (privk b))+ (exp (gen) (mul x eta)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) eta) (privk a))+ (exp (gen) (mul x eta)))) (send (privk a))))+ (defrole resp+ (vars (y rndx) (chi expt) (a b name))+ (trace (recv (exp (gen) chi))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) chi) (privk b))+ (exp (gen) (mul y chi)))))+ (recv+ (enc (enc (exp (gen) chi) (exp (gen) y) (privk a))+ (exp (gen) (mul y chi)))) (send (privk b))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false)))))++(defskeleton station-weak+ (vars (a b name) (x rndx) (eta expt))+ (defstrand init 3 (a a) (b b) (x x) (eta eta))+ (deflistener (exp (gen) (mul x eta)))+ (non-orig (privk a) (privk b))+ (uniq-gen x)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) eta)+ (enc (enc (exp (gen) eta) (exp (gen) x) (privk b))+ (exp (gen) (mul x eta)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) eta) (privk a))+ (exp (gen) (mul x eta)))))+ ((recv (exp (gen) (mul x eta))) (send (exp (gen) (mul x eta)))))+ (label 21)+ (unrealized (0 1) (1 0))+ (preskeleton)+ (maps ((0 1) ((a a) (b b) (x x) (eta eta))))+ (origs)+ (ugens (x (0 0)))+ (comment "Not a skeleton"))++(defskeleton station-weak+ (vars (a b name) (x rndx) (eta expt))+ (defstrand init 3 (a a) (b b) (x x) (eta eta))+ (deflistener (exp (gen) (mul x eta)))+ (precedes ((0 0) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-gen x)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) eta)+ (enc (enc (exp (gen) eta) (exp (gen) x) (privk b))+ (exp (gen) (mul x eta)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) eta) (privk a))+ (exp (gen) (mul x eta)))))+ ((recv (exp (gen) (mul x eta))) (send (exp (gen) (mul x eta)))))+ (label 22)+ (parent 21)+ (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (x x) (eta eta))))+ (origs)+ (ugens (x (0 0)))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton station-weak+ (vars (a b b-0 name) (x x-0 rndx))+ (defstrand init 3 (a a) (b b) (x x-0) (eta x))+ (deflistener (exp (gen) (mul x x-0)))+ (defstrand init 3 (a b) (b b-0) (x x) (eta x-0))+ (precedes ((0 0) (1 0)) ((0 0) (2 1)) ((2 2) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-gen x-0)+ (operation encryption-test (added-strand init 3)+ (enc (exp (gen) x) (exp (gen) x-0) (privk b)) (0 1))+ (strand-map 0 1)+ (traces+ ((send (exp (gen) x-0))+ (recv+ (cat (exp (gen) x)+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk a))+ (exp (gen) (mul x x-0)))))+ ((recv (exp (gen) (mul x x-0))) (send (exp (gen) (mul x x-0))))+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) x-0)+ (enc (enc (exp (gen) x-0) (exp (gen) x) (privk b-0))+ (exp (gen) (mul x x-0)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) x-0) (privk b))+ (exp (gen) (mul x x-0))))))+ (label 23)+ (parent 22)+ (realized)+ (shape)+ (maps ((0 1) ((a a) (b b) (x x-0) (eta x))))+ (origs)+ (ugens (x-0 (0 0))))++(defskeleton station-weak+ (vars (a b name) (y x rndx))+ (defstrand init 3 (a a) (b b) (x x) (eta y))+ (deflistener (exp (gen) (mul y x)))+ (defstrand resp 2 (b b) (y y) (chi x))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((2 1) (0 1)))+ (non-orig (privk a) (privk b))+ (uniq-gen x)+ (operation encryption-test (added-strand resp 2)+ (enc (exp (gen) y) (exp (gen) x) (privk b)) (0 1))+ (strand-map 0 1)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul y x)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul y x)))))+ ((recv (exp (gen) (mul y x))) (send (exp (gen) (mul y x))))+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul y x)))))))+ (label 24)+ (parent 22)+ (realized)+ (shape)+ (maps ((0 1) ((a a) (b b) (x x) (eta y))))+ (origs)+ (ugens (x (0 0))))++(comment "Nothing left to do")++(defprotocol station-weak diffie-hellman+ (defrole init+ (vars (x rndx) (eta expt) (a b name))+ (trace (send (exp (gen) x))+ (recv+ (cat (exp (gen) eta)+ (enc (enc (exp (gen) eta) (exp (gen) x) (privk b))+ (exp (gen) (mul x eta)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) eta) (privk a))+ (exp (gen) (mul x eta)))) (send (privk a))))+ (defrole resp+ (vars (y rndx) (chi expt) (a b name))+ (trace (recv (exp (gen) chi))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) chi) (privk b))+ (exp (gen) (mul y chi)))))+ (recv+ (enc (enc (exp (gen) chi) (exp (gen) y) (privk a))+ (exp (gen) (mul y chi)))) (send (privk b))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false)))))++(defskeleton station-weak+ (vars (a b name) (y rndx) (chi expt))+ (defstrand resp 3 (a a) (b b) (y y) (chi chi))+ (deflistener (exp (gen) (mul y chi)))+ (non-orig (privk a) (privk b))+ (uniq-gen y)+ (traces+ ((recv (exp (gen) chi))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) chi) (privk b))+ (exp (gen) (mul y chi)))))+ (recv+ (enc (enc (exp (gen) chi) (exp (gen) y) (privk a))+ (exp (gen) (mul y chi)))))+ ((recv (exp (gen) (mul y chi))) (send (exp (gen) (mul y chi)))))+ (label 25)+ (unrealized (0 2) (1 0))+ (preskeleton)+ (maps ((0 1) ((a a) (b b) (y y) (chi chi))))+ (origs)+ (ugens (y (0 1)))+ (comment "Not a skeleton"))++(defskeleton station-weak+ (vars (a b name) (y rndx) (chi expt))+ (defstrand resp 3 (a a) (b b) (y y) (chi chi))+ (deflistener (exp (gen) (mul y chi)))+ (precedes ((0 1) (1 0)))+ (non-orig (privk a) (privk b))+ (uniq-gen y)+ (traces+ ((recv (exp (gen) chi))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) chi) (privk b))+ (exp (gen) (mul y chi)))))+ (recv+ (enc (enc (exp (gen) chi) (exp (gen) y) (privk a))+ (exp (gen) (mul y chi)))))+ ((recv (exp (gen) (mul y chi))) (send (exp (gen) (mul y chi)))))+ (label 26)+ (parent 25)+ (unrealized (0 2))+ (maps ((0 1) ((a a) (b b) (y y) (chi chi))))+ (origs)+ (ugens (y (0 1)))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton station-weak+ (vars (a b b-0 name) (x y rndx))+ (defstrand resp 3 (a a) (b b) (y y) (chi x))+ (deflistener (exp (gen) (mul x y)))+ (defstrand init 3 (a a) (b b-0) (x x) (eta y))+ (precedes ((0 1) (1 0)) ((0 1) (2 1)) ((2 2) (0 2)))+ (non-orig (privk a) (privk b))+ (uniq-gen y)+ (operation encryption-test (added-strand init 3)+ (enc (exp (gen) x) (exp (gen) y) (privk a)) (0 2))+ (strand-map 0 1)+ (traces+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (recv+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))))+ ((recv (exp (gen) (mul x y))) (send (exp (gen) (mul x y))))+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b-0))+ (exp (gen) (mul x y)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y))))))+ (label 27)+ (parent 26)+ (realized)+ (shape)+ (maps ((0 1) ((a a) (b b) (y y) (chi x))))+ (origs)+ (ugens (y (0 1))))++(defskeleton station-weak+ (vars (a b name) (y y-0 rndx))+ (defstrand resp 3 (a a) (b b) (y y-0) (chi y))+ (deflistener (exp (gen) (mul y y-0)))+ (defstrand resp 2 (b a) (y y) (chi y-0))+ (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((2 1) (0 2)))+ (non-orig (privk a) (privk b))+ (uniq-gen y-0)+ (operation encryption-test (added-strand resp 2)+ (enc (exp (gen) y) (exp (gen) y-0) (privk a)) (0 2))+ (strand-map 0 1)+ (traces+ ((recv (exp (gen) y))+ (send+ (cat (exp (gen) y-0)+ (enc (enc (exp (gen) y-0) (exp (gen) y) (privk b))+ (exp (gen) (mul y y-0)))))+ (recv+ (enc (enc (exp (gen) y) (exp (gen) y-0) (privk a))+ (exp (gen) (mul y y-0)))))+ ((recv (exp (gen) (mul y y-0))) (send (exp (gen) (mul y y-0))))+ ((recv (exp (gen) y-0))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) y-0) (privk a))+ (exp (gen) (mul y y-0)))))))+ (label 28)+ (parent 26)+ (realized)+ (shape)+ (maps ((0 1) ((a a) (b b) (y y-0) (chi y))))+ (origs)+ (ugens (y-0 (0 1))))++(comment "Nothing left to do")++(defprotocol station-weak diffie-hellman+ (defrole init+ (vars (x rndx) (eta expt) (a b name))+ (trace (send (exp (gen) x))+ (recv+ (cat (exp (gen) eta)+ (enc (enc (exp (gen) eta) (exp (gen) x) (privk b))+ (exp (gen) (mul x eta)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) eta) (privk a))+ (exp (gen) (mul x eta)))) (send (privk a))))+ (defrole resp+ (vars (y rndx) (chi expt) (a b name))+ (trace (recv (exp (gen) chi))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) chi) (privk b))+ (exp (gen) (mul y chi)))))+ (recv+ (enc (enc (exp (gen) chi) (exp (gen) y) (privk a))+ (exp (gen) (mul y chi)))) (send (privk b))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false)))))++(defskeleton station-weak+ (vars (a b a-0 name) (x y rndx))+ (defstrand init 4 (a a) (b b) (x x) (eta y))+ (defstrand resp 4 (a a-0) (b b) (y y) (chi x))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (uniq-orig (privk a) (privk b))+ (uniq-gen x y)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))) (send (privk a)))+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (recv+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a-0))+ (exp (gen) (mul x y)))) (send (privk b))))+ (label 29)+ (unrealized (1 2))+ (maps ((0 1) ((a a) (b b) (x x) (y y) (a-0 a-0))))+ (origs ((privk b) (1 3)) ((privk a) (0 3)))+ (ugens (x (0 0)) (y (1 1)))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton station-weak+ (vars (a b name) (x y rndx))+ (defstrand init 4 (a a) (b b) (x x) (eta y))+ (defstrand resp 4 (a a) (b b) (y y) (chi x))+ (precedes ((0 0) (1 0)) ((0 2) (1 2)) ((1 1) (0 1)))+ (uniq-orig (privk a) (privk b))+ (uniq-gen x y)+ (operation encryption-test (displaced 2 0 init 3)+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a-0))+ (exp (gen) (mul x y))) (1 2))+ (strand-map 0 1)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))) (send (privk a)))+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (recv+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))) (send (privk b))))+ (label 30)+ (parent 29)+ (realized)+ (shape)+ (maps ((0 1) ((a a) (b b) (x x) (y y) (a-0 a))))+ (origs ((privk b) (1 3)) ((privk a) (0 3)))+ (ugens (x (0 0)) (y (1 1))))++(defskeleton station-weak+ (vars (a b a-0 name) (x y rndx))+ (defstrand init 4 (a a) (b b) (x x) (eta y))+ (defstrand resp 4 (a a-0) (b b) (y y) (chi x))+ (deflistener (exp (gen) (mul x y)))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)) ((1 1) (2 0)) ((2 1) (1 2)))+ (uniq-orig (privk a) (privk b))+ (uniq-gen x y)+ (operation encryption-test (added-listener (exp (gen) (mul x y)))+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a-0))+ (exp (gen) (mul x y))) (1 2))+ (strand-map 0 1)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))) (send (privk a)))+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (recv+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a-0))+ (exp (gen) (mul x y)))) (send (privk b)))+ ((recv (exp (gen) (mul x y))) (send (exp (gen) (mul x y)))))+ (label 31)+ (parent 29)+ (unrealized (2 0))+ (maps ((0 1) ((a a) (b b) (x x) (y y) (a-0 a-0))))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton station-weak+ (vars (a b a-0 name) (x y rndx))+ (defstrand init 4 (a a) (b b) (x x) (eta y))+ (defstrand resp 4 (a a-0) (b b) (y y) (chi x))+ (deflistener (exp (gen) (mul x y)))+ (deflistener (cat (exp (gen) x) y))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)) ((1 1) (3 0)) ((2 1) (1 2))+ ((3 1) (2 0)))+ (uniq-orig (privk a) (privk b))+ (uniq-gen x y)+ (operation nonce-test (added-listener (cat (exp (gen) x) y))+ (exp (gen) (mul x y)) (2 0))+ (strand-map 0 1 2)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))) (send (privk a)))+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (recv+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a-0))+ (exp (gen) (mul x y)))) (send (privk b)))+ ((recv (exp (gen) (mul x y))) (send (exp (gen) (mul x y))))+ ((recv (cat (exp (gen) x) y)) (send (cat (exp (gen) x) y))))+ (label 32)+ (parent 31)+ (unrealized (3 0))+ (dead)+ (maps ((0 1) ((a a) (b b) (x x) (y y) (a-0 a-0))))+ (comment "empty cohort"))++(defskeleton station-weak+ (vars (a b a-0 name) (x y rndx))+ (defstrand init 4 (a a) (b b) (x x) (eta y))+ (defstrand resp 4 (a a-0) (b b) (y y) (chi x))+ (deflistener (exp (gen) (mul x y)))+ (deflistener (cat (exp (gen) y) x))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)) ((1 1) (3 0)) ((2 1) (1 2))+ ((3 1) (2 0)))+ (uniq-orig (privk a) (privk b))+ (uniq-gen x y)+ (operation nonce-test (added-listener (cat (exp (gen) y) x))+ (exp (gen) (mul x y)) (2 0))+ (strand-map 0 1 2)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))) (send (privk a)))+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (recv+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a-0))+ (exp (gen) (mul x y)))) (send (privk b)))+ ((recv (exp (gen) (mul x y))) (send (exp (gen) (mul x y))))+ ((recv (cat (exp (gen) y) x)) (send (cat (exp (gen) y) x))))+ (label 33)+ (parent 31)+ (unrealized (3 0))+ (dead)+ (maps ((0 1) ((a a) (b b) (x x) (y y) (a-0 a-0))))+ (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol station-weak diffie-hellman+ (defrole init+ (vars (x rndx) (eta expt) (a b name))+ (trace (send (exp (gen) x))+ (recv+ (cat (exp (gen) eta)+ (enc (enc (exp (gen) eta) (exp (gen) x) (privk b))+ (exp (gen) (mul x eta)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) eta) (privk a))+ (exp (gen) (mul x eta)))) (send (privk a))))+ (defrole resp+ (vars (y rndx) (chi expt) (a b name))+ (trace (recv (exp (gen) chi))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) chi) (privk b))+ (exp (gen) (mul y chi)))))+ (recv+ (enc (enc (exp (gen) chi) (exp (gen) y) (privk a))+ (exp (gen) (mul y chi)))) (send (privk b))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false)))))++(defskeleton station-weak+ (vars (a b a-0 name) (x y rndx))+ (defstrand init 4 (a a) (b b) (x x) (eta y))+ (defstrand resp 4 (a a-0) (b b) (y y) (chi x))+ (deflistener (exp (gen) (mul x y)))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (uniq-orig (privk a) (privk b))+ (uniq-gen x y)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))) (send (privk a)))+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (recv+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a-0))+ (exp (gen) (mul x y)))) (send (privk b)))+ ((recv (exp (gen) (mul x y))) (send (exp (gen) (mul x y)))))+ (label 34)+ (unrealized (1 2) (2 0))+ (preskeleton)+ (maps ((0 1 2) ((a a) (b b) (x x) (y y) (a-0 a-0))))+ (origs ((privk b) (1 3)) ((privk a) (0 3)))+ (ugens (x (0 0)) (y (1 1)))+ (comment "Not a skeleton"))++(defskeleton station-weak+ (vars (a b a-0 name) (x y rndx))+ (defstrand init 4 (a a) (b b) (x x) (eta y))+ (defstrand resp 4 (a a-0) (b b) (y y) (chi x))+ (deflistener (exp (gen) (mul x y)))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)) ((1 1) (2 0)))+ (uniq-orig (privk a) (privk b))+ (uniq-gen x y)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))) (send (privk a)))+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (recv+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a-0))+ (exp (gen) (mul x y)))) (send (privk b)))+ ((recv (exp (gen) (mul x y))) (send (exp (gen) (mul x y)))))+ (label 35)+ (parent 34)+ (unrealized (1 2) (2 0))+ (maps ((0 1 2) ((a a) (b b) (x x) (y y) (a-0 a-0))))+ (origs ((privk b) (1 3)) ((privk a) (0 3)))+ (ugens (x (0 0)) (y (1 1)))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton station-weak+ (vars (a b a-0 name) (x y rndx))+ (defstrand init 4 (a a) (b b) (x x) (eta y))+ (defstrand resp 4 (a a-0) (b b) (y y) (chi x))+ (deflistener (exp (gen) (mul x y)))+ (deflistener (cat (exp (gen) x) y))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)) ((1 1) (3 0)) ((3 1) (2 0)))+ (uniq-orig (privk a) (privk b))+ (uniq-gen x y)+ (operation nonce-test (added-listener (cat (exp (gen) x) y))+ (exp (gen) (mul x y)) (2 0))+ (strand-map 0 1 2)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))) (send (privk a)))+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (recv+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a-0))+ (exp (gen) (mul x y)))) (send (privk b)))+ ((recv (exp (gen) (mul x y))) (send (exp (gen) (mul x y))))+ ((recv (cat (exp (gen) x) y)) (send (cat (exp (gen) x) y))))+ (label 36)+ (parent 35)+ (unrealized (1 2) (3 0))+ (dead)+ (maps ((0 1 2) ((a a) (b b) (x x) (y y) (a-0 a-0))))+ (comment "empty cohort"))++(defskeleton station-weak+ (vars (a b a-0 name) (x y rndx))+ (defstrand init 4 (a a) (b b) (x x) (eta y))+ (defstrand resp 4 (a a-0) (b b) (y y) (chi x))+ (deflistener (exp (gen) (mul x y)))+ (deflistener (cat (exp (gen) y) x))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)) ((1 1) (3 0)) ((3 1) (2 0)))+ (uniq-orig (privk a) (privk b))+ (uniq-gen x y)+ (operation nonce-test (added-listener (cat (exp (gen) y) x))+ (exp (gen) (mul x y)) (2 0))+ (strand-map 0 1 2)+ (traces+ ((send (exp (gen) x))+ (recv+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (send+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a))+ (exp (gen) (mul x y)))) (send (privk a)))+ ((recv (exp (gen) x))+ (send+ (cat (exp (gen) y)+ (enc (enc (exp (gen) y) (exp (gen) x) (privk b))+ (exp (gen) (mul x y)))))+ (recv+ (enc (enc (exp (gen) x) (exp (gen) y) (privk a-0))+ (exp (gen) (mul x y)))) (send (privk b)))+ ((recv (exp (gen) (mul x y))) (send (exp (gen) (mul x y))))+ ((recv (cat (exp (gen) y) x)) (send (cat (exp (gen) y) x))))+ (label 37)+ (parent 35)+ (unrealized (1 2) (3 0))+ (dead)+ (maps ((0 1 2) ((a a) (b b) (x x) (y y) (a-0 a-0))))+ (comment "empty cohort"))++(comment "Nothing left to do")
tst/sts_weakened_reflect.tst view
@@ -1,7 +1,7 @@ (herald "station-to-station-reflect protocol" (bound 20) (algebra diffie-hellman)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/sts_weakened_reflect.scm") (comment "Strand count bounded at 20") @@ -52,6 +52,7 @@ (exp (gen) (mul x eta)))))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (x x) (eta eta)))) (origs) (ugens (x (0 0))) (comment "1 in cohort - 1 not yet seen"))@@ -139,6 +140,7 @@ (exp (gen) (mul y chi)))))) (label 2) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (y y) (chi chi)))) (origs) (ugens (y (0 1))) (comment "2 in cohort - 2 not yet seen"))@@ -174,6 +176,7 @@ (label 3) (parent 2) (unrealized (1 1))+ (maps ((0) ((a a) (b b) (y y) (chi x)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton station-to-station-reflect@@ -273,6 +276,7 @@ (label 6) (parent 3) (unrealized (2 0))+ (maps ((0) ((a a) (b b) (y y) (chi x)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton station-to-station-reflect@@ -312,6 +316,7 @@ (parent 6) (unrealized (3 0)) (dead)+ (maps ((0) ((a a) (b b) (y y) (chi x)))) (comment "empty cohort")) (defskeleton station-to-station-reflect@@ -351,6 +356,7 @@ (parent 6) (unrealized (3 0)) (dead)+ (maps ((0) ((a a) (b b) (y y) (chi x)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -405,6 +411,7 @@ (label 9) (unrealized (0 1) (1 0)) (preskeleton)+ (maps ((0 1) ((a a) (b b) (x x) (eta eta)))) (origs) (ugens (x (0 0))) (comment "Not a skeleton"))@@ -429,6 +436,7 @@ (label 10) (parent 9) (unrealized (0 1))+ (maps ((0 1) ((a a) (b b) (x x) (eta eta)))) (origs) (ugens (x (0 0))) (comment "1 in cohort - 1 not yet seen"))@@ -463,6 +471,7 @@ (label 11) (parent 10) (unrealized (1 0))+ (maps ((0 1) ((a a) (b b) (x x) (eta y)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton station-to-station-reflect@@ -498,6 +507,7 @@ (parent 11) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (x x) (eta y)))) (comment "empty cohort")) (defskeleton station-to-station-reflect@@ -533,6 +543,7 @@ (parent 11) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (x x) (eta y)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -588,6 +599,7 @@ (label 14) (unrealized (0 2) (1 0)) (preskeleton)+ (maps ((0 1) ((a a) (b b) (y y) (chi chi)))) (origs) (ugens (y (0 1))) (comment "Not a skeleton"))@@ -613,6 +625,7 @@ (label 15) (parent 14) (unrealized (0 2))+ (maps ((0 1) ((a a) (b b) (y y) (chi chi)))) (origs) (ugens (y (0 1))) (comment "2 in cohort - 2 not yet seen"))@@ -650,6 +663,7 @@ (label 16) (parent 15) (unrealized (1 0) (2 1))+ (maps ((0 1) ((a a) (b b) (y y) (chi x)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton station-to-station-reflect@@ -715,6 +729,7 @@ (label 18) (parent 16) (unrealized (1 0))+ (maps ((0 1) ((a a) (b b) (y y) (chi x)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton station-to-station-reflect@@ -754,6 +769,7 @@ (label 19) (parent 16) (unrealized (1 0) (3 0))+ (maps ((0 1) ((a a) (b b) (y y) (chi x)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton station-to-station-reflect@@ -793,6 +809,7 @@ (parent 18) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (y y) (chi x)))) (comment "empty cohort")) (defskeleton station-to-station-reflect@@ -832,6 +849,7 @@ (parent 18) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (y y) (chi x)))) (comment "empty cohort")) (defskeleton station-to-station-reflect@@ -873,6 +891,7 @@ (parent 19) (unrealized (1 0) (4 0)) (dead)+ (maps ((0 1) ((a a) (b b) (y y) (chi x)))) (comment "empty cohort")) (defskeleton station-to-station-reflect@@ -914,6 +933,7 @@ (parent 19) (unrealized (1 0) (4 0)) (dead)+ (maps ((0 1) ((a a) (b b) (y y) (chi x)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -976,6 +996,7 @@ (exp (gen) (mul x y)))) (send (privk b)))) (label 24) (unrealized (1 2))+ (maps ((0 1) ((a a) (b b) (x x) (y y) (a-0 a-0)))) (origs ((privk b) (1 3)) ((privk a) (0 3))) (ugens (y (1 1)) (x (0 0))) (comment "3 in cohort - 3 not yet seen"))@@ -1088,6 +1109,7 @@ (label 27) (parent 24) (unrealized (2 0))+ (maps ((0 1) ((a a) (b b) (x x) (y y) (a-0 a-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton station-to-station-reflect@@ -1127,6 +1149,7 @@ (parent 27) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (x x) (y y) (a-0 a-0)))) (comment "empty cohort")) (defskeleton station-to-station-reflect@@ -1166,6 +1189,7 @@ (parent 27) (unrealized (3 0)) (dead)+ (maps ((0 1) ((a a) (b b) (x x) (y y) (a-0 a-0)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -1231,6 +1255,7 @@ (label 30) (unrealized (1 2) (2 0)) (preskeleton)+ (maps ((0 1 2) ((a a) (b b) (x x) (y y) (a-0 a-0)))) (origs ((privk b) (1 3)) ((privk a) (0 3))) (ugens (y (1 1)) (x (0 0))) (comment "Not a skeleton"))@@ -1265,6 +1290,7 @@ (label 31) (parent 30) (unrealized (1 2) (2 0))+ (maps ((0 1 2) ((a a) (b b) (x x) (y y) (a-0 a-0)))) (origs ((privk b) (1 3)) ((privk a) (0 3))) (ugens (y (1 1)) (x (0 0))) (comment "2 in cohort - 2 not yet seen"))@@ -1305,6 +1331,7 @@ (parent 31) (unrealized (1 2) (3 0)) (dead)+ (maps ((0 1 2) ((a a) (b b) (x x) (y y) (a-0 a-0)))) (comment "empty cohort")) (defskeleton station-to-station-reflect@@ -1343,6 +1370,7 @@ (parent 31) (unrealized (1 2) (3 0)) (dead)+ (maps ((0 1 2) ((a a) (b b) (x x) (y y) (a-0 a-0)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/subatomic-open-closed-test-genrule.tst view
@@ -1,6 +1,6 @@ (herald subatomic-open-closed-test-genrule (bound 40)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/subatomic-open-closed-test-genrule.scm") (comment "Strand count bounded at 40")@@ -49,18 +49,18 @@ (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z1 z2)))) (defrule same-dev-ls-lk (forall ((ls lk lk-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (and (fact same-dev ls lk-0) (fact same-dev ls lk)) (= lk lk-0)))) (defrule same-dev-lk-ls (forall ((lk ls ls-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (and (fact same-dev ls-0 lk) (fact same-dev ls lk)) (= ls ls-0)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -88,9 +88,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -329,6 +328,7 @@ (label 0) (unrealized (0 1) (1 0)) (preskeleton)+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (origs (k (0 0))) (comment "Not a skeleton")) @@ -345,6 +345,7 @@ (label 1) (parent 0) (unrealized (0 1) (1 0))+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (origs (k (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -374,6 +375,7 @@ (parent 1) (unrealized (0 1) (1 0)) (dead)+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -422,18 +424,18 @@ (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z1 z2)))) (defrule same-dev-ls-lk (forall ((ls lk lk-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (and (fact same-dev ls lk-0) (fact same-dev ls lk)) (= lk lk-0)))) (defrule same-dev-lk-ls (forall ((lk ls ls-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (and (fact same-dev ls-0 lk) (fact same-dev ls lk)) (= ls ls-0)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -461,9 +463,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -700,6 +701,7 @@ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))) (label 3) (realized)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (origs (n (0 3))) (comment "Not closed under rules")) @@ -716,6 +718,7 @@ (label 4) (parent 3) (unrealized (0 0) (0 1))+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (origs (n (0 3))) (comment "1 in cohort - 1 not yet seen")) @@ -745,6 +748,7 @@ (label 5) (parent 4) (unrealized (0 1) (1 0))+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed@@ -774,12 +778,13 @@ (label 6) (parent 5) (unrealized (0 1))+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)- (ls lk locn))+ (lk ls locn)) (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls)) (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o) (start-ch start-ch) (lk lk) (ls ls))@@ -812,6 +817,7 @@ (label 7) (parent 6) (unrealized (3 2))+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed@@ -898,18 +904,18 @@ (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z1 z2)))) (defrule same-dev-ls-lk (forall ((ls lk lk-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (and (fact same-dev ls lk-0) (fact same-dev ls lk)) (= lk lk-0)))) (defrule same-dev-lk-ls (forall ((lk ls ls-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (and (fact same-dev ls-0 lk) (fact same-dev ls lk)) (= ls ls-0)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -937,9 +943,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -1181,6 +1186,10 @@ (label 9) (unrealized (0 1) (1 0) (1 2)) (preskeleton)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "Not a skeleton")) @@ -1200,6 +1209,10 @@ (label 10) (parent 9) (unrealized (0 1) (1 0) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "Not closed under rules")) @@ -1221,6 +1234,10 @@ (label 11) (parent 10) (unrealized (0 1) (1 0) (1 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -1255,6 +1272,10 @@ (label 12) (parent 11) (unrealized (0 1) (1 1) (1 2) (2 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed@@ -1283,12 +1304,16 @@ (label 13) (parent 12) (unrealized (0 1) (1 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)- (ls lk locn))+ (lk ls locn)) (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch)) (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls)) (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)@@ -1320,6 +1345,10 @@ (label 14) (parent 13) (unrealized (0 1) (1 2) (3 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed@@ -1355,6 +1384,10 @@ (label 15) (parent 14) (unrealized (0 1) (1 2) (2 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton subatomic-open-closed@@ -1388,6 +1421,10 @@ (label 16) (parent 15) (unrealized (0 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton subatomic-open-closed@@ -1422,6 +1459,10 @@ (label 17) (parent 15) (unrealized (0 1) (4 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed@@ -1458,6 +1499,10 @@ (label 18) (parent 16) (unrealized (0 1))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton subatomic-open-closed@@ -1494,6 +1539,10 @@ (label 19) (parent 16) (unrealized (0 1) (5 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed@@ -1530,6 +1579,10 @@ (parent 17) (unrealized (0 1) (4 0)) (dead)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "empty cohort")) (defskeleton subatomic-open-closed@@ -1608,6 +1661,10 @@ (label 22) (parent 18) (unrealized (6 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed@@ -1647,6 +1704,10 @@ (parent 19) (unrealized (0 1) (5 0)) (dead)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "empty cohort")) (defskeleton subatomic-open-closed@@ -1687,6 +1748,10 @@ (parent 22) (unrealized (6 0)) (dead)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/subatomic-open-closed.tst view
@@ -1,6 +1,6 @@ (herald subatomic-open-closed (bound 40)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/subatomic-open-closed.scm") (comment "Strand count bounded at 40") @@ -48,18 +48,18 @@ (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z1 z2)))) (defrule same-dev-ls-lk (forall ((ls lk lk-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (and (fact same-dev ls lk-0) (fact same-dev ls lk)) (= lk lk-0)))) (defrule same-dev-lk-ls (forall ((lk ls ls-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (and (fact same-dev ls-0 lk) (fact same-dev ls lk)) (= ls ls-0)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -87,9 +87,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -208,6 +207,7 @@ (label 0) (unrealized (0 1) (1 0)) (preskeleton)+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (origs (k (0 0))) (comment "Not a skeleton")) @@ -224,6 +224,7 @@ (label 1) (parent 0) (unrealized (0 1) (1 0))+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (origs (k (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -253,6 +254,7 @@ (parent 1) (unrealized (0 1) (1 0)) (dead)+ (maps ((0 1) ((k k) (d d) (o o) (start-ch start-ch)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -301,18 +303,18 @@ (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z1 z2)))) (defrule same-dev-ls-lk (forall ((ls lk lk-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (and (fact same-dev ls lk-0) (fact same-dev ls lk)) (= lk lk-0)))) (defrule same-dev-lk-ls (forall ((lk ls ls-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (and (fact same-dev ls-0 lk) (fact same-dev ls lk)) (= ls ls-0)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -340,9 +342,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -459,6 +460,7 @@ (recv (enc "may I pass" k)) (send (enc "you may pass" n k)))) (label 3) (realized)+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (origs (n (0 3))) (comment "Not closed under rules")) @@ -475,6 +477,7 @@ (label 4) (parent 3) (unrealized (0 0) (0 1))+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (origs (n (0 3))) (comment "1 in cohort - 1 not yet seen")) @@ -504,6 +507,7 @@ (label 5) (parent 4) (unrealized (0 1) (1 0))+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed@@ -533,12 +537,13 @@ (label 6) (parent 5) (unrealized (0 1))+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)- (ls lk locn))+ (lk ls locn)) (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls)) (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o) (start-ch start-ch) (lk lk) (ls ls))@@ -571,6 +576,7 @@ (label 7) (parent 6) (unrealized (3 2))+ (maps ((0) ((k k) (n n) (d d) (o o) (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed@@ -657,18 +663,18 @@ (defrule power-deliver-once (forall ((z1 z2 strd) (k skey)) (implies- (and (p "dev-up" z1 (idx 2)) (p "dev-up" z2 (idx 2))- (p "dev-up" "k" z1 k) (p "dev-up" "k" z2 k))+ (and (p "dev-up" z2 (idx 2)) (p "dev-up" z1 (idx 2))+ (p "dev-up" "k" z2 k) (p "dev-up" "k" z1 k)) (= z1 z2)))) (defrule same-dev-ls-lk (forall ((ls lk lk-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls lk-0))+ (and (fact same-dev ls lk-0) (fact same-dev ls lk)) (= lk lk-0)))) (defrule same-dev-lk-ls (forall ((lk ls ls-0 locn)) (implies- (and (fact same-dev ls lk) (fact same-dev ls-0 lk))+ (and (fact same-dev ls-0 lk) (fact same-dev ls lk)) (= ls ls-0)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -696,9 +702,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -820,6 +825,10 @@ (label 9) (unrealized (0 1) (1 0) (1 2)) (preskeleton)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "Not a skeleton")) @@ -839,6 +848,10 @@ (label 10) (parent 9) (unrealized (0 1) (1 0) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "Not closed under rules")) @@ -860,6 +873,10 @@ (label 11) (parent 10) (unrealized (0 1) (1 0) (1 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (origs (n (1 3)) (k (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -894,6 +911,10 @@ (label 12) (parent 11) (unrealized (0 1) (1 1) (1 2) (2 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d-0) (o-0 o-0)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed@@ -922,12 +943,16 @@ (label 13) (parent 12) (unrealized (0 1) (1 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed (vars (old old1 any mesg) (k k-0 skey) (n n-0 text) (d o name) (pt pt-0 pt-1 pt-2 pt-3 pt-4 pt-5 pval) (start-ch chan)- (ls lk locn))+ (lk ls locn)) (defstrand owner-power-dev 2 (k k) (d d) (o o) (start-ch start-ch)) (defstrand dev-pass 4 (k k) (n n) (d d) (o o) (lk lk) (ls ls)) (defstrand dev-up 5 (old old) (old1 old1) (k k) (d d) (o o)@@ -959,6 +984,10 @@ (label 14) (parent 13) (unrealized (0 1) (1 2) (3 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed@@ -994,6 +1023,10 @@ (label 15) (parent 14) (unrealized (0 1) (1 2) (2 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton subatomic-open-closed@@ -1027,6 +1060,10 @@ (label 16) (parent 15) (unrealized (0 1) (1 2))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton subatomic-open-closed@@ -1061,6 +1098,10 @@ (label 17) (parent 15) (unrealized (0 1) (4 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed@@ -1097,6 +1138,10 @@ (label 18) (parent 16) (unrealized (0 1))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton subatomic-open-closed@@ -1133,6 +1178,10 @@ (label 19) (parent 16) (unrealized (0 1) (5 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed@@ -1169,6 +1218,10 @@ (parent 17) (unrealized (0 1) (4 0)) (dead)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "empty cohort")) (defskeleton subatomic-open-closed@@ -1247,6 +1300,10 @@ (label 22) (parent 18) (unrealized (6 0))+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton subatomic-open-closed@@ -1286,6 +1343,10 @@ (parent 19) (unrealized (0 1) (5 0)) (dead)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "empty cohort")) (defskeleton subatomic-open-closed@@ -1326,6 +1387,10 @@ (parent 22) (unrealized (6 0)) (dead)+ (maps+ ((0 1)+ ((k k) (d d) (o o) (start-ch start-ch) (n n) (d-0 d) (o-0 o)+ (lk lk) (ls ls)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/sync_locn_envelope.tst view
@@ -1,7 +1,7 @@ (herald "Envelope Protocol, location-based version" (check-nonces) (bound 30) (limit 6000)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/sync_locn_envelope.scm") (comment "Step count limited to 6000") (comment "Strand count bounded at 30")@@ -102,9 +102,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -152,6 +151,10 @@ (label 0) (unrealized (0 0) (1 3)) (preskeleton)+ (maps+ ((0 1)+ ((v v) (n n) (pcr-id pcr-id) (nonce nonce) (k k) (aik aik)+ (tpm tpm) (tpmconf tpmconf)))) (origs (v (1 4)) (n (1 1))) (comment "Not a skeleton")) @@ -173,6 +176,10 @@ (label 1) (parent 0) (unrealized (1 3))+ (maps+ ((0 1)+ ((v v) (n n) (pcr-id pcr-id) (nonce nonce) (k k) (aik aik)+ (tpm tpm) (tpmconf tpmconf)))) (origs (v (1 4)) (n (1 1))) (comment "1 in cohort - 1 not yet seen")) @@ -203,6 +210,10 @@ (label 2) (parent 1) (unrealized (0 0) (2 0))+ (maps+ ((0 1)+ ((v v) (n n) (pcr-id pcr-id) (nonce nonce) (k k) (aik aik)+ (tpm tpm) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -232,6 +243,10 @@ (label 3) (parent 2) (unrealized (0 0) (1 0))+ (maps+ ((0 1)+ ((v v) (n n) (pcr-id pcr-id) (nonce nonce) (k k) (aik aik)+ (tpm tpm) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -262,6 +277,10 @@ (label 4) (parent 3) (unrealized (0 0))+ (maps+ ((0 1)+ ((v v) (n n) (pcr-id pcr-id) (nonce nonce) (k k) (aik aik)+ (tpm tpm) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -298,6 +317,10 @@ (label 5) (parent 4) (unrealized (4 1))+ (maps+ ((0 1)+ ((v v) (n n) (pcr-id pcr-id) (nonce nonce) (k k) (aik aik)+ (tpm tpm) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -338,6 +361,10 @@ (label 6) (parent 5) (unrealized (4 2))+ (maps+ ((0 1)+ ((v v) (n n) (pcr-id pcr-id) (nonce nonce) (k k) (aik aik)+ (tpm tpm) (tpmconf tpmconf)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -388,6 +415,10 @@ (parent 6) (unrealized (4 1) (4 2)) (dead)+ (maps+ ((0 1)+ ((v v) (n n) (pcr-id pcr-id) (nonce nonce) (k k) (aik aik)+ (tpm tpm-0) (tpmconf tpmconf)))) (comment "empty cohort")) (defskeleton envelope@@ -439,6 +470,10 @@ (label 8) (parent 6) (unrealized (5 2))+ (maps+ ((0 1)+ ((v v) (n n) (pcr-id pcr-id) (nonce nonce) (k k) (aik aik)+ (tpm tpm) (tpmconf tpmconf)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -493,6 +528,10 @@ (label 9) (parent 8) (unrealized (5 1))+ (maps+ ((0 1)+ ((v v) (n n) (pcr-id pcr-id) (nonce nonce-0) (k k) (aik aik)+ (tpm tpm-1) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -550,6 +589,10 @@ (parent 8) (unrealized (6 1)) (dead)+ (maps+ ((0 1)+ ((v v) (n n) (pcr-id pcr-id) (nonce nonce) (k k) (aik aik)+ (tpm tpm) (tpmconf tpmconf)))) (comment "empty cohort")) (defskeleton envelope@@ -709,9 +752,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -767,6 +809,10 @@ (label 12) (unrealized (0 0) (1 3)) (preskeleton)+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (origs (v (1 4)) (n (1 1))) (comment "Not a skeleton")) @@ -796,6 +842,10 @@ (label 13) (parent 12) (unrealized (0 0) (1 3))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (origs (v (1 4)) (n (1 1))) (comment "1 in cohort - 1 not yet seen")) @@ -835,6 +885,10 @@ (label 14) (parent 13) (unrealized (0 0) (2 0))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -873,6 +927,10 @@ (label 15) (parent 14) (unrealized (0 0) (1 0))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -912,6 +970,10 @@ (label 16) (parent 15) (unrealized (0 0))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -963,6 +1025,10 @@ (label 17) (parent 16) (unrealized (4 1))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -1023,6 +1089,10 @@ (parent 17) (unrealized (4 1) (4 2)) (dead)+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm-0) (tpmconf tpmconf)))) (comment "empty cohort")) (defskeleton envelope@@ -1085,6 +1155,10 @@ (label 19) (parent 17) (unrealized (5 2))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -1149,6 +1223,10 @@ (label 20) (parent 19) (unrealized (5 1))+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce-0) (tpm tpm-1) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1217,6 +1295,10 @@ (parent 19) (unrealized (6 1)) (dead)+ (maps+ ((0 1)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "empty cohort")) (defskeleton envelope@@ -1386,9 +1468,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -1445,6 +1526,10 @@ (label 23) (unrealized (0 0) (1 0) (2 3)) (preskeleton)+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (origs (v (2 4)) (n (2 1))) (comment "Not a skeleton")) @@ -1475,6 +1560,10 @@ (label 24) (parent 23) (unrealized (0 0) (2 3))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (origs (v (2 4)) (n (2 1))) (comment "1 in cohort - 1 not yet seen")) @@ -1515,6 +1604,10 @@ (label 25) (parent 24) (unrealized (0 0) (1 0) (3 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1554,6 +1647,10 @@ (label 26) (parent 25) (unrealized (0 0) (1 0) (2 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1595,6 +1692,10 @@ (label 27) (parent 26) (unrealized (0 0) (1 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1641,6 +1742,10 @@ (label 28) (parent 27) (unrealized (0 0) (5 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1690,6 +1795,10 @@ (label 29) (parent 28) (unrealized (0 0) (5 2))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -1749,6 +1858,10 @@ (parent 29) (unrealized (0 0) (5 1) (5 2)) (dead)+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm-0) (tpmconf tpmconf)))) (comment "empty cohort")) (defskeleton envelope@@ -1810,6 +1923,10 @@ (label 31) (parent 29) (unrealized (0 0) (6 2))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -1874,6 +1991,10 @@ (label 32) (parent 31) (unrealized (0 0) (6 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce-0) (tpm tpm-1) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -1942,6 +2063,10 @@ (parent 31) (unrealized (0 0) (7 1)) (dead)+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "empty cohort")) (defskeleton envelope@@ -2006,6 +2131,10 @@ (label 34) (parent 32) (unrealized (0 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce-0) (tpm tpmconf) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2080,6 +2209,10 @@ (label 35) (parent 34) (unrealized (7 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce-0) (tpm tpmconf) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2163,6 +2296,10 @@ (label 36) (parent 35) (unrealized (8 2))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce-0) (tpm tpmconf) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2253,6 +2390,10 @@ (parent 36) (unrealized (9 1)) (dead)+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce-0) (tpm tpmconf) (tpmconf tpmconf)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -2352,9 +2493,8 @@ (defgenrule discreteAfter (forall ((z0 z1 z2 strd) (i0 i1 i2 indx)) (implies- (and (trans z0 i0) (trans z1 i1) (trans z2 i2)- (leads-to z0 i0 z1 i1) (same-locn z0 i0 z2 i2)- (prec z0 i0 z2 i2))+ (and (trans z0 i0) (trans z2 i2) (leads-to z0 i0 z1 i1)+ (same-locn z0 i0 z2 i2) (prec z0 i0 z2 i2)) (or (and (= z1 z2) (= i1 i2)) (prec z1 i1 z2 i2))))) (defgenrule discreteBefore (forall ((z0 z1 z2 strd) (i0 i1 i2 indx))@@ -2412,6 +2552,10 @@ (label 38) (unrealized (0 0) (1 0) (2 3)) (preskeleton)+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (origs (v (2 4)) (n (2 1))) (comment "Not a skeleton")) @@ -2443,6 +2587,10 @@ (label 39) (parent 38) (unrealized (0 0) (2 3))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (origs (v (2 4)) (n (2 1))) (comment "1 in cohort - 1 not yet seen")) @@ -2484,6 +2632,10 @@ (label 40) (parent 39) (unrealized (0 0) (1 0) (3 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2524,6 +2676,10 @@ (label 41) (parent 40) (unrealized (0 0) (1 0) (2 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2566,6 +2722,10 @@ (label 42) (parent 41) (unrealized (0 0) (1 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2613,6 +2773,10 @@ (label 43) (parent 42) (unrealized (0 0) (5 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2663,6 +2827,10 @@ (label 44) (parent 43) (unrealized (0 0) (5 2))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -2723,6 +2891,10 @@ (parent 44) (unrealized (0 0) (5 1) (5 2)) (dead)+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm-0) (tpmconf tpmconf)))) (comment "empty cohort")) (defskeleton envelope@@ -2785,6 +2957,10 @@ (label 46) (parent 44) (unrealized (0 0) (6 2))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton envelope@@ -2850,6 +3026,10 @@ (label 47) (parent 46) (unrealized (0 0) (6 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce-0) (tpm tpm-1) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -2919,6 +3099,10 @@ (parent 46) (unrealized (0 0) (7 1)) (dead)+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce) (tpm tpm) (tpmconf tpmconf)))) (comment "empty cohort")) (defskeleton envelope@@ -2984,6 +3168,10 @@ (label 49) (parent 47) (unrealized (0 0))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce-0) (tpm tpmconf) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3059,6 +3247,10 @@ (label 50) (parent 49) (unrealized (7 1))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce-0) (tpm tpmconf) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3143,6 +3335,10 @@ (label 51) (parent 50) (unrealized (8 2))+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce-0) (tpm tpmconf) (tpmconf tpmconf)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton envelope@@ -3234,6 +3430,10 @@ (parent 51) (unrealized (9 1)) (dead)+ (maps+ ((0 1 2)+ ((n n) (v v) (k k) (aik aik) (pcr-id pcr-id) (pcr-id-0 pcr-id-0)+ (nonce nonce-0) (tpm tpmconf) (tpmconf tpmconf)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/targetterms1.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/targetterms1.scm") (defprotocol targetterms basic@@ -23,6 +23,7 @@ (traces ((send (enc n1 (enc a n2 k) k)) (recv (enc a n1 k)))) (label 0) (unrealized (0 1))+ (maps ((0) ((n1 n1) (k k) (a a) (n2 n2)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -38,6 +39,7 @@ (label 1) (parent 0) (unrealized (0 1))+ (maps ((0) ((n1 n2) (k k) (a a) (n2 n2)))) (origs (n2 (0 0))) (comment "1 in cohort - 1 not yet seen"))
tst/targetterms2.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/targetterms2.scm") (defprotocol targetterms2 basic@@ -28,6 +28,7 @@ (recv (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a))))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (n n)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -47,6 +48,7 @@ (label 1) (parent 0) (unrealized (0 1))+ (maps ((0) ((a a) (n n)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton targetterms2@@ -67,6 +69,7 @@ (label 2) (parent 1) (unrealized (0 1))+ (maps ((0) ((a a) (n n)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton targetterms2@@ -88,6 +91,7 @@ (label 3) (parent 1) (unrealized (1 1))+ (maps ((0) ((a a) (n n)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton targetterms2@@ -110,6 +114,7 @@ (label 4) (parent 2) (unrealized (0 1))+ (maps ((0) ((a a) (n n)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton targetterms2@@ -131,6 +136,7 @@ (label 5) (parent 3) (unrealized (1 1))+ (maps ((0) ((a a) (n n)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton targetterms2@@ -161,6 +167,7 @@ (operation nonce-test (displaced 3 1 trans 3) n (2 1) (enc n (pubk a))) (strand-map 0 1 2))) (unrealized (2 1))+ (maps ((0) ((a a) (n n)))) (comment "2 in cohort - 1 not yet seen")) (defskeleton targetterms2@@ -211,6 +218,7 @@ (label 8) (parent 6) (unrealized (2 1))+ (maps ((0) ((a a) (n n)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton targetterms2@@ -241,6 +249,7 @@ (seen-ops (7 (operation generalization deleted (1 0)) (strand-map 0 2 3))) (realized)+ (maps ((0) ((a a) (n n)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton targetterms2@@ -270,6 +279,7 @@ (seen-ops (7 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps ((0) ((a a) (n n)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
tst/targetterms6.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/targetterms6.scm") (defprotocol targetterms6 basic@@ -32,6 +32,7 @@ (enc n (enc n (pubk a)) (pubk a)))))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (n n)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -53,6 +54,7 @@ (label 1) (parent 0) (unrealized (0 1))+ (maps ((0) ((a a) (n n)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton targetterms6@@ -75,6 +77,7 @@ (label 2) (parent 1) (unrealized (0 1))+ (maps ((0) ((a a) (n n)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton targetterms6@@ -99,6 +102,7 @@ (label 3) (parent 2) (unrealized (0 1))+ (maps ((0) ((a a) (n n)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton targetterms6@@ -126,6 +130,7 @@ (label 4) (parent 3) (unrealized (2 1))+ (maps ((0) ((a a) (n n)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton targetterms6@@ -180,6 +185,7 @@ (label 6) (parent 4) (unrealized (2 1))+ (maps ((0) ((a a) (n n)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton targetterms6@@ -212,6 +218,7 @@ (seen-ops (5 (operation generalization deleted (1 0)) (strand-map 0 2 3))) (realized)+ (maps ((0) ((a a) (n n)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton targetterms6@@ -243,6 +250,7 @@ (seen-ops (5 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps ((0) ((a a) (n n)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
tst/targetterms8.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/targetterms8.scm") (defprotocol targetterms8 basic@@ -25,6 +25,7 @@ (traces ((send (enc n1 (enc a n2 k) k)) (recv (enc a n1 k)))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (n1 n1) (n2 n2) (k k)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -40,6 +41,7 @@ (label 1) (parent 0) (unrealized (0 1))+ (maps ((0) ((a a) (n1 n2) (n2 n2) (k k)))) (origs (n2 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -88,6 +90,7 @@ (traces ((send (enc n1 (enc a n1 k) k)) (recv (enc a n1 k)))) (label 3) (unrealized (0 1))+ (maps ((0) ((a a) (n1 n1) (k k)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen"))
tst/thisthat.tst view
@@ -1,6 +1,6 @@ (herald "Needham-Schroeder Public-Key Protocol This-That Variant") -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/thisthat.scm") (defprotocol thisthat basic@@ -38,6 +38,7 @@ (recv (cat (enc "this" n2 (pubk b)) (enc "that" n3 (pubk b)))))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2) (n3 n3)))) (origs (n1 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -48,6 +49,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1 n3-0)+ (comment "Initiator point-of-view") (operation nonce-test (added-strand that 2) n1 (0 1) (enc n1 a (pubk b))) (strand-map 0)@@ -59,6 +61,7 @@ (label 1) (parent 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2) (n3 n3)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton thisthat@@ -68,6 +71,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1 n3)+ (comment "Initiator point-of-view") (operation nonce-test (contracted (n3-0 n3)) n1 (0 1) (enc n1 n3 (pubk a)) (enc n1 a (pubk b))) (strand-map 0 1)@@ -79,6 +83,7 @@ (label 2) (parent 1) (unrealized (0 1) (0 2))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2) (n3 n3)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton thisthat@@ -88,6 +93,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1 n3)+ (comment "Initiator point-of-view") (operation nonce-test (contracted (n2 n3)) n1 (0 1) (enc n1 n3 (pubk a)) (enc n1 a (pubk b))) (strand-map 0 1)@@ -99,6 +105,7 @@ (label 3) (parent 2) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n3) (n3 n3)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton thisthat@@ -109,6 +116,7 @@ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1 n3 n3-0)+ (comment "Initiator point-of-view") (operation nonce-test (added-strand that 2) n1 (0 1) (enc n1 n3 (pubk a)) (enc n1 a (pubk b))) (strand-map 0 1)@@ -121,6 +129,7 @@ (label 4) (parent 2) (unrealized (0 1) (0 2))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n2) (n3 n3)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton thisthat@@ -130,6 +139,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1)) ((1 2) (0 2))) (non-orig (privk a) (privk b)) (uniq-orig n1 n3)+ (comment "Initiator point-of-view") (operation nonce-test (displaced 1 2 this 3) n3 (0 2) (enc n1 n3 (pubk a))) (strand-map 0 1)@@ -143,6 +153,7 @@ (parent 3) (unrealized (0 2)) (dead)+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n3) (n3 n3)))) (comment "empty cohort")) (defskeleton thisthat@@ -152,6 +163,7 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1)) ((1 2) (0 2))) (non-orig (privk a) (privk b)) (uniq-orig n1 n3)+ (comment "Initiator point-of-view") (operation nonce-test (displaced 1 2 that 3) n3 (0 2) (enc n1 n3 (pubk a))) (strand-map 0 1)@@ -165,6 +177,7 @@ (parent 3) (unrealized (0 2)) (dead)+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n3) (n3 n3)))) (comment "empty cohort")) (defskeleton thisthat@@ -175,6 +188,7 @@ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1 n3 n3-0)+ (comment "Initiator point-of-view") (operation nonce-test (contracted (n2 n3)) n1 (0 1) (enc n1 n3 (pubk a)) (enc n1 n3-0 (pubk a)) (enc n1 a (pubk b))) (strand-map 0 1 2)@@ -187,6 +201,7 @@ (label 7) (parent 4) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n3) (n3 n3)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton thisthat@@ -197,6 +212,7 @@ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1))) (non-orig (privk a) (privk b)) (uniq-orig n1 n3 n3-0)+ (comment "Initiator point-of-view") (operation nonce-test (contracted (n2 n3-0)) n1 (0 1) (enc n1 n3 (pubk a)) (enc n1 n3-0 (pubk a)) (enc n1 a (pubk b))) (strand-map 0 1 2)@@ -209,6 +225,7 @@ (label 8) (parent 4) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n3-0) (n3 n3)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton thisthat@@ -220,6 +237,7 @@ ((2 2) (0 2))) (non-orig (privk a) (privk b)) (uniq-orig n1 n3 n3-0)+ (comment "Initiator point-of-view") (operation nonce-test (displaced 1 3 this 3) n3 (0 2) (enc n1 n3 (pubk a))) (strand-map 0 2 1)@@ -234,6 +252,7 @@ (parent 7) (unrealized (0 2)) (dead)+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n3) (n3 n3)))) (comment "empty cohort")) (defskeleton thisthat@@ -245,6 +264,7 @@ ((2 2) (0 2))) (non-orig (privk a) (privk b)) (uniq-orig n1 n3 n3-0)+ (comment "Initiator point-of-view") (operation nonce-test (displaced 1 3 that 3) n3 (0 2) (enc n1 n3 (pubk a))) (strand-map 0 2 1)@@ -259,6 +279,7 @@ (parent 7) (unrealized (0 2)) (dead)+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n3) (n3 n3)))) (comment "empty cohort")) (defskeleton thisthat@@ -270,6 +291,7 @@ ((2 2) (0 2))) (non-orig (privk a) (privk b)) (uniq-orig n1 n3 n3-0)+ (comment "Initiator point-of-view") (operation nonce-test (displaced 1 3 this 3) n3 (0 2) (enc n1 n3 (pubk a))) (strand-map 0 2 1)@@ -283,6 +305,7 @@ (label 11) (parent 8) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n3-0) (n3 n3)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton thisthat@@ -294,6 +317,7 @@ ((2 2) (0 2))) (non-orig (privk a) (privk b)) (uniq-orig n1 n3 n3-0)+ (comment "Initiator point-of-view") (operation nonce-test (displaced 1 3 that 3) n3 (0 2) (enc n1 n3 (pubk a))) (strand-map 0 2 1)@@ -307,6 +331,7 @@ (label 12) (parent 8) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n3-0) (n3 n3)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton thisthat@@ -318,6 +343,7 @@ ((2 1) (0 1)) ((2 2) (0 2))) (non-orig (privk a) (privk b)) (uniq-orig n1 n3 n3-0)+ (comment "Initiator point-of-view") (operation nonce-test (displaced 1 3 this 3) n3-0 (0 2) (enc n1 n3-0 (pubk a))) (strand-map 0 2 1)@@ -333,6 +359,7 @@ (parent 11) (unrealized (0 2)) (dead)+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n3-0) (n3 n3)))) (comment "empty cohort")) (defskeleton thisthat@@ -344,6 +371,7 @@ ((2 1) (0 1)) ((2 2) (0 2))) (non-orig (privk a) (privk b)) (uniq-orig n1 n3 n3-0)+ (comment "Initiator point-of-view") (operation nonce-test (displaced 1 3 that 3) n3-0 (0 2) (enc n1 n3-0 (pubk a))) (strand-map 0 2 1)@@ -359,6 +387,7 @@ (parent 11) (unrealized (0 2)) (dead)+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n3-0) (n3 n3)))) (comment "empty cohort")) (defskeleton thisthat@@ -370,6 +399,7 @@ ((2 1) (0 1)) ((2 2) (0 2))) (non-orig (privk a) (privk b)) (uniq-orig n1 n3 n3-0)+ (comment "Initiator point-of-view") (operation nonce-test (displaced 1 3 this 3) n3-0 (0 2) (enc n1 n3-0 (pubk a))) (strand-map 0 2 1)@@ -397,6 +427,7 @@ ((2 1) (0 1)) ((2 2) (0 2))) (non-orig (privk a) (privk b)) (uniq-orig n1 n3 n3-0)+ (comment "Initiator point-of-view") (operation nonce-test (displaced 1 3 that 3) n3-0 (0 2) (enc n1 n3-0 (pubk a))) (strand-map 0 2 1)@@ -412,6 +443,7 @@ (parent 12) (unrealized (0 2)) (dead)+ (maps ((0) ((a a) (b b) (n1 n1) (n2 n3-0) (n3 n3)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/tickle-unique.tst view
@@ -1,6 +1,6 @@ (herald tickle-unique) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/tickle-unique.scm") (defprotocol tickle basic@@ -16,8 +16,8 @@ (defrule uniq-tickle (forall ((z strd) (nb0 text)) (implies- (and (fact guard-me) (p "resp" z (idx 2))- (p "resp" "nb0" z nb0))+ (and (p "resp" z (idx 2)) (p "resp" "nb0" z nb0)+ (fact guard-me)) (uniq nb0)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -36,6 +36,7 @@ (recv nb))) (label 0) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (nb0 nb0) (nb nb) (na na)))) (origs (nb (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -76,8 +77,8 @@ (defrule uniq-tickle (forall ((z strd) (nb0 text)) (implies- (and (fact guard-me) (p "resp" z (idx 2))- (p "resp" "nb0" z nb0))+ (and (p "resp" z (idx 2)) (p "resp" "nb0" z nb0)+ (fact guard-me)) (uniq nb0)))) (defgenrule neqRl_indx (forall ((x indx)) (implies (fact neq x x) (false))))@@ -97,6 +98,7 @@ (recv nb))) (label 2) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (nb0 nb0) (nb nb) (na na)))) (origs (nb (0 1))) (comment "Not closed under rules")) @@ -114,6 +116,7 @@ (parent 2) (unrealized (0 2)) (dead)+ (maps ((0) ((a a) (b b) (nb0 nb0) (nb nb) (na na)))) (origs (nb0 (0 1)) (nb (0 1))) (comment "empty cohort"))
tst/timestamping.tst view
@@ -1,6 +1,6 @@ (herald timestamping-service) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/timestamping.scm") (defprotocol timestamping-service basic@@ -57,6 +57,10 @@ (recv (enc n alice h alice_1 h_1 t_1 l (privk trent))))) (label 0) (unrealized (0 1))+ (maps+ ((0)+ ((trent trent) (alice alice) (alice_1 alice_1) (n n) (h h)+ (h_1 h_1) (t_1 t_1) (l l)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -95,6 +99,10 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps+ ((0)+ ((trent trent) (alice alice) (alice_1 alice_1) (n n) (h h)+ (h_1 h_1) (t_1 t_1) (l (hash alice_1 h_1 t_1 l_1))))) (comment "1 in cohort - 1 not yet seen")) (defskeleton timestamping-service@@ -124,6 +132,10 @@ (label 2) (parent 0) (unrealized (0 1) (1 0))+ (maps+ ((0)+ ((trent trent) (alice alice) (alice_1 alice_1) (n n) (h h)+ (h_1 h_1) (t_1 t_1) (l (hash alice_1 h_1 t_1 l_1))))) (comment "1 in cohort - 1 not yet seen")) (defskeleton timestamping-service@@ -209,6 +221,18 @@ (label 3) (parent 1) (unrealized (2 0))+ (maps+ ((0)+ ((trent trent) (alice alice) (alice_1 alice_1) (n n) (h h)+ (h_1 h_1)+ (t_1+ (enc n-0 alice_1 h_1 alice_1-0 h_1-0 t_1+ (hash alice_1-0 h_1-0 t_1 l_1) (privk trent)))+ (l+ (hash alice_1 h_1+ (enc n-0 alice_1 h_1 alice_1-0 h_1-0 t_1+ (hash alice_1-0 h_1-0 t_1 l_1) (privk trent))+ (hash alice_1-0 h_1-0 t_1 l_1)))))) (comment "1 in cohort - 1 not yet seen")) (defskeleton timestamping-service@@ -240,6 +264,10 @@ (label 4) (parent 2) (unrealized (0 1))+ (maps+ ((0)+ ((trent trent) (alice alice) (alice_1 alice_1) (n n) (h h)+ (h_1 h_1) (t_1 t_1) (l (hash alice_1 h_1 t_1 l_1))))) (comment "1 in cohort - 1 not yet seen")) (defskeleton timestamping-service@@ -411,6 +439,10 @@ (label 6) (parent 4) (unrealized (3 0))+ (maps+ ((0)+ ((trent trent) (alice alice) (alice_1 alice_1) (n n) (h h)+ (h_1 h_1) (t_1 t_1) (l (hash alice_1 h_1 t_1 l_1))))) (comment "2 in cohort - 2 not yet seen")) (defskeleton timestamping-service@@ -569,6 +601,10 @@ (seen-ops (7 (operation generalization deleted (1 0)) (strand-map 0 2 3 4))) (realized)+ (maps+ ((0)+ ((trent trent) (alice alice) (alice_1 alice_1) (n n) (h h)+ (h_1 h_1) (t_1 t_1) (l (hash alice_1 h_1 t_1 l_1))))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
+ tst/tmp-yahalom.tst view
@@ -0,0 +1,362 @@+(herald "Yahalom Protocol Without Forwarding" (bound 15))++(comment "CPSA 4.4.6")+(comment "All input read from tst/tmp-yahalom.scm")+(comment "Strand count bounded at 15")++(defprotocol yahalom basic+ (defrole init+ (vars (a b c name) (n-a n-b text) (k skey))+ (trace (send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))+ (send (enc n-b k))))+ (defrole resp+ (vars (b a c name) (n-a n-b text) (k skey))+ (trace (recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))+ (recv (enc a k (ltk b c))) (recv (enc n-b k))))+ (defrole serv+ (vars (c a b name) (n-a n-b text) (k skey))+ (trace (recv (cat b (enc a n-a n-b (ltk b c))))+ (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))+ (uniq-orig k))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false)))))++(defskeleton yahalom+ (vars (k skey) (n-a n-b text) (c a b name))+ (defstrand serv 3 (k k) (n-a n-a) (n-b n-b) (c c) (a a) (b b))+ (non-orig (ltk a c) (ltk b c))+ (uniq-orig k)+ (traces+ ((recv (cat b (enc a n-a n-b (ltk b c))))+ (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c)))))+ (label 0)+ (unrealized (0 0))+ (origs (k (0 1)))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton yahalom+ (vars (k skey) (n-a n-b text) (c a b name))+ (defstrand serv 3 (k k) (n-a n-a) (n-b n-b) (c c) (a a) (b b))+ (defstrand resp 2 (n-a n-a) (n-b n-b) (b b) (a a) (c c))+ (precedes ((1 1) (0 0)))+ (non-orig (ltk a c) (ltk b c))+ (uniq-orig k)+ (operation encryption-test (added-strand resp 2)+ (enc a n-a n-b (ltk b c)) (0 0))+ (strand-map 0)+ (traces+ ((recv (cat b (enc a n-a n-b (ltk b c))))+ (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))+ ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))))+ (label 1)+ (parent 0)+ (realized)+ (shape)+ (maps ((0) ((c c) (a a) (b b) (k k) (n-a n-a) (n-b n-b))))+ (origs (k (0 1))))++(comment "Nothing left to do")++(defprotocol yahalom basic+ (defrole init+ (vars (a b c name) (n-a n-b text) (k skey))+ (trace (send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))+ (send (enc n-b k))))+ (defrole resp+ (vars (b a c name) (n-a n-b text) (k skey))+ (trace (recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))+ (recv (enc a k (ltk b c))) (recv (enc n-b k))))+ (defrole serv+ (vars (c a b name) (n-a n-b text) (k skey))+ (trace (recv (cat b (enc a n-a n-b (ltk b c))))+ (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))+ (uniq-orig k))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false)))))++(defskeleton yahalom+ (vars (k skey) (n-a n-b text) (b a c name))+ (defstrand resp 4 (k k) (n-a n-a) (n-b n-b) (b b) (a a) (c c))+ (deflistener k)+ (non-orig (ltk b c) (ltk a c))+ (uniq-orig k)+ (traces+ ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))+ (recv (enc a k (ltk b c))) (recv (enc n-b k)))+ ((recv k) (send k)))+ (label 2)+ (unrealized (0 2))+ (origs)+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton yahalom+ (vars (k skey) (n-a n-b n-a-0 n-b-0 text) (b a c name))+ (defstrand resp 4 (k k) (n-a n-a) (n-b n-b) (b b) (a a) (c c))+ (deflistener k)+ (defstrand serv 3 (k k) (n-a n-a-0) (n-b n-b-0) (c c) (a a) (b b))+ (precedes ((2 1) (1 0)) ((2 2) (0 2)))+ (non-orig (ltk b c) (ltk a c))+ (uniq-orig k)+ (operation encryption-test (added-strand serv 3) (enc a k (ltk b c))+ (0 2))+ (strand-map 0 1)+ (traces+ ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))+ (recv (enc a k (ltk b c))) (recv (enc n-b k))) ((recv k) (send k))+ ((recv (cat b (enc a n-a-0 n-b-0 (ltk b c))))+ (send (enc b k n-a-0 n-b-0 (ltk a c)))+ (send (enc a k (ltk b c)))))+ (label 3)+ (parent 2)+ (unrealized (0 3) (1 0) (2 0))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton yahalom+ (vars (k skey) (n-a n-b text) (b a c name))+ (defstrand resp 4 (k k) (n-a n-a) (n-b n-b) (b b) (a a) (c c))+ (deflistener k)+ (defstrand serv 3 (k k) (n-a n-a) (n-b n-b) (c c) (a a) (b b))+ (precedes ((0 1) (2 0)) ((2 1) (1 0)) ((2 2) (0 2)))+ (non-orig (ltk b c) (ltk a c))+ (uniq-orig k)+ (operation encryption-test (displaced 3 0 resp 2)+ (enc a n-a-0 n-b-0 (ltk b c)) (2 0))+ (strand-map 0 1 2)+ (traces+ ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))+ (recv (enc a k (ltk b c))) (recv (enc n-b k))) ((recv k) (send k))+ ((recv (cat b (enc a n-a n-b (ltk b c))))+ (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c)))))+ (label 4)+ (parent 3)+ (unrealized (0 3) (1 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton yahalom+ (vars (k skey) (n-a n-b n-a-0 n-b-0 text) (b a c name))+ (defstrand resp 4 (k k) (n-a n-a) (n-b n-b) (b b) (a a) (c c))+ (deflistener k)+ (defstrand serv 3 (k k) (n-a n-a-0) (n-b n-b-0) (c c) (a a) (b b))+ (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (b b) (a a) (c c))+ (precedes ((2 1) (1 0)) ((2 2) (0 2)) ((3 1) (2 0)))+ (non-orig (ltk b c) (ltk a c))+ (uniq-orig k)+ (operation encryption-test (added-strand resp 2)+ (enc a n-a-0 n-b-0 (ltk b c)) (2 0))+ (strand-map 0 1 2)+ (traces+ ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))+ (recv (enc a k (ltk b c))) (recv (enc n-b k))) ((recv k) (send k))+ ((recv (cat b (enc a n-a-0 n-b-0 (ltk b c))))+ (send (enc b k n-a-0 n-b-0 (ltk a c))) (send (enc a k (ltk b c))))+ ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b c))))))+ (label 5)+ (parent 3)+ (unrealized (0 3) (1 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton yahalom+ (vars (k skey) (n-a n-b text) (b a c name))+ (defstrand resp 4 (k k) (n-a n-a) (n-b n-b) (b b) (a a) (c c))+ (deflistener k)+ (defstrand serv 3 (k k) (n-a n-a) (n-b n-b) (c c) (a a) (b b))+ (precedes ((0 1) (2 0)) ((2 2) (0 2)) ((2 2) (1 0)))+ (non-orig (ltk b c) (ltk a c))+ (uniq-orig k)+ (operation nonce-test (displaced 3 2 serv 3) k (1 0)+ (enc b k n-a n-b (ltk a c)))+ (strand-map 0 1 2)+ (traces+ ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))+ (recv (enc a k (ltk b c))) (recv (enc n-b k))) ((recv k) (send k))+ ((recv (cat b (enc a n-a n-b (ltk b c))))+ (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c)))))+ (label 6)+ (parent 4)+ (unrealized (0 3) (1 0))+ (dead)+ (comment "empty cohort"))++(defskeleton yahalom+ (vars (k skey) (n-a n-b n-a-0 n-b-0 text) (b a c name))+ (defstrand resp 4 (k k) (n-a n-a) (n-b n-b) (b b) (a a) (c c))+ (deflistener k)+ (defstrand serv 3 (k k) (n-a n-a-0) (n-b n-b-0) (c c) (a a) (b b))+ (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (b b) (a a) (c c))+ (precedes ((2 2) (0 2)) ((2 2) (1 0)) ((3 1) (2 0)))+ (non-orig (ltk b c) (ltk a c))+ (uniq-orig k)+ (operation nonce-test (displaced 4 2 serv 3) k (1 0)+ (enc b k n-a-0 n-b-0 (ltk a c)))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))+ (recv (enc a k (ltk b c))) (recv (enc n-b k))) ((recv k) (send k))+ ((recv (cat b (enc a n-a-0 n-b-0 (ltk b c))))+ (send (enc b k n-a-0 n-b-0 (ltk a c))) (send (enc a k (ltk b c))))+ ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b c))))))+ (label 7)+ (parent 5)+ (unrealized (0 3) (1 0))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol yahalom basic+ (defrole init+ (vars (a b c name) (n-a n-b text) (k skey))+ (trace (send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))+ (send (enc n-b k))))+ (defrole resp+ (vars (b a c name) (n-a n-b text) (k skey))+ (trace (recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))+ (recv (enc a k (ltk b c))) (recv (enc n-b k))))+ (defrole serv+ (vars (c a b name) (n-a n-b text) (k skey))+ (trace (recv (cat b (enc a n-a n-b (ltk b c))))+ (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))+ (uniq-orig k))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false)))))++(defskeleton yahalom+ (vars (k skey) (n-a n-b text) (b a c name))+ (defstrand resp 4 (k k) (n-a n-a) (n-b n-b) (b b) (a a) (c c))+ (deflistener k)+ (non-orig (ltk b c) (ltk a c))+ (uniq-orig k)+ (traces+ ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))+ (recv (enc a k (ltk b c))) (recv (enc n-b k)))+ ((recv k) (send k)))+ (label 8)+ (unrealized (0 2))+ (origs)+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton yahalom+ (vars (k skey) (n-a n-b n-a-0 n-b-0 text) (b a c name))+ (defstrand resp 4 (k k) (n-a n-a) (n-b n-b) (b b) (a a) (c c))+ (deflistener k)+ (defstrand serv 3 (k k) (n-a n-a-0) (n-b n-b-0) (c c) (a a) (b b))+ (precedes ((2 1) (1 0)) ((2 2) (0 2)))+ (non-orig (ltk b c) (ltk a c))+ (uniq-orig k)+ (operation encryption-test (added-strand serv 3) (enc a k (ltk b c))+ (0 2))+ (strand-map 0 1)+ (traces+ ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))+ (recv (enc a k (ltk b c))) (recv (enc n-b k))) ((recv k) (send k))+ ((recv (cat b (enc a n-a-0 n-b-0 (ltk b c))))+ (send (enc b k n-a-0 n-b-0 (ltk a c)))+ (send (enc a k (ltk b c)))))+ (label 9)+ (parent 8)+ (unrealized (0 3) (1 0) (2 0))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton yahalom+ (vars (k skey) (n-a n-b text) (b a c name))+ (defstrand resp 4 (k k) (n-a n-a) (n-b n-b) (b b) (a a) (c c))+ (deflistener k)+ (defstrand serv 3 (k k) (n-a n-a) (n-b n-b) (c c) (a a) (b b))+ (precedes ((0 1) (2 0)) ((2 1) (1 0)) ((2 2) (0 2)))+ (non-orig (ltk b c) (ltk a c))+ (uniq-orig k)+ (operation encryption-test (displaced 3 0 resp 2)+ (enc a n-a-0 n-b-0 (ltk b c)) (2 0))+ (strand-map 0 1 2)+ (traces+ ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))+ (recv (enc a k (ltk b c))) (recv (enc n-b k))) ((recv k) (send k))+ ((recv (cat b (enc a n-a n-b (ltk b c))))+ (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c)))))+ (label 10)+ (parent 9)+ (unrealized (0 3) (1 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton yahalom+ (vars (k skey) (n-a n-b n-a-0 n-b-0 text) (b a c name))+ (defstrand resp 4 (k k) (n-a n-a) (n-b n-b) (b b) (a a) (c c))+ (deflistener k)+ (defstrand serv 3 (k k) (n-a n-a-0) (n-b n-b-0) (c c) (a a) (b b))+ (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (b b) (a a) (c c))+ (precedes ((2 1) (1 0)) ((2 2) (0 2)) ((3 1) (2 0)))+ (non-orig (ltk b c) (ltk a c))+ (uniq-orig k)+ (operation encryption-test (added-strand resp 2)+ (enc a n-a-0 n-b-0 (ltk b c)) (2 0))+ (strand-map 0 1 2)+ (traces+ ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))+ (recv (enc a k (ltk b c))) (recv (enc n-b k))) ((recv k) (send k))+ ((recv (cat b (enc a n-a-0 n-b-0 (ltk b c))))+ (send (enc b k n-a-0 n-b-0 (ltk a c))) (send (enc a k (ltk b c))))+ ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b c))))))+ (label 11)+ (parent 9)+ (unrealized (0 3) (1 0))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton yahalom+ (vars (k skey) (n-a n-b text) (b a c name))+ (defstrand resp 4 (k k) (n-a n-a) (n-b n-b) (b b) (a a) (c c))+ (deflistener k)+ (defstrand serv 3 (k k) (n-a n-a) (n-b n-b) (c c) (a a) (b b))+ (precedes ((0 1) (2 0)) ((2 2) (0 2)) ((2 2) (1 0)))+ (non-orig (ltk b c) (ltk a c))+ (uniq-orig k)+ (operation nonce-test (displaced 3 2 serv 3) k (1 0)+ (enc b k n-a n-b (ltk a c)))+ (strand-map 0 1 2)+ (traces+ ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))+ (recv (enc a k (ltk b c))) (recv (enc n-b k))) ((recv k) (send k))+ ((recv (cat b (enc a n-a n-b (ltk b c))))+ (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c)))))+ (label 12)+ (parent 10)+ (unrealized (0 3) (1 0))+ (dead)+ (comment "empty cohort"))++(defskeleton yahalom+ (vars (k skey) (n-a n-b n-a-0 n-b-0 text) (b a c name))+ (defstrand resp 4 (k k) (n-a n-a) (n-b n-b) (b b) (a a) (c c))+ (deflistener k)+ (defstrand serv 3 (k k) (n-a n-a-0) (n-b n-b-0) (c c) (a a) (b b))+ (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (b b) (a a) (c c))+ (precedes ((2 2) (0 2)) ((2 2) (1 0)) ((3 1) (2 0)))+ (non-orig (ltk b c) (ltk a c))+ (uniq-orig k)+ (operation nonce-test (displaced 4 2 serv 3) k (1 0)+ (enc b k n-a-0 n-b-0 (ltk a c)))+ (strand-map 0 1 2 3)+ (traces+ ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))+ (recv (enc a k (ltk b c))) (recv (enc n-b k))) ((recv k) (send k))+ ((recv (cat b (enc a n-a-0 n-b-0 (ltk b c))))+ (send (enc b k n-a-0 n-b-0 (ltk a c))) (send (enc a k (ltk b c))))+ ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b c))))))+ (label 13)+ (parent 11)+ (unrealized (0 3) (1 0))+ (dead)+ (comment "empty cohort"))++(comment "Nothing left to do")
tst/trust-anchor.tst view
@@ -1,7 +1,7 @@ (herald trust-anchor (comment "Tests rule application on initial skeleton")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/trust-anchor.scm") (defprotocol trust-anchor basic@@ -24,6 +24,7 @@ (label 0) (unrealized (0 0)) (dead)+ (maps ((0) ((f f) (ca ca)))) (origs) (comment "empty cohort")) @@ -48,6 +49,7 @@ (send (enc f (pubk f) (privk ca))))) (label 1) (realized)+ (maps ((0) ((f f) (ca ca)))) (origs) (comment "Not closed under rules")) @@ -64,6 +66,7 @@ (parent 1) (unrealized (0 0)) (dead)+ (maps ((0) ((f f) (ca ca)))) (origs) (comment "empty cohort"))
tst/ugen-at.tst view
@@ -1,6 +1,6 @@ (herald uniq-at) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/ugen-at.scm") (defprotocol yahalom-plus-uniq-at basic@@ -44,6 +44,8 @@ (recv (enc n-b k))) ((recv k) (send k))) (label 0) (unrealized (0 2) (0 4))+ (maps+ ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a) (rest rest)))) (origs) (ugens (n-b (0 1))) (comment "Not closed under rules"))@@ -64,6 +66,8 @@ (label 1) (parent 0) (unrealized (0 2) (0 4))+ (maps+ ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a) (rest rest)))) (origs) (ugens (n-b (0 1))) (comment "1 in cohort - 1 not yet seen"))@@ -91,6 +95,8 @@ (label 2) (parent 1) (unrealized (0 4) (1 0) (2 0))+ (maps+ ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a) (rest rest)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom-plus-uniq-at@@ -116,6 +122,8 @@ (parent 2) (unrealized (0 4) (1 0)) (dead)+ (maps+ ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a) (rest rest)))) (comment "empty cohort")) (defskeleton yahalom-plus-uniq-at@@ -143,6 +151,8 @@ (parent 2) (unrealized (0 4) (1 0)) (dead)+ (maps+ ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a) (rest rest)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -185,6 +195,7 @@ (send (enc n-b k)))) (label 5) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (c c) (n-a n-a) (n-b n-b) (k k)))) (origs) (ugens (n-a (0 0))) (comment "Not closed under rules"))@@ -202,6 +213,7 @@ (label 6) (parent 5) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (c c) (n-a n-a) (n-b n-b) (k k)))) (origs) (ugens (n-a (0 0))) (comment "1 in cohort - 1 not yet seen"))@@ -226,6 +238,7 @@ (label 7) (parent 6) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (c c) (n-a n-a) (n-b n-b) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom-plus-uniq-at
tst/ugo.tst view
@@ -1,7 +1,7 @@ (herald uniq-gen-and-orig-example (comment "Non-executable role examples")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/ugo.scm") (defprotocol uniq-gen-example basic@@ -34,6 +34,7 @@ (label 0) (unrealized (0 0)) (dead)+ (maps ((0) ((u u) (k k)))) (origs) (comment "empty cohort")) @@ -70,6 +71,7 @@ (label 1) (unrealized (0 0)) (dead)+ (maps ((0) ((u u) (k k)))) (origs) (comment "empty cohort")) @@ -105,6 +107,7 @@ (label 2) (unrealized (0 0)) (dead)+ (maps ((0) ((u u) (k k)))) (origs) (comment "empty cohort")) @@ -141,6 +144,7 @@ (label 3) (unrealized (0 0)) (dead)+ (maps ((0) ((u u) (k k)))) (origs) (comment "empty cohort")) @@ -172,6 +176,7 @@ (traces ((recv (enc u k)) (send (invk u)) (recv u))) (label 4) (unrealized (0 0))+ (maps ((0) ((u u) (k k)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -189,6 +194,7 @@ (label 5) (parent 4) (unrealized (0 2))+ (maps ((0) ((u u) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton uniq-orig-example@@ -238,6 +244,7 @@ (traces ((recv (enc u k)) (send (invk u)) (recv u))) (label 7) (unrealized (0 0))+ (maps ((0) ((u u) (k k)))) (origs ((invk u) (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -255,6 +262,7 @@ (label 8) (parent 7) (unrealized (0 2))+ (maps ((0) ((u u) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton uniq-orig-example
tst/uncarried_keys.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/uncarried_keys.scm") (defprotocol uncarried-keys basic@@ -31,6 +31,7 @@ (send (enc a K (pubk B))) (recv (enc a A B K)))) (label 0) (unrealized (0 1) (0 3))+ (maps ((0) ((a a) (A A) (B B) (K K)))) (origs (K (0 2)) (a (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -51,6 +52,7 @@ (label 1) (parent 0) (unrealized (0 3))+ (maps ((0) ((a a) (A A) (B B) (K K)))) (comment "4 in cohort - 4 not yet seen")) (defskeleton uncarried-keys@@ -138,6 +140,7 @@ (parent 1) (unrealized (2 0)) (dead)+ (maps ((0) ((a a) (A A) (B B) (K K)))) (comment "empty cohort")) (comment "Nothing left to do")
tst/unilateral.tst view
@@ -1,6 +1,6 @@ (herald unilateral) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/unilateral.scm") (defprotocol unilateral basic@@ -26,6 +26,7 @@ (traces ((send (enc n k)) (recv n))) (label 0) (unrealized (0 1))+ (maps ((0) ((k k) (n n)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -71,6 +72,7 @@ (traces ((recv (enc n k)) (send n))) (label 2) (unrealized (0 0))+ (maps ((0) ((n n) (k k)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -125,6 +127,7 @@ (traces ((send (enc n k)) (recv n))) (label 4) (unrealized (0 1))+ (maps ((0) ((n n) (k k)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -135,6 +138,14 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (invk k)) (uniq-orig n)+ (goals+ (forall ((n text) (k akey) (z strd))+ (implies+ (and (p "init" z 2) (p "init" "n" z n) (p "init" "k" z k)+ (non (invk k)) (uniq-at n z 0))+ (exists ((z-0 strd))+ (and (p "resp" z-0 2) (p "resp" "n" z-0 n)+ (p "resp" "k" z-0 k) (prec z 0 z-0 0) (prec z-0 1 z 1)))))) (operation nonce-test (added-strand resp 2) n (0 1) (enc n k)) (strand-map 0) (traces ((send (enc n k)) (recv n)) ((recv (enc n k)) (send n)))@@ -180,6 +191,7 @@ (traces ((recv (enc n k)) (send n))) (label 6) (unrealized (0 0))+ (maps ((0) ((n n) (k k)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -191,6 +203,15 @@ (non-orig (invk k)) (pen-non-orig n) (uniq-orig n)+ (goals+ (forall ((n text) (k akey) (z strd))+ (implies+ (and (p "resp" z 2) (p "resp" "n" z n) (p "resp" "k" z k)+ (non (invk k)) (pnon n))+ (exists ((k-0 akey) (z-0 strd))+ (and (p "init" z-0 1) (p "init" "n" z-0 n)+ (p "init" "k" z-0 k-0) (prec z-0 0 z 0)+ (uniq-at n z-0 0)))))) (operation nonce-test (added-strand init 1) n (0 0)) (strand-map 0) (traces ((recv (enc n k)) (send n)) ((send (enc n k-0))))@@ -233,6 +254,7 @@ (recv (cat na nb b t3 (enc na nb b t2 (privk b)))))) (label 8) (unrealized (0 1))+ (maps ((0) ((b b) (na na) (nb nb) (t1 t1) (t2 t2) (t3 t3)))) (origs (nb (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -293,6 +315,7 @@ (recv (cat na nb b t3 (enc na nb b t2 (privk b)))))) (label 10) (unrealized (0 1))+ (maps ((0) ((b b) (na na) (nb nb) (t1 t1) (t2 t2) (t3 t3)))) (origs (nb (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -303,6 +326,10 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig na nb)+ (goals+ (forall ((b name) (z strd))+ (implies (and (p "init" z 2) (p "init" "b" z b) (non (privk b)))+ (exists ((y strd)) (and (p "resp" y 2) (p "resp" "b" y b)))))) (operation encryption-test (added-strand resp 2) (enc na nb b t2 (privk b)) (0 1)) (strand-map 0)@@ -354,6 +381,7 @@ (recv (cat na nb b t3 (enc na nb b t2 (privk b)))))) (label 12) (unrealized (0 1))+ (maps ((0) ((b b) (na na) (nb nb) (t1 t1) (t2 t2) (t3 t3)))) (origs (nb (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -364,6 +392,10 @@ (precedes ((0 0) (1 0)) ((1 1) (0 1))) (non-orig (privk b)) (uniq-orig na nb)+ (goals+ (forall ((b name) (z strd))+ (implies (and (p "init" z 2) (p "init" "b" z b) (non (privk b)))+ (false)))) (operation encryption-test (added-strand resp 2) (enc na nb b t2 (privk b)) (0 1)) (strand-map 0)
tst/uniq-at.tst view
@@ -1,6 +1,6 @@ (herald uniq-at) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/uniq-at.scm") (defprotocol yahalom-plus-uniq-at basic@@ -44,6 +44,8 @@ (recv (enc n-b k))) ((recv k) (send k))) (label 0) (unrealized (0 2) (0 4))+ (maps+ ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a) (rest rest)))) (origs (n-b (0 1))) (comment "Not closed under rules")) @@ -63,6 +65,8 @@ (label 1) (parent 0) (unrealized (0 2) (0 4))+ (maps+ ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a) (rest rest)))) (origs (n-b (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -89,6 +93,8 @@ (label 2) (parent 1) (unrealized (0 4) (1 0) (2 0))+ (maps+ ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a) (rest rest)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom-plus-uniq-at@@ -114,6 +120,8 @@ (parent 2) (unrealized (0 4) (1 0)) (dead)+ (maps+ ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a) (rest rest)))) (comment "empty cohort")) (defskeleton yahalom-plus-uniq-at@@ -141,6 +149,8 @@ (parent 2) (unrealized (0 4) (1 0)) (dead)+ (maps+ ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a) (rest rest)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -183,6 +193,7 @@ (send (enc n-b k)))) (label 5) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (c c) (n-a n-a) (n-b n-b) (k k)))) (origs (n-a (0 0))) (comment "Not closed under rules")) @@ -199,6 +210,7 @@ (label 6) (parent 5) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (c c) (n-a n-a) (n-b n-b) (k k)))) (origs (n-a (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -222,6 +234,7 @@ (label 7) (parent 6) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (c c) (n-a n-a) (n-b n-b) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom-plus-uniq-at
tst/uniq-gen-test.tst view
@@ -1,7 +1,7 @@ (herald "Unique generation test protocols." (comment "Skeletons 2, 4, and 7 should have no shapes.")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/uniq-gen-test.scm") (defprotocol uniqgentest basic@@ -26,6 +26,7 @@ (traces ((send (enc a k)) (recv (enc a a k)))) (label 0) (unrealized (0 1))+ (maps ((0) ((k k) (a a)))) (origs) (ugens (k (0 0))) (comment "2 in cohort - 2 not yet seen"))@@ -61,6 +62,7 @@ (parent 0) (unrealized (1 0)) (dead)+ (maps ((0) ((k k) (a a)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -87,6 +89,7 @@ (traces ((send (enc a k)) (recv (enc a a k)))) (label 3) (unrealized (0 1))+ (maps ((0) ((k k) (a a)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -119,6 +122,7 @@ (label 5) (parent 3) (unrealized (1 0))+ (maps ((0) ((k k) (a a)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton uniqgentest
tst/uo.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/uo.scm") (defprotocol uniq-orig basic@@ -20,6 +20,7 @@ (label 0) (unrealized (1 1)) (preskeleton)+ (maps ((0 1) ((n n) (m m)))) (origs (n (0 0))) (comment "Not a skeleton"))
tst/wang-hash.tst view
@@ -1,6 +1,6 @@ (herald "Wang's Fair Exchange Protocol" (bound 10)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/wang-hash.scm") (comment "Strand count bounded at 10") @@ -303,6 +303,7 @@ (label 0) (unrealized (1 0)) (preskeleton)+ (maps ((0 1) ((b b) (t t) (m m) (r r) (k k) (a a)))) (origs (m (0 0)) (k (0 0))) (comment "Not a skeleton")) @@ -313,6 +314,7 @@ (precedes ((0 0) (1 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 1 to prove Lemma 4.1.") (traces ((send (cat (cat a b t (hash (enc m k)) (hash k)) (enc m k)@@ -324,6 +326,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0 1) ((b b) (t t) (m m) (r r) (k k) (a a)))) (origs (m (0 0)) (k (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -335,6 +338,7 @@ (precedes ((0 0) (2 0)) ((2 1) (1 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 1 to prove Lemma 4.1.") (operation nonce-test (added-listener k) m (1 0) (enc m k)) (strand-map 0 1) (traces@@ -349,6 +353,7 @@ (label 2) (parent 1) (unrealized (2 0))+ (maps ((0 1) ((b b) (t t) (m m) (r r) (k k) (a a)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wang@@ -359,6 +364,7 @@ (precedes ((1 1) (0 0)) ((2 2) (1 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 1 to prove Lemma 4.1.") (operation nonce-test (displaced 0 3 init1 3) k (2 0) (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r (pubk "encr" t)))@@ -378,6 +384,7 @@ (label 3) (parent 2) (realized)+ (maps ((2 0) ((b b) (t t) (m m) (r r) (k k) (a a)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton wang@@ -390,6 +397,7 @@ (precedes ((0 0) (3 0)) ((2 1) (1 0)) ((3 2) (2 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 1 to prove Lemma 4.1.") (operation nonce-test (added-strand ttp-rc1 3) k (2 0) (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r (pubk "encr" t)))@@ -432,6 +440,7 @@ (label 4) (parent 2) (realized)+ (maps ((0 1) ((b b) (t t) (m m) (r r) (k k) (a a)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton wang@@ -441,6 +450,7 @@ (precedes ((1 2) (0 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 1 to prove Lemma 4.1.") (operation generalization deleted (1 0)) (strand-map 0 2) (traces ((recv m) (send m))@@ -471,6 +481,7 @@ (precedes ((0 0) (2 0)) ((2 2) (1 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 1 to prove Lemma 4.1.") (operation generalization deleted (2 0)) (strand-map 0 1 3) (traces@@ -815,6 +826,7 @@ (label 7) (unrealized (1 0)) (preskeleton)+ (maps ((0 1) ((b b) (t t) (m m) (r r) (k k) (a a)))) (origs (m (0 0)) (k (0 0))) (comment "Not a skeleton")) @@ -825,6 +837,7 @@ (precedes ((0 0) (1 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 2 to prove Lemma 4.1.") (traces ((send (cat (cat a b t (hash (enc m k)) (hash k)) (enc m k)@@ -836,6 +849,7 @@ (label 8) (parent 7) (unrealized (1 0))+ (maps ((0 1) ((b b) (t t) (m m) (r r) (k k) (a a)))) (origs (m (0 0)) (k (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -846,6 +860,7 @@ (precedes ((1 2) (0 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 2 to prove Lemma 4.1.") (operation nonce-test (displaced 0 2 init1 3) k (1 0) (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r (pubk "encr" t)))@@ -878,6 +893,7 @@ (precedes ((0 0) (2 0)) ((2 2) (1 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 2 to prove Lemma 4.1.") (operation nonce-test (added-strand ttp-rc1 3) k (1 0) (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r (pubk "encr" t)))@@ -1225,6 +1241,7 @@ (pubk "encr" t)) (privk "sign" b))) (send (cat k r)))) (label 11) (unrealized (0 1))+ (maps ((0) ((b b) (t t) (m m) (r r) (k k) (a a)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -1234,6 +1251,7 @@ (defstrand resp1 2 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 1) (0 1))) (non-orig (privk "sign" b))+ (comment "First of three experiments to prove Lemma 4.2, clause 1.") (operation encryption-test (added-strand resp1 2) (enc "eortag" (hash a b t (hash (enc m k)) (hash k)) (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r@@ -1278,6 +1296,7 @@ (pubk "encr" t))) (x (hash k)) (a a) (b b) (t t)) (precedes ((1 1) (0 1))) (non-orig (privk "sign" b))+ (comment "First of three experiments to prove Lemma 4.2, clause 1.") (operation encryption-test (added-strand resp3 2) (enc "eortag" (hash a b t (hash (enc m k)) (hash k)) (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r@@ -1623,6 +1642,7 @@ (pubk "encr" t)) (privk "sign" b))))) (label 14) (unrealized (0 2))+ (maps ((0) ((b b) (t t) (m m) (r r) (k k) (a a)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -1632,6 +1652,7 @@ (defstrand resp1 2 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 1) (0 2))) (non-orig (privk "sign" b))+ (comment "Second of three experiments to prove Lemma 4.2, clause 1.") (operation encryption-test (added-strand resp1 2) (enc "eortag" (hash a b t (hash (enc m k)) (hash k)) (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r@@ -1678,6 +1699,7 @@ (pubk "encr" t))) (x (hash k)) (a a) (b b) (t t)) (precedes ((1 1) (0 2))) (non-orig (privk "sign" b))+ (comment "Second of three experiments to prove Lemma 4.2, clause 1.") (operation encryption-test (added-strand resp3 2) (enc "eortag" (hash a b t (hash (enc m k)) (hash k)) (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r@@ -2029,6 +2051,7 @@ (pubk "encr" t)) (privk "sign" b))))) (label 17) (unrealized (0 1) (0 3))+ (maps ((0) ((b b) (t t) (m m) (r r) (k k) (a a)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -2038,6 +2061,7 @@ (defstrand resp1 2 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 1) (0 1))) (non-orig (privk "sign" b))+ (comment "Third of three experiments to prove Lemma 4.2, clause 1.") (operation encryption-test (added-strand resp1 2) (enc "eortag" (hash a b t (hash (enc m k)) (hash k)) (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r@@ -2088,6 +2112,7 @@ (pubk "encr" t))) (x (hash k)) (a a) (b b) (t t)) (precedes ((1 1) (0 1))) (non-orig (privk "sign" b))+ (comment "Third of three experiments to prove Lemma 4.2, clause 1.") (operation encryption-test (added-strand resp3 2) (enc "eortag" (hash a b t (hash (enc m k)) (hash k)) (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r@@ -2437,6 +2462,7 @@ (pubk "encr" t)) (privk "sign" b))) (recv (cat k r)))) (label 20) (unrealized (0 0))+ (maps ((0) ((a a) (t t) (m m) (r r) (k k) (b b)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -2446,6 +2472,7 @@ (defstrand init5 1 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0))) (non-orig (privk "sign" a))+ (comment "First of two experiments to prove Lemma 4.2, clause 2.") (operation encryption-test (added-strand init5 1) (enc "eootag" (hash a b t (hash (enc m k)) (hash k)) (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r@@ -2798,6 +2825,7 @@ (pubk "encr" t)) (privk "sign" b)))) (recv (cat k r)))) (label 22) (unrealized (0 0))+ (maps ((0) ((a a) (t t) (m m) (r r) (k k) (b b)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -2807,6 +2835,7 @@ (defstrand init5 1 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0))) (non-orig (privk "sign" a))+ (comment "Second of two experiments to prove Lemma 4.2, clause 2.") (operation encryption-test (added-strand init5 1) (enc "eootag" (hash a b t (hash (enc m k)) (hash k)) (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r@@ -3163,6 +3192,7 @@ (privk "sign" t))))) (label 24) (unrealized (0 0) (0 3))+ (maps ((0) ((a a) (t t) (b b) (e1 e1) (e2 e2) (x x)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -3175,6 +3205,7 @@ (defstrand init5 1 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0))) (non-orig (privk "sign" a))+ (comment "Experiments to prove Lemma 4.2, clause 3.") (operation encryption-test (added-strand init5 1) (enc "eootag" (hash a b t (hash (enc m k)) (hash k)) (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r@@ -3225,6 +3256,12 @@ (label 25) (parent 24) (unrealized (0 3))+ (maps+ ((0)+ ((a a) (t t) (b b) (e1 (enc m k))+ (e2+ (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r+ (pubk "encr" t))) (x (hash k))))) (comment "4 in cohort - 4 not yet seen")) (defskeleton wang@@ -3237,6 +3274,7 @@ (defstrand init3 2 (m m) (k k) (r r-0) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((2 1) (0 3))) (non-orig (privk "sign" a))+ (comment "Experiments to prove Lemma 4.2, clause 3.") (operation encryption-test (added-strand init3 2) (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 3)) (strand-map 0 1)@@ -3312,6 +3350,7 @@ (defstrand init3 2 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((1 1) (0 3))) (non-orig (privk "sign" a))+ (comment "Experiments to prove Lemma 4.2, clause 3.") (operation encryption-test (displaced 1 2 init3 2) (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 3)) (strand-map 0 1)@@ -3380,6 +3419,7 @@ (defstrand init5 3 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((1 2) (0 3))) (non-orig (privk "sign" a))+ (comment "Experiments to prove Lemma 4.2, clause 3.") (operation encryption-test (displaced 1 2 init5 3) (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 3)) (strand-map 0 1)@@ -3453,6 +3493,7 @@ (defstrand init5 3 (m m) (k k) (r r-0) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((2 2) (0 3))) (non-orig (privk "sign" a))+ (comment "Experiments to prove Lemma 4.2, clause 3.") (operation encryption-test (added-strand init5 3) (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 3)) (strand-map 0 1)@@ -3822,6 +3863,7 @@ (privk "sign" t))))) (label 30) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (t t) (y y) (x x)))) (origs) (comment "3 in cohort - 3 not yet seen")) @@ -3833,6 +3875,7 @@ (defstrand ttp-ab1 3 (y y) (x x) (a a) (b b) (t t)) (precedes ((1 2) (0 0))) (non-orig (privk "sign" t))+ (comment "Experiments to prove Lemma 4.3, clause 1.") (operation encryption-test (added-strand ttp-ab1 3) (enc "abcf" (enc "abrq" a b t y x (privk "sign" a)) (privk "sign" t)) (0 0))@@ -3864,6 +3907,7 @@ (defstrand ttp-rc2 3 (y y) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 2) (0 0))) (non-orig (privk "sign" t))+ (comment "Experiments to prove Lemma 4.3, clause 1.") (operation encryption-test (added-strand ttp-rc2 3) (enc "abcf" (enc "abrq" a b t y (hash k) (privk "sign" a)) (privk "sign" t)) (0 0))@@ -3908,6 +3952,7 @@ (defstrand ttp-cf2 3 (y y) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 2) (0 0))) (non-orig (privk "sign" t))+ (comment "Experiments to prove Lemma 4.3, clause 1.") (operation encryption-test (added-strand ttp-cf2 3) (enc "abcf" (enc "abrq" a b t y (hash k) (privk "sign" a)) (privk "sign" t)) (0 0))@@ -4240,6 +4285,7 @@ (privk "sign" t))))) (label 34) (unrealized (0 0))+ (maps ((0) ((y y) (x x) (a a) (b b) (t t)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -4250,6 +4296,7 @@ (defstrand init3 2 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 1) (0 0))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 1 to prove Lemma 4.3, clause 2.") (operation encryption-test (added-strand init3 2) (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 0)) (strand-map 0)@@ -4287,6 +4334,7 @@ (defstrand init5 3 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 2) (0 0))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 1 to prove Lemma 4.3, clause 2.") (operation encryption-test (added-strand init5 3) (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 0)) (strand-map 0)@@ -4630,6 +4678,7 @@ (privk "sign" t))))) (label 37) (unrealized (0 0) (0 1))+ (maps ((0) ((a a) (b b) (t t) (r r) (k k) (y y)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -4640,6 +4689,7 @@ (defstrand init5 1 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 2 to prove Lemma 4.3, clause 2.") (operation encryption-test (added-strand init5 1) (enc "eootag" (hash a b t (hash (enc m k)) (hash k)) (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r@@ -4677,6 +4727,7 @@ (label 38) (parent 37) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (t t) (r r) (k k) (y (hash (enc m k)))))) (comment "4 in cohort - 4 not yet seen")) (defskeleton wang@@ -4687,6 +4738,7 @@ (defstrand init3 2 (m m) (k k) (r r-0) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((2 1) (0 1))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 2 to prove Lemma 4.3, clause 2.") (operation encryption-test (added-strand init3 2) (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 1)) (strand-map 0 1)@@ -4742,6 +4794,7 @@ (defstrand init3 2 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((1 1) (0 1))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 2 to prove Lemma 4.3, clause 2.") (operation encryption-test (displaced 1 2 init3 2) (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 1)) (strand-map 0 1)@@ -4790,6 +4843,7 @@ (defstrand init5 3 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((1 2) (0 1))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 2 to prove Lemma 4.3, clause 2.") (operation encryption-test (displaced 1 2 init5 3) (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 1)) (strand-map 0 1)@@ -4843,6 +4897,7 @@ (defstrand init5 3 (m m) (k k) (r r-0) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((2 2) (0 1))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 2 to prove Lemma 4.3, clause 2.") (operation encryption-test (added-strand init5 3) (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 1)) (strand-map 0 1)@@ -5204,6 +5259,7 @@ (privk "sign" t))))) (label 43) (unrealized (0 0) (0 1))+ (maps ((0) ((a a) (b b) (t t) (r r) (k k) (y y)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -5214,6 +5270,7 @@ (defstrand init5 1 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 3 to prove Lemma 4.3, clause 2.") (operation encryption-test (added-strand init5 1) (enc "eootag" (hash a b t (hash (enc m k)) (hash k)) (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r@@ -5251,6 +5308,7 @@ (label 44) (parent 43) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (t t) (r r) (k k) (y (hash (enc m k)))))) (comment "4 in cohort - 4 not yet seen")) (defskeleton wang@@ -5261,6 +5319,7 @@ (defstrand init3 2 (m m) (k k) (r r-0) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((2 1) (0 1))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 3 to prove Lemma 4.3, clause 2.") (operation encryption-test (added-strand init3 2) (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 1)) (strand-map 0 1)@@ -5316,6 +5375,7 @@ (defstrand init3 2 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((1 1) (0 1))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 3 to prove Lemma 4.3, clause 2.") (operation encryption-test (displaced 1 2 init3 2) (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 1)) (strand-map 0 1)@@ -5364,6 +5424,7 @@ (defstrand init5 3 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((1 2) (0 1))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 3 to prove Lemma 4.3, clause 2.") (operation encryption-test (displaced 1 2 init5 3) (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 1)) (strand-map 0 1)@@ -5417,6 +5478,7 @@ (defstrand init5 3 (m m) (k k) (r r-0) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((2 2) (0 1))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 3 to prove Lemma 4.3, clause 2.") (operation encryption-test (added-strand init5 3) (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 1)) (strand-map 0 1)
tst/wang-key-hash.tst view
@@ -1,6 +1,6 @@ (herald "Wang's Fair Exchange Protocol" (bound 10)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/wang-key-hash.scm") (comment "Strand count bounded at 10") @@ -526,6 +526,7 @@ (label 0) (unrealized (1 0)) (preskeleton)+ (maps ((0 1) ((b b) (t t) (m m) (r r) (k k) (a a)))) (origs (m (0 0)) (k (0 0))) (comment "Not a skeleton")) @@ -536,6 +537,7 @@ (precedes ((0 0) (1 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 1 to prove Lemma 4.1.") (traces ((send (cat@@ -557,6 +559,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0 1) ((b b) (t t) (m m) (r r) (k k) (a a)))) (origs (m (0 0)) (k (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -568,6 +571,7 @@ (precedes ((0 0) (2 0)) ((2 1) (1 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 1 to prove Lemma 4.1.") (operation nonce-test (added-listener k) m (1 0) (enc m k)) (strand-map 0 1) (traces@@ -591,6 +595,7 @@ (label 2) (parent 1) (unrealized (2 0))+ (maps ((0 1) ((b b) (t t) (m m) (r r) (k k) (a a)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wang@@ -601,6 +606,7 @@ (precedes ((1 1) (0 0)) ((2 2) (1 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 1 to prove Lemma 4.1.") (operation nonce-test (displaced 0 3 init1 3) k (2 0) (enc "keytag" (enc "h"@@ -638,6 +644,7 @@ (label 3) (parent 2) (realized)+ (maps ((2 0) ((b b) (t t) (m m) (r r) (k k) (a a)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton wang@@ -650,6 +657,7 @@ (precedes ((0 0) (3 0)) ((2 1) (1 0)) ((3 2) (2 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 1 to prove Lemma 4.1.") (operation nonce-test (added-strand ttp-rc1 3) k (2 0) (enc "keytag" (enc "h"@@ -744,6 +752,7 @@ (label 4) (parent 2) (realized)+ (maps ((0 1) ((b b) (t t) (m m) (r r) (k k) (a a)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton wang@@ -753,6 +762,7 @@ (precedes ((1 2) (0 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 1 to prove Lemma 4.1.") (operation generalization deleted (1 0)) (strand-map 0 2) (traces ((recv m) (send m))@@ -799,6 +809,7 @@ (precedes ((0 0) (2 0)) ((2 2) (1 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 1 to prove Lemma 4.1.") (operation generalization deleted (2 0)) (strand-map 0 1 3) (traces@@ -1417,6 +1428,7 @@ (label 7) (unrealized (1 0)) (preskeleton)+ (maps ((0 1) ((b b) (t t) (m m) (r r) (k k) (a a)))) (origs (m (0 0)) (k (0 0))) (comment "Not a skeleton")) @@ -1427,6 +1439,7 @@ (precedes ((0 0) (1 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 2 to prove Lemma 4.1.") (traces ((send (cat@@ -1448,6 +1461,7 @@ (label 8) (parent 7) (unrealized (1 0))+ (maps ((0 1) ((b b) (t t) (m m) (r r) (k k) (a a)))) (origs (m (0 0)) (k (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -1458,6 +1472,7 @@ (precedes ((1 2) (0 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 2 to prove Lemma 4.1.") (operation nonce-test (displaced 0 2 init1 3) k (1 0) (enc "keytag" (enc "h"@@ -1508,6 +1523,7 @@ (precedes ((0 0) (2 0)) ((2 2) (1 0))) (non-orig (privk "encr" t)) (uniq-orig m k)+ (comment "Experiment 2 to prove Lemma 4.1.") (operation nonce-test (added-strand ttp-rc1 3) k (1 0) (enc "keytag" (enc "h"@@ -2137,6 +2153,7 @@ (privk "sign" b))) (send (cat k r)))) (label 11) (unrealized (0 1))+ (maps ((0) ((b b) (t t) (m m) (r r) (k k) (a a)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -2146,6 +2163,7 @@ (defstrand resp1 2 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 1) (0 1))) (non-orig (privk "sign" b))+ (comment "First of three experiments to prove Lemma 4.2, clause 1.") (operation encryption-test (added-strand resp1 2) (enc "eortag" (enc "h"@@ -2231,6 +2249,7 @@ (x (enc "h" (cat "h" k))) (a a) (b b) (t t)) (precedes ((1 1) (0 1))) (non-orig (privk "sign" b))+ (comment "First of three experiments to prove Lemma 4.2, clause 1.") (operation encryption-test (added-strand resp3 2) (enc "eortag" (enc "h"@@ -2854,6 +2873,7 @@ (privk "sign" b))))) (label 14) (unrealized (0 2))+ (maps ((0) ((b b) (t t) (m m) (r r) (k k) (a a)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -2863,6 +2883,7 @@ (defstrand resp1 2 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 1) (0 2))) (non-orig (privk "sign" b))+ (comment "Second of three experiments to prove Lemma 4.2, clause 1.") (operation encryption-test (added-strand resp1 2) (enc "eortag" (enc "h"@@ -2951,6 +2972,7 @@ (x (enc "h" (cat "h" k))) (a a) (b b) (t t)) (precedes ((1 1) (0 2))) (non-orig (privk "sign" b))+ (comment "Second of three experiments to prove Lemma 4.2, clause 1.") (operation encryption-test (added-strand resp3 2) (enc "eortag" (enc "h"@@ -3587,6 +3609,7 @@ (privk "sign" b))))) (label 17) (unrealized (0 1) (0 3))+ (maps ((0) ((b b) (t t) (m m) (r r) (k k) (a a)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -3596,6 +3619,7 @@ (defstrand resp1 2 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 1) (0 1))) (non-orig (privk "sign" b))+ (comment "Third of three experiments to prove Lemma 4.2, clause 1.") (operation encryption-test (added-strand resp1 2) (enc "eortag" (enc "h"@@ -3694,6 +3718,7 @@ (x (enc "h" (cat "h" k))) (a a) (b b) (t t)) (precedes ((1 1) (0 1))) (non-orig (privk "sign" b))+ (comment "Third of three experiments to prove Lemma 4.2, clause 1.") (operation encryption-test (added-strand resp3 2) (enc "eortag" (enc "h"@@ -4327,6 +4352,7 @@ (privk "sign" b))) (recv (cat k r)))) (label 20) (unrealized (0 0))+ (maps ((0) ((a a) (t t) (m m) (r r) (k k) (b b)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -4336,6 +4362,7 @@ (defstrand init5 1 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0))) (non-orig (privk "sign" a))+ (comment "First of two experiments to prove Lemma 4.2, clause 2.") (operation encryption-test (added-strand init5 1) (enc "eootag" (enc "h"@@ -4980,6 +5007,7 @@ (privk "sign" b)))) (recv (cat k r)))) (label 22) (unrealized (0 0))+ (maps ((0) ((a a) (t t) (m m) (r r) (k k) (b b)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -4989,6 +5017,7 @@ (defstrand init5 1 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0))) (non-orig (privk "sign" a))+ (comment "Second of two experiments to prove Lemma 4.2, clause 2.") (operation encryption-test (added-strand init5 1) (enc "eootag" (enc "h"@@ -5633,6 +5662,7 @@ (privk "sign" t))))) (label 24) (unrealized (0 0) (0 3))+ (maps ((0) ((a a) (t t) (b b) (e1 e1) (e2 e2) (x x)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -5648,6 +5678,7 @@ (defstrand init5 1 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0))) (non-orig (privk "sign" a))+ (comment "Experiments to prove Lemma 4.2, clause 3.") (operation encryption-test (added-strand init5 1) (enc "eootag" (enc "h"@@ -5761,6 +5792,15 @@ (label 25) (parent 24) (unrealized (0 3))+ (maps+ ((0)+ ((a a) (t t) (b b) (e1 (enc m k))+ (e2+ (enc "keytag"+ (enc "h"+ (cat "h" a b t (enc "h" (cat "h" (enc m k)))+ (enc "h" (cat "h" k)))) k r (pubk "encr" t)))+ (x (enc "h" (cat "h" k)))))) (comment "4 in cohort - 4 not yet seen")) (defskeleton wang@@ -5776,6 +5816,7 @@ (defstrand init3 2 (m m) (k k) (r r-0) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((2 1) (0 3))) (non-orig (privk "sign" a))+ (comment "Experiments to prove Lemma 4.2, clause 3.") (operation encryption-test (added-strand init3 2) (enc "abrq" a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)) (privk "sign" a)) (0 3))@@ -5926,6 +5967,7 @@ (defstrand init3 2 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((1 1) (0 3))) (non-orig (privk "sign" a))+ (comment "Experiments to prove Lemma 4.2, clause 3.") (operation encryption-test (displaced 1 2 init3 2) (enc "abrq" a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)) (privk "sign" a)) (0 3))@@ -6059,6 +6101,7 @@ (defstrand init5 3 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((1 2) (0 3))) (non-orig (privk "sign" a))+ (comment "Experiments to prove Lemma 4.2, clause 3.") (operation encryption-test (displaced 1 2 init5 3) (enc "abrq" a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)) (privk "sign" a)) (0 3))@@ -6203,6 +6246,7 @@ (defstrand init5 3 (m m) (k k) (r r-0) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((2 2) (0 3))) (non-orig (privk "sign" a))+ (comment "Experiments to prove Lemma 4.2, clause 3.") (operation encryption-test (added-strand init5 3) (enc "abrq" a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)) (privk "sign" a)) (0 3))@@ -6863,6 +6907,7 @@ (privk "sign" t))))) (label 30) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (t t) (y y) (x x)))) (origs) (comment "3 in cohort - 3 not yet seen")) @@ -6874,6 +6919,7 @@ (defstrand ttp-ab1 3 (y y) (x x) (a a) (b b) (t t)) (precedes ((1 2) (0 0))) (non-orig (privk "sign" t))+ (comment "Experiments to prove Lemma 4.3, clause 1.") (operation encryption-test (added-strand ttp-ab1 3) (enc "abcf" (enc "abrq" a b t y x (privk "sign" a)) (privk "sign" t)) (0 0))@@ -6906,6 +6952,7 @@ (defstrand ttp-rc2 3 (y y) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 2) (0 0))) (non-orig (privk "sign" t))+ (comment "Experiments to prove Lemma 4.3, clause 1.") (operation encryption-test (added-strand ttp-rc2 3) (enc "abcf" (enc "abrq" a b t y (enc "h" (cat "h" k)) (privk "sign" a))@@ -6959,6 +7006,7 @@ (defstrand ttp-cf2 3 (y y) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 2) (0 0))) (non-orig (privk "sign" t))+ (comment "Experiments to prove Lemma 4.3, clause 1.") (operation encryption-test (added-strand ttp-cf2 3) (enc "abcf" (enc "abrq" a b t y (enc "h" (cat "h" k)) (privk "sign" a))@@ -7512,6 +7560,7 @@ (privk "sign" t))))) (label 34) (unrealized (0 0))+ (maps ((0) ((y y) (x x) (a a) (b b) (t t)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -7522,6 +7571,7 @@ (defstrand init3 2 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 1) (0 0))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 1 to prove Lemma 4.3, clause 2.") (operation encryption-test (added-strand init3 2) (enc "abrq" a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)) (privk "sign" a)) (0 0))@@ -7575,6 +7625,7 @@ (defstrand init5 3 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 2) (0 0))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 1 to prove Lemma 4.3, clause 2.") (operation encryption-test (added-strand init5 3) (enc "abrq" a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)) (privk "sign" a)) (0 0))@@ -8158,6 +8209,7 @@ (privk "sign" t))))) (label 37) (unrealized (0 0) (0 1))+ (maps ((0) ((a a) (b b) (t t) (r r) (k k) (y y)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -8168,6 +8220,7 @@ (defstrand init5 1 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 2 to prove Lemma 4.3, clause 2.") (operation encryption-test (added-strand init5 1) (enc "eootag" (enc "h"@@ -8241,6 +8294,10 @@ (label 38) (parent 37) (unrealized (0 1))+ (maps+ ((0)+ ((a a) (b b) (t t) (r r) (k k)+ (y (enc "h" (cat "h" (enc m k))))))) (comment "4 in cohort - 4 not yet seen")) (defskeleton wang@@ -8251,6 +8308,7 @@ (defstrand init3 2 (m m) (k k) (r r-0) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((2 1) (0 1))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 2 to prove Lemma 4.3, clause 2.") (operation encryption-test (added-strand init3 2) (enc "abrq" a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)) (privk "sign" a)) (0 1))@@ -8351,6 +8409,7 @@ (defstrand init3 2 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((1 1) (0 1))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 2 to prove Lemma 4.3, clause 2.") (operation encryption-test (displaced 1 2 init3 2) (enc "abrq" a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)) (privk "sign" a)) (0 1))@@ -8434,6 +8493,7 @@ (defstrand init5 3 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((1 2) (0 1))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 2 to prove Lemma 4.3, clause 2.") (operation encryption-test (displaced 1 2 init5 3) (enc "abrq" a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)) (privk "sign" a)) (0 1))@@ -8528,6 +8588,7 @@ (defstrand init5 3 (m m) (k k) (r r-0) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((2 2) (0 1))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 2 to prove Lemma 4.3, clause 2.") (operation encryption-test (added-strand init5 3) (enc "abrq" a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)) (privk "sign" a)) (0 1))@@ -9158,6 +9219,7 @@ (privk "sign" t))))) (label 43) (unrealized (0 0) (0 1))+ (maps ((0) ((a a) (b b) (t t) (r r) (k k) (y y)))) (origs) (comment "1 in cohort - 1 not yet seen")) @@ -9168,6 +9230,7 @@ (defstrand init5 1 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 3 to prove Lemma 4.3, clause 2.") (operation encryption-test (added-strand init5 1) (enc "eootag" (enc "h"@@ -9241,6 +9304,10 @@ (label 44) (parent 43) (unrealized (0 1))+ (maps+ ((0)+ ((a a) (b b) (t t) (r r) (k k)+ (y (enc "h" (cat "h" (enc m k))))))) (comment "4 in cohort - 4 not yet seen")) (defskeleton wang@@ -9251,6 +9318,7 @@ (defstrand init3 2 (m m) (k k) (r r-0) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((2 1) (0 1))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 3 to prove Lemma 4.3, clause 2.") (operation encryption-test (added-strand init3 2) (enc "abrq" a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)) (privk "sign" a)) (0 1))@@ -9351,6 +9419,7 @@ (defstrand init3 2 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((1 1) (0 1))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 3 to prove Lemma 4.3, clause 2.") (operation encryption-test (displaced 1 2 init3 2) (enc "abrq" a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)) (privk "sign" a)) (0 1))@@ -9434,6 +9503,7 @@ (defstrand init5 3 (m m) (k k) (r r) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((1 2) (0 1))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 3 to prove Lemma 4.3, clause 2.") (operation encryption-test (displaced 1 2 init5 3) (enc "abrq" a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)) (privk "sign" a)) (0 1))@@ -9528,6 +9598,7 @@ (defstrand init5 3 (m m) (k k) (r r-0) (a a) (b b) (t t)) (precedes ((1 0) (0 0)) ((2 2) (0 1))) (non-orig (privk "encr" t) (privk "sign" a))+ (comment "Experiment 3 to prove Lemma 4.3, clause 2.") (operation encryption-test (added-strand init5 3) (enc "abrq" a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)) (privk "sign" a)) (0 1))
tst/weird.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/weird.scm") (defprotocol weird basic@@ -45,6 +45,7 @@ (traces ((send k)) ((recv (enc a k)))) (label 1) (unrealized (1 0))+ (maps ((0 1) ((k k) (a a)))) (origs (k (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -78,6 +79,7 @@ (label 3) (parent 1) (realized)+ (maps ((0 1) ((k k) (a a)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton weird@@ -144,6 +146,7 @@ (label 6) (realized) (dead)+ (maps ((0 1) ((k k) (a a)))) (origs) (ugens (k (1 0)) (k (0 0))) (comment "Input cannot be made into a skeleton--nothing to do"))@@ -168,6 +171,7 @@ (label 7) (unrealized (1 0)) (preskeleton)+ (maps ((0 1) ((k k) (a a)))) (origs) (ugens (k (0 0))) (comment "Not a skeleton"))
tst/wide-mouth-frog-scyther.tst view
@@ -1,7 +1,7 @@ (herald "Wide-Mouth Frog Protocol from Scyther" (bound 8) (comment "This protocol has an infinite number of shapes")) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/wide-mouth-frog-scyther.lsp") (comment "Strand count bounded at 8") @@ -63,6 +63,7 @@ (traces ((recv (enc t tb a k (ltk b t))))) (label 1) (unrealized (0 0))+ (maps ((0) ((b b) (t t) (k k) (a a) (tb tb)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -135,6 +136,7 @@ (send (enc t tb a k (ltk b t))))) (label 4) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (t t) (k k) (ta ta) (tb tb)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -177,6 +179,7 @@ (label 6) (parent 4) (unrealized (1 0))+ (maps ((0) ((a t) (b b) (t t) (k k) (ta ta) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wide-mouth-frog@@ -224,6 +227,7 @@ (label 8) (parent 6) (unrealized (2 0))+ (maps ((0) ((a t) (b t) (t t) (k k) (ta ta) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wide-mouth-frog@@ -277,6 +281,7 @@ (label 10) (parent 8) (unrealized (3 0))+ (maps ((0) ((a t) (b t) (t t) (k k) (ta ta) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wide-mouth-frog@@ -336,6 +341,7 @@ (label 12) (parent 10) (unrealized (4 0))+ (maps ((0) ((a t) (b t) (t t) (k k) (ta ta) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wide-mouth-frog@@ -403,6 +409,7 @@ (label 14) (parent 12) (unrealized (5 0))+ (maps ((0) ((a t) (b t) (t t) (k k) (ta ta) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wide-mouth-frog@@ -476,6 +483,7 @@ (label 16) (parent 14) (unrealized (6 0))+ (maps ((0) ((a t) (b t) (t t) (k k) (ta ta) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wide-mouth-frog@@ -559,4 +567,5 @@ (parent 16) (unrealized (7 0)) (aborted)+ (maps ((0) ((a t) (b t) (t t) (k k) (ta ta) (tb tb)))) (comment "aborted"))
tst/wide-mouth-frog.tst view
@@ -1,7 +1,7 @@ (herald "Wide-Mouth Frog Protocol" (comment "This protocol has an infinite number of shapes") (bound 8)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/wide-mouth-frog.lsp") (comment "Strand count bounded at 8") @@ -63,6 +63,7 @@ (traces ((recv (enc tb a k (ltk b t))))) (label 1) (unrealized (0 0))+ (maps ((0) ((b b) (t t) (k k) (a a) (tb tb)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -135,6 +136,7 @@ (send (enc tb a k (ltk b t))))) (label 4) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (t t) (k k) (ta ta) (tb tb)))) (origs) (comment "2 in cohort - 2 not yet seen")) @@ -177,6 +179,7 @@ (label 6) (parent 4) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (t t) (k k) (ta ta) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wide-mouth-frog@@ -224,6 +227,7 @@ (label 8) (parent 6) (unrealized (2 0))+ (maps ((0) ((a a) (b b) (t t) (k k) (ta ta) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wide-mouth-frog@@ -277,6 +281,7 @@ (label 10) (parent 8) (unrealized (3 0))+ (maps ((0) ((a a) (b b) (t t) (k k) (ta ta) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wide-mouth-frog@@ -336,6 +341,7 @@ (label 12) (parent 10) (unrealized (4 0))+ (maps ((0) ((a a) (b b) (t t) (k k) (ta ta) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wide-mouth-frog@@ -403,6 +409,7 @@ (label 14) (parent 12) (unrealized (5 0))+ (maps ((0) ((a a) (b b) (t t) (k k) (ta ta) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wide-mouth-frog@@ -477,6 +484,7 @@ (label 16) (parent 14) (unrealized (6 0))+ (maps ((0) ((a a) (b b) (t t) (k k) (ta ta) (tb tb)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wide-mouth-frog@@ -561,4 +569,5 @@ (parent 16) (unrealized (7 0)) (aborted)+ (maps ((0) ((a a) (b b) (t t) (k k) (ta ta) (tb tb)))) (comment "aborted"))
tst/wonthull.tst view
@@ -1,6 +1,6 @@ (herald wonthull (bound 9)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/wonthull.scm") (comment "Strand count bounded at 9") @@ -32,6 +32,7 @@ (recv (enc "okay" x3 x4 (pubk a))))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x3) (x4 x4)))) (origs (x3 (0 0)) (x2 (0 0)) (x1 (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -49,6 +50,7 @@ (label 1) (parent 0) (unrealized (0 1))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x2) (x4 x4)))) (origs (x1 (0 0)) (x2 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -75,6 +77,7 @@ (enc "okay" y3 x3 (pubk a)) (enc x3 x2 (pubk a))) (strand-map 0 1))) (unrealized (0 1))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x3) (x4 x4)))) (comment "2 in cohort - 1 not yet seen")) (defskeleton wonthull@@ -94,6 +97,7 @@ (label 3) (parent 1) (unrealized (0 1))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x2) (x4 x4)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wonthull@@ -138,6 +142,7 @@ (seen-ops (4 (operation generalization separated y3-0) (strand-map 0 1))) (realized)+ (maps ((0) ((a a) (x1 x1) (x2 y3) (x3 y3) (x4 y3)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull@@ -159,8 +164,15 @@ ((recv (enc x2 x2 (pubk a))) (send (enc "okay" x2 x2 (pubk a))))) (label 6) (parent 3)+ (seen 5)+ (seen-ops+ (5+ (operation nonce-test (contracted (x2 y3) (x4 y3)) y3 (0 1)+ (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 1))) (unrealized (0 1))- (comment "1 in cohort - 1 not yet seen"))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x2) (x4 x4))))+ (comment "2 in cohort - 1 not yet seen")) (defskeleton wonthull (vars (x1 x2 y3 text) (a name))@@ -185,6 +197,7 @@ (seen-ops (5 (operation generalization deleted (1 0)) (strand-map 0 2))) (realized)+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x2) (x4 x2)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
tst/wonthull2.tst view
@@ -1,11554 +1,12801 @@ (herald wonthull2 (bound 9)) -(comment "CPSA 4.4.5")-(comment "All input read from tst/wonthull2.scm")-(comment "Strand count bounded at 9")--(defprotocol wonthull2 basic- (defrole init- (vars (a name) (x1 x2 x3 x4 text))- (trace (send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))- (recv (enc "okay" x3 x4 (pubk a))))- (non-orig (privk a))- (uniq-orig x3))- (defrole resp- (vars (a name) (y1 y2 y3 text))- (trace (recv (enc y1 y2 (pubk a)))- (send (enc "okay" y3 y1 (pubk a)))))- (defgenrule neqRl_indx- (forall ((x indx)) (implies (fact neq x x) (false))))- (defgenrule neqRl_strd- (forall ((x strd)) (implies (fact neq x x) (false))))- (defgenrule neqRl_mesg- (forall ((x mesg)) (implies (fact neq x x) (false)))))--(defskeleton wonthull2- (vars (x1 x2 x3 x4 text) (a name))- (defstrand init 2 (x1 x1) (x2 x2) (x3 x3) (x4 x4) (a a))- (non-orig (privk a))- (uniq-orig x3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))- (recv (enc "okay" x3 x4 (pubk a)))))- (label 0)- (unrealized (0 1))- (origs (x3 (0 0)))- (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x1 x2 x3 x4 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x2) (x3 x3) (x4 x4) (a a))- (defstrand resp 2 (y1 x3) (y2 x2) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((1 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (added-strand resp 2) x3 (0 1)- (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a)))- (strand-map 0)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))- (recv (enc "okay" x3 x4 (pubk a))))- ((recv (enc x3 x2 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))- (label 1)- (parent 0)- (unrealized (0 1))- (comment "3 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x1 x2 x4 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x4) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((1 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (0 1)- (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a)))- (strand-map 0)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))- (recv (enc "okay" x1 x4 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))- (label 2)- (parent 0)- (seen 5)- (seen-ops- (5- (operation nonce-test (added-strand resp 2) x1 (0 1)- (enc "okay" y3 x1 (pubk a)) (enc x1 x1 (pubk a))- (enc x1 x2 (pubk a))) (strand-map 0 1)))- (unrealized (0 1))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x1 x2 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x2) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x2) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((1 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (x3 y3) (x4 y3)) y3 (0 1)- (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x2 (pubk a)))- (strand-map 0 1)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x2 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x2 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 3)- (parent 1)- (realized)- (shape)- (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 y3) (x4 y3))))- (origs (y3 (0 0))))--(defskeleton wonthull2- (vars (x1 x2 x3 x4 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x2) (x3 x3) (x4 x4) (a a))- (defstrand resp 2 (y1 x3) (y2 x2) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x2) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (added-strand resp 2) x3 (0 1)- (enc "okay" y3 x3 (pubk a)) (enc x1 x3 (pubk a))- (enc x3 x2 (pubk a)))- (strand-map 0 1)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))- (recv (enc "okay" x3 x4 (pubk a))))- ((recv (enc x3 x2 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x2 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 4)- (parent 1)- (unrealized (0 1))- (comment "3 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x1 x2 x4 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x4) (a a))- (defstrand resp 2 (y1 x1) (y2 x2) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (0 1)- (enc "okay" y3 x1 (pubk a)) (enc x1 x1 (pubk a))- (enc x1 x2 (pubk a)))- (strand-map 0 1)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))- (recv (enc "okay" x1 x4 (pubk a))))- ((recv (enc x1 x2 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 5)- (parent 1)- (seen 10)- (seen-ops- (10- (operation nonce-test (added-strand resp 2) x1 (0 1)- (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))) (strand-map 0 1 2)))- (unrealized (0 1))- (comment "4 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x2 y3 text) (a name))- (defstrand init 2 (x1 y3) (x2 x2) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((1 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (x1 y3) (x4 y3)) y3 (0 1)- (enc "okay" y3 y3 (pubk a)) (enc y3 x2 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x2 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 6)- (parent 2)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x1 x2 x4 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x4) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (0 1)- (enc "okay" y3 x1 (pubk a)) (enc x1 x1 (pubk a))- (enc x1 x2 (pubk a)))- (strand-map 0 1)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))- (recv (enc "okay" x1 x4 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 7)- (parent 2)- (seen 13)- (seen-ops- (13- (operation nonce-test (added-strand resp 2) x1 (0 1)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))) (strand-map 0 1 2)))- (unrealized (0 1))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x1 x2 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x2) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x2) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x3 x1) (x4 x1)) x1 (0 1)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x2 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x2 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 8)- (parent 4)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x1 x2 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x2) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x2) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x2) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (x3 y3) (x4 y3)) y3 (0 1)- (enc "okay" x1 y3 (pubk a)) (enc "okay" y3 y3 (pubk a))- (enc x1 y3 (pubk a)) (enc y3 x2 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x2 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x2 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x2 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))- (label 9)- (parent 4)- (seen 3)- (seen-ops- (3 (operation generalization deleted (2 0)) (strand-map 0 1)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 x2 x4 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x4) (a a))- (defstrand resp 2 (y1 x1) (y2 x2) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x2) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (0 1)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))- (recv (enc "okay" x1 x4 (pubk a))))- ((recv (enc x1 x2 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x2 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 10)- (parent 4)- (unrealized (0 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x2 y3 y3-0 text) (a name))- (defstrand init 2 (x1 y3-0) (x2 x2) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x2) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (contracted (x1 y3-0) (x4 y3-0)) y3-0 (0 1)- (enc "okay" y3 y3-0 (pubk a)) (enc "okay" y3-0 y3-0 (pubk a))- (enc y3-0 x2 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x2 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x2 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a)))))- (label 11)- (parent 5)- (seen 6)- (seen-ops- (6 (operation generalization deleted (1 0)) (strand-map 0 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x2 y3 y3-0 text) (a name))- (defstrand init 2 (x1 y3) (x2 x2) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x2) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (x1 y3) (x4 y3)) y3 (0 1)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc y3 x2 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x2 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x2 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 12)- (parent 5)- (seen 16)- (seen-ops- (16 (operation generalization deleted (2 0)) (strand-map 0 1)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 x2 x4 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x4) (a a))- (defstrand resp 2 (y1 x1) (y2 x2) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (0 1)- (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))- (recv (enc "okay" x1 x4 (pubk a))))- ((recv (enc x1 x2 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 13)- (parent 5)- (unrealized (0 1))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x2 y3 y3-0 text) (a name))- (defstrand init 2 (x1 y3) (x2 x2) (x3 y3-0) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((1 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3 y3-0)- (operation generalization separated y3-0)- (strand-map 0 1)- (traces- ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x2 (pubk a))))- (recv (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3 (pubk a)))))- (label 14)- (parent 6)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x1 x2 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x4 x1)) x1 (0 1)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 15)- (parent 7)- (seen 6)- (seen-ops- (6 (operation generalization deleted (1 0)) (strand-map 0 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 x2 text) (a name))- (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x2) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((1 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation generalization deleted (1 0))- (strand-map 0 2)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x2 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 16)- (parent 8)- (seen 3)- (seen-ops- (3 (operation generalization separated x1-0) (strand-map 0 1)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 x2 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x2) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x2) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x4 x1)) x1 (0 1)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x1 (pubk a))- (enc x1 x2 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x2 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x2 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 17)- (parent 10)- (seen 12)- (seen-ops- (12 (operation generalization deleted (1 0)) (strand-map 0 2 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 x2 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x2) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x4 x1)) x1 (0 1)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x1 (pubk a))- (enc x1 x2 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x2 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 18)- (parent 13)- (seen 15)- (seen-ops- (15 (operation generalization deleted (1 0)) (strand-map 0 2 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x2 y3 y3-0 text) (a name))- (defstrand init 2 (x1 y3) (x2 x2) (x3 y3-0) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((1 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation generalization forgot y3)- (strand-map 0 1)- (traces- ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x2 (pubk a))))- (recv (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3 (pubk a)))))- (label 19)- (parent 14)- (realized)- (shape)- (maps ((0) ((a a) (x1 y3) (x2 x2) (x3 y3-0) (x4 y3))))- (origs (y3-0 (0 0))))--(comment "Nothing left to do")--(defprotocol wonthull2 basic- (defrole init- (vars (a name) (x1 x2 x3 x4 text))- (trace (send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))- (recv (enc "okay" x3 x4 (pubk a))))- (non-orig (privk a))- (uniq-orig x3))- (defrole resp- (vars (a name) (y1 y2 y3 text))- (trace (recv (enc y1 y2 (pubk a)))- (send (enc "okay" y3 y1 (pubk a)))))- (defgenrule neqRl_indx- (forall ((x indx)) (implies (fact neq x x) (false))))- (defgenrule neqRl_strd- (forall ((x strd)) (implies (fact neq x x) (false))))- (defgenrule neqRl_mesg- (forall ((x mesg)) (implies (fact neq x x) (false)))))--(defskeleton wonthull2- (vars (x1 x3 x1-0 x3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (precedes ((0 0) (1 0)) ((1 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3-0)- (traces- ((send (cat (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a))))- (recv (enc "okay" x3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0)))- (send (enc "okay" x3 x1 (pubk a-0)))))- (label 20)- (unrealized (0 1))- (origs (x3-0 (0 0)))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 text) (a name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (1 0)) ((1 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (displaced 2 1 resp 2) x3-0 (0 1)- (enc x1-0 x3-0 (pubk a-0)) (enc x3-0 x3 (pubk a-0)))- (strand-map 0 1)- (traces- ((send (cat (enc x1-0 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a)))))- (label 21)- (parent 20)- (unrealized (0 1))- (origs (x1 (0 0)))- (comment "3 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (precedes ((0 0) (1 0)) ((1 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (displaced 2 1 resp 2) x3-0 (0 1)- (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a)))- (strand-map 0 1)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0)))- (send (enc "okay" x3 x1 (pubk a-0)))))- (label 22)- (parent 20)- (seen 25)- (seen-ops- (25- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a))) (strand-map 0 1)))- (unrealized (1 0))- (origs (x3 (0 0)))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 x3-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3-0) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3-0)- (operation nonce-test (added-strand resp 2) x3-0 (0 1)- (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a)))- (strand-map 0 1)- (traces- ((send (cat (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a))))- (recv (enc "okay" x3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3-0 x3 (pubk a)))- (send (enc "okay" y3 x3-0 (pubk a)))))- (label 23)- (parent 20)- (seen 27)- (seen-ops- (27- (operation nonce-test (displaced 3 1 resp 2) x3-0 (0 1)- (enc "okay" y3 x3-0 (pubk a-0)) (enc x1-0 x3-0 (pubk a-0))- (enc x3-0 x3 (pubk a-0))) (strand-map 0 1 2)))- (unrealized (0 1))- (comment "5 in cohort - 4 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1-0)- (operation nonce-test (added-strand resp 2) x1-0 (0 1)- (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1)- (traces- ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))))- (recv (enc "okay" x1-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3 x1-0 (pubk a)))))- (label 24)- (parent 20)- (seen 26 33)- (seen-ops- (26- (operation nonce-test (displaced 3 1 resp 2) x1-0 (0 1)- (enc "okay" y3 x1-0 (pubk a-0)) (enc x1-0 x3 (pubk a-0))- (enc x1-0 x1-0 (pubk a-0))) (strand-map 0 1 2))- (33- (operation nonce-test (added-strand resp 2) x1-0 (0 1)- (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))- (enc x1-0 x1-0 (pubk a))) (strand-map 0 1 2)))- (unrealized (0 1))- (comment "5 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (1 0)) ((1 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (displaced 2 1 resp 2) x1-0 (0 1)- (enc "okay" x3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))- (enc x1 x1-0 (pubk a)))- (strand-map 0 1)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 25)- (parent 21)- (realized)- (shape)- (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))- (origs (x3 (0 0))))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (0 1)- (enc "okay" x3 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))- (label 26)- (parent 21)- (unrealized (0 1))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 text) (a name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (0 1)- (enc "okay" x3 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1-0 x1 (pubk a)))- (strand-map 0 1)- (traces- ((send (cat (enc x1-0 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))- (label 27)- (parent 21)- (seen 40)- (seen-ops- (40- (operation nonce-test (added-strand resp 2) x1 (0 1)- (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a))) (strand-map 0 1 2)))- (unrealized (0 1))- (comment "4 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (1 0)) ((1 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a)))))- (label 28)- (parent 22)- (realized)- (shape)- (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))- (origs (x3 (0 0))))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))- (label 29)- (parent 22)- (unrealized (1 0))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 x3-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3-0) (y2 x3) (y3 x1-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3-0)- (operation nonce-test (added-strand resp 2) x3-0 (0 1)- (enc "okay" y3 x3-0 (pubk a)) (enc x1-0 x3-0 (pubk a))- (enc x3-0 x3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a))))- (recv (enc "okay" x3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3-0 x3 (pubk a))) (send (enc "okay" y3 x3-0 (pubk a))))- ((recv (enc x3-0 x3 (pubk a)))- (send (enc "okay" x1-0 x3-0 (pubk a)))))- (label 30)- (parent 23)- (seen 42)- (seen-ops- (42- (operation nonce-test (displaced 4 1 resp 2) x3-0 (0 1)- (enc "okay" x1-0 x3-0 (pubk a-0))- (enc "okay" y3 x3-0 (pubk a-0)) (enc x1-0 x3-0 (pubk a-0))- (enc x3-0 x3 (pubk a-0))) (strand-map 0 1 2 3)))- (unrealized (0 1))- (comment "5 in cohort - 4 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (x1-0 y3) (x3-0 y3)) y3 (0 1)- (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 31)- (parent 23)- (seen 43)- (seen-ops- (43- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))) (strand-map 0 1 2)))- (unrealized (1 0))- (comment "4 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (displaced 3 1 resp 2) x3-0 (0 1)- (enc "okay" y3 x3-0 (pubk a)) (enc x1-0 x3-0 (pubk a))- (enc x3-0 x3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))- (label 32)- (parent 23)- (seen 29 41)- (seen-ops- (29- (operation nonce-test (displaced 3 2 resp 2) x3 (1 0)- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a))) (strand-map 0 1 2))- (41- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a))) (strand-map 0 1 2)))- (unrealized (1 0))- (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1-0)- (operation nonce-test (added-strand resp 2) x1-0 (0 1)- (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))- (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))))- (recv (enc "okay" x1-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1-0 x3 (pubk a))) (send (enc "okay" y3 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3-0 x1-0 (pubk a)))))- (label 33)- (parent 23)- (seen 36 40 51)- (seen-ops- (36- (operation nonce-test (displaced 4 3 resp 2) x1-0 (0 1)- (enc "okay" y3 x1-0 (pubk a)) (enc "okay" y3-0 x1-0 (pubk a))- (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 2))- (40- (operation nonce-test (displaced 4 1 resp 2) x1-0 (0 1)- (enc "okay" y3 x1-0 (pubk a-0))- (enc "okay" y3-0 x1-0 (pubk a-0)) (enc x1-0 x3 (pubk a-0))- (enc x1-0 x1-0 (pubk a-0))) (strand-map 0 1 2 3))- (51- (operation nonce-test (added-strand resp 2) x1-0 (0 1)- (enc "okay" y3 x1-0 (pubk a)) (enc "okay" y3-0 x1-0 (pubk a))- (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 3)))- (unrealized (0 1))- (comment "6 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1-0)- (operation nonce-test (added-strand resp 2) x1-0 (0 1)- (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))- (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))))- (recv (enc "okay" x1-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" x1-0 x1-0 (pubk a)))))- (label 34)- (parent 24)- (seen 57)- (seen-ops- (57- (operation nonce-test (added-strand resp 2) x1-0 (0 1)- (enc "okay" x1-0 x1-0 (pubk a)) (enc "okay" y3 x1-0 (pubk a))- (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 3)))- (unrealized (0 1))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (x1 y3) (x1-0 y3)) y3 (0 1)- (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 35)- (parent 24)- (seen 37)- (seen-ops- (37- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a))) (strand-map 0 1 2)))- (unrealized (1 0))- (comment "4 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x1 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1-0)- (operation nonce-test (displaced 3 2 resp 2) x1-0 (0 1)- (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))- (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))- (recv (enc "okay" x1-0 x1 (pubk a))))- ((recv (enc x1 x1-0 (pubk a-0)))- (send (enc "okay" x1-0 x1 (pubk a-0))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3 x1-0 (pubk a)))))- (label 36)- (parent 24)- (seen 39)- (seen-ops- (39- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)- (enc x1 x1 (pubk a))) (strand-map 0 1 2)))- (unrealized (1 0))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (displaced 3 2 resp 2) x1 (0 1)- (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 37)- (parent 26)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (0 1)- (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 38)- (parent 26)- (seen 37)- (seen-ops- (37 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (displaced 3 2 resp 2) x1 (0 1)- (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))- (label 39)- (parent 26)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (0 1)- (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 40)- (parent 26)- (seen 39)- (seen-ops- (39- (operation nonce-test (displaced 4 2 resp 2) x1 (0 1)- (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 2)))- (unrealized (0 1))- (comment "5 in cohort - 4 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (displaced 3 1 resp 2) x1-0 (0 1)- (enc "okay" x3 x1-0 (pubk a)) (enc "okay" y3 x1-0 (pubk a))- (enc x1-0 x3 (pubk a)) (enc x1 x1-0 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))- (label 41)- (parent 27)- (seen 25)- (seen-ops- (25 (operation generalization deleted (2 0)) (strand-map 0 1)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 text) (a name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (0 1)- (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1-0 x1 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1-0 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1-0 x1 (pubk a)))))- (label 42)- (parent 27)- (unrealized (0 1))- (comment "3 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (displaced 3 2 resp 2) x1-0 (0 1)- (enc "okay" x3 x1-0 (pubk a)) (enc "okay" y3 x1-0 (pubk a))- (enc x1-0 x3 (pubk a)) (enc x1 x1-0 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 43)- (parent 27)- (realized)- (shape)- (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))- (origs (y3 (0 0))))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))- (label 44)- (parent 29)- (seen 28)- (seen-ops- (28 (operation generalization deleted (2 0)) (strand-map 0 1)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))- (label 45)- (parent 29)- (seen 25)- (seen-ops- (25 (operation generalization deleted (2 0)) (strand-map 0 1)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a)))))- (label 46)- (parent 29)- (unrealized (1 0))- (comment "3 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 47)- (parent 29)- (seen 78)- (seen-ops- (78- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (x1-0 y3) (x3-0 y3)) y3 (0 1)- (enc "okay" x1 y3 (pubk a)) (enc "okay" y3 y3 (pubk a))- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))- (label 48)- (parent 30)- (seen 54 74)- (seen-ops- (54- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a))) (strand-map 0 1 2 2))- (74- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "5 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x1-0 x1) (x3-0 x1)) x1 (0 1)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 49)- (parent 30)- (seen 75)- (seen-ops- (75- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "5 in cohort - 4 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (displaced 4 1 resp 2) x3-0 (0 1)- (enc "okay" x1-0 x3-0 (pubk a)) (enc "okay" y3 x3-0 (pubk a))- (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a)))))- (label 50)- (parent 30)- (seen 73)- (seen-ops- (73- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "5 in cohort - 4 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x3) (y3 x1-0) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1-0)- (operation nonce-test (added-strand resp 2) x1-0 (0 1)- (enc "okay" x1-0 x1-0 (pubk a)) (enc "okay" y3 x1-0 (pubk a))- (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))))- (recv (enc "okay" x1-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1-0 x3 (pubk a))) (send (enc "okay" y3 x1-0 (pubk a))))- ((recv (enc x1-0 x3 (pubk a)))- (send (enc "okay" x1-0 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3-0 x1-0 (pubk a)))))- (label 51)- (parent 30)- (seen 61)- (seen-ops- (61- (operation nonce-test (displaced 5 4 resp 2) x1-0 (0 1)- (enc "okay" x1-0 x1-0 (pubk a)) (enc "okay" y3 x1-0 (pubk a))- (enc "okay" y3-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))- (enc x1-0 x1-0 (pubk a))) (strand-map 0 1 2 3 2)))- (unrealized (0 1))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (displaced 3 2 resp 2) y3 (1 0)- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 52)- (parent 31)- (unrealized (1 0))- (comment "3 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 53)- (parent 31)- (seen 94)- (seen-ops- (94- (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a))) (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "4 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))- (label 54)- (parent 31)- (seen 95 98)- (seen-ops- (95- (operation nonce-test (displaced 4 2 resp 2) x1 (1 0)- (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3))- (98- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))- (label 55)- (parent 32)- (seen 28)- (seen-ops- (28 (operation generalization deleted (2 0)) (strand-map 0 1)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))- (label 56)- (parent 32)- (seen 29)- (seen-ops- (29- (operation nonce-test (displaced 4 2 resp 2) x3 (1 0)- (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1-0 x3 (pubk a))) (strand-map 0 1 2 2)))- (unrealized (1 0))- (comment "5 in cohort - 4 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1-0)- (operation nonce-test (added-strand resp 2) x1-0 (0 1)- (enc "okay" y3 x1-0 (pubk a)) (enc "okay" y3-0 x1-0 (pubk a))- (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))))- (recv (enc "okay" x1-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1-0 x3 (pubk a))) (send (enc "okay" y3 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3-0 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" x1-0 x1-0 (pubk a)))))- (label 57)- (parent 33)- (seen 61)- (seen-ops- (61- (operation nonce-test (displaced 5 4 resp 2) x1-0 (0 1)- (enc "okay" x1-0 x1-0 (pubk a)) (enc "okay" y3 x1-0 (pubk a))- (enc "okay" y3-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))- (enc x1-0 x1-0 (pubk a))) (strand-map 0 1 2 2 3)))- (unrealized (0 1))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (contracted (x1 y3-0) (x1-0 y3-0)) y3-0 (0 1)- (enc "okay" y3 y3-0 (pubk a)) (enc "okay" y3-0 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a-0)))- (send (enc "okay" x3 y3-0 (pubk a-0))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a)))))- (label 58)- (parent 33)- (seen 64 71)- (seen-ops- (64- (operation nonce-test (displaced 4 2 resp 2) y3-0 (1 0)- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3))- (71- (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "5 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (x1 y3) (x1-0 y3)) y3 (0 1)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 59)- (parent 33)- (seen 54 72)- (seen-ops- (54- (operation nonce-test (displaced 4 3 resp 2) y3 (1 0)- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a))) (strand-map 0 1 2 3))- (72- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "5 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x1-0 x1)) x1 (0 1)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 60)- (parent 34)- (seen 38 63)- (seen-ops- (38- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a))) (strand-map 0 1 2 3))- (63- (operation nonce-test (displaced 4 2 resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "5 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x1 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1-0)- (operation nonce-test (displaced 4 3 resp 2) x1-0 (0 1)- (enc "okay" x1-0 x1-0 (pubk a)) (enc "okay" y3 x1-0 (pubk a))- (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))- (recv (enc "okay" x1-0 x1 (pubk a))))- ((recv (enc x1 x1-0 (pubk a-0)))- (send (enc "okay" x1-0 x1 (pubk a-0))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" x1-0 x1-0 (pubk a)))))- (label 61)- (parent 34)- (unrealized (1 0))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (displaced 3 2 resp 2) y3 (1 0)- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 62)- (parent 35)- (unrealized (1 0))- (comment "3 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 63)- (parent 35)- (seen 120)- (seen-ops- (120- (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a))) (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "4 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 64)- (parent 35)- (seen 121 124)- (seen-ops- (121- (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a))) (strand-map 0 1 2 3))- (124- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a))) (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x1 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1-0)- (operation nonce-test (displaced 3 2 resp 2) x1-0 (1 0)- (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))- (recv (enc "okay" x1-0 x1 (pubk a))))- ((recv (enc x1 x1-0 (pubk a-0)))- (send (enc "okay" x1-0 x1 (pubk a-0))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3 x1-0 (pubk a)))))- (label 65)- (parent 36)- (unrealized (1 0))- (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1-0)- (operation nonce-test (added-strand resp 2) x1-0 (1 0)- (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))- (recv (enc "okay" x1-0 x1 (pubk a))))- ((recv (enc x1 x1-0 (pubk a-0)))- (send (enc "okay" x1-0 x1 (pubk a-0))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3-0 x1-0 (pubk a)))))- (label 66)- (parent 36)- (seen 65)- (seen-ops- (65- (operation nonce-test (displaced 4 2 resp 2) x1-0 (1 0)- (enc "okay" y3-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 2)))- (unrealized (1 0))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3-0) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation generalization separated y3-0)- (strand-map 0 1 2)- (traces- ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3 (pubk a)))))- (label 67)- (parent 37)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((1 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation generalization deleted (2 0))- (strand-map 0 1)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 68)- (parent 39)- (seen 25)- (seen-ops- (25 (operation generalization separated x1-0) (strand-map 0 1)))- (realized)- (origs (x1 (0 0)))- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (0 1)- (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 69)- (parent 40)- (seen 75)- (seen-ops- (75 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (0 1)- (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 70)- (parent 40)- (seen 71)- (seen-ops- (71 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (displaced 4 2 resp 2) x1 (0 1)- (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 71)- (parent 40)- (seen 37)- (seen-ops- (37 (operation generalization deleted (3 0)) (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (displaced 4 3 resp 2) x1 (0 1)- (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a)))))- (label 72)- (parent 40)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (displaced 4 1 resp 2) x1-0 (0 1)- (enc "okay" x3 x1-0 (pubk a)) (enc "okay" x1 x1-0 (pubk a))- (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))- (enc x1 x1-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 73)- (parent 42)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (displaced 4 2 resp 2) x1-0 (0 1)- (enc "okay" x3 x1-0 (pubk a)) (enc "okay" x1 x1-0 (pubk a))- (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))- (enc x1 x1-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))- (label 74)- (parent 42)- (seen 43)- (seen-ops- (43 (operation generalization deleted (3 0)) (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (displaced 4 3 resp 2) x1-0 (0 1)- (enc "okay" x3 x1-0 (pubk a)) (enc "okay" x1 x1-0 (pubk a))- (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))- (enc x1 x1-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 75)- (parent 42)- (seen 132)- (seen-ops- (132 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc "okay" x1 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 76)- (parent 46)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc "okay" x1 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 77)- (parent 46)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc "okay" x1-0 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 78)- (parent 46)- (unrealized (1 0))- (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 79)- (parent 47)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 80)- (parent 47)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))- (label 81)- (parent 48)- (unrealized (1 0))- (comment "4 in cohort - 4 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (displaced 4 3 resp 2) y3 (1 0)- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))- (label 82)- (parent 48)- (seen 96 140 143)- (seen-ops- (96- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" x1 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a))) (strand-map 0 1 2 3))- (140- (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)- (enc "okay" x1 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a))) (strand-map 0 1 2 3))- (143- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "4 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 83)- (parent 48)- (seen 96 98 142)- (seen-ops- (96- (operation nonce-test (displaced 5 3 resp 2) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a))) (strand-map 0 1 2 3 4))- (98- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 2 3))- (142- (operation nonce-test (displaced 5 2 resp 2) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a))) (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "5 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 84)- (parent 49)- (seen 98)- (seen-ops- (98- (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "5 in cohort - 4 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (displaced 4 2 resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 85)- (parent 49)- (seen 98)- (seen-ops- (98- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "4 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (displaced 4 3 resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 86)- (parent 49)- (seen 149 153)- (seen-ops- (149- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3))- (153- (operation nonce-test (displaced 4 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 87)- (parent 49)- (seen 85 150 155)- (seen-ops- (85- (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2))- (150- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4))- (155- (operation nonce-test (displaced 5 3 resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "5 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 88)- (parent 50)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (displaced 4 2 resp 2) x3 (1 0)- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a)))))- (label 89)- (parent 50)- (seen 46)- (seen-ops- (46- (operation nonce-test (displaced 4 3 resp 2) x3 (1 0)- (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1-0 x3 (pubk a))) (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "5 in cohort - 4 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (displaced 4 3 resp 2) x3 (1 0)- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a)))))- (label 90)- (parent 50)- (seen 46 103)- (seen-ops- (46- (operation nonce-test (displaced 4 2 resp 2) x3 (1 0)- (enc "okay" x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1-0 x3 (pubk a))) (strand-map 0 1 2 3))- (103- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc "okay" x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1-0 x3 (pubk a))) (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))- (label 91)- (parent 50)- (seen 89 103)- (seen-ops- (89- (operation nonce-test (displaced 5 2 resp 2) x3 (1 0)- (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1-0 x3 (pubk a))) (strand-map 0 1 2 3 2))- (103- (operation nonce-test (displaced 5 3 resp 2) x3 (1 0)- (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1-0 x3 (pubk a))) (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "6 in cohort - 4 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x1-0 x1)) x1 (0 1)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 92)- (parent 51)- (seen 69 84 111)- (seen-ops- (69- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4))- (84- (operation nonce-test (displaced 5 4 resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4))- (111- (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "6 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 93)- (parent 52)- (seen 43)- (seen-ops- (43 (operation generalization weakened ((2 1) (1 0)))- (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 94)- (parent 52)- (unrealized (1 0))- (comment "3 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))- (label 95)- (parent 52)- (seen 174)- (seen-ops- (174- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))- (label 96)- (parent 53)- (seen 173)- (seen-ops- (173- (operation nonce-test (displaced 5 2 resp 2) y3 (1 0)- (enc "okay" x1 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 97)- (parent 53)- (seen 43)- (seen-ops- (43 (operation generalization deleted (3 0)) (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 98)- (parent 53)- (seen 174 177)- (seen-ops- (174- (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)- (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4))- (177- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 99)- (parent 54)- (seen 178)- (seen-ops- (178- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))- (label 100)- (parent 54)- (seen 132)- (seen-ops- (132 (operation generalization deleted (3 0)) (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))- (label 101)- (parent 56)- (seen 44)- (seen-ops- (44 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))- (label 102)- (parent 56)- (seen 45)- (seen-ops- (45 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a)))))- (label 103)- (parent 56)- (seen 46)- (seen-ops- (46- (operation nonce-test (displaced 5 2 resp 2) x3 (1 0)- (enc "okay" x1-0 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 2 3)))- (unrealized (1 0))- (comment "4 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 104)- (parent 56)- (seen 47 183)- (seen-ops- (47- (operation nonce-test (displaced 5 2 resp 2) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 2 3))- (183- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x1-0 x1)) x1 (0 1)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 105)- (parent 57)- (seen 70 107 114)- (seen-ops- (70- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4))- (107- (operation nonce-test (displaced 5 3 resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4))- (114- (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "6 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (displaced 4 3 resp 2) y3-0 (1 0)- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a-0)))- (send (enc "okay" x3 y3-0 (pubk a-0))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a)))))- (label 106)- (parent 58)- (seen 121)- (seen-ops- (121- (operation nonce-test (displaced 4 2 resp 2) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "4 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (added-strand resp 2) y3-0 (1 0)- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a-0)))- (send (enc "okay" x3 y3-0 (pubk a-0))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a)))))- (label 107)- (parent 58)- (seen 124 189)- (seen-ops- (124- (operation nonce-test (displaced 5 2 resp 2) y3-0 (1 0)- (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 4))- (189- (operation nonce-test (displaced 5 3 resp 2) y3-0 (1 0)- (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "5 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (added-strand resp 2) y3-0 (1 0)- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a-0)))- (send (enc "okay" x3 y3-0 (pubk a-0))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a)))))- (label 108)- (parent 58)- (seen 64 191 194)- (seen-ops- (64- (operation nonce-test (displaced 5 2 resp 2) y3-0 (1 0)- (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 2))- (191- (operation nonce-test (displaced 5 3 resp 2) y3-0 (1 0)- (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 4))- (194- (operation nonce-test (added-strand resp 2) y3-0 (1 0)- (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "5 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))- (label 109)- (parent 59)- (seen 54)- (seen-ops- (54- (operation nonce-test (displaced 5 3 resp 2) y3 (1 0)- (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 3)))- (unrealized (1 0))- (comment "5 in cohort - 4 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 110)- (parent 59)- (seen 95 199)- (seen-ops- (95- (operation nonce-test (displaced 4 3 resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a))) (strand-map 0 1 2 3))- (199- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a))) (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))- (label 111)- (parent 59)- (seen 98 200 202)- (seen-ops- (98- (operation nonce-test (displaced 5 3 resp 2) y3 (1 0)- (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 4))- (200- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 4))- (202- (operation nonce-test (displaced 5 2 resp 2) y3 (1 0)- (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "5 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (displaced 4 3 resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 112)- (parent 60)- (seen 120)- (seen-ops- (120- (operation nonce-test (displaced 4 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "4 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 113)- (parent 60)- (seen 63 206)- (seen-ops- (63- (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2))- (206- (operation nonce-test (displaced 5 3 resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "5 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 114)- (parent 60)- (seen 124 207 210)- (seen-ops- (124- (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4))- (207- (operation nonce-test (displaced 5 3 resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4))- (210- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "5 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x1 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1-0)- (operation nonce-test (displaced 4 2 resp 2) x1-0 (1 0)- (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))- (recv (enc "okay" x1-0 x1 (pubk a))))- ((recv (enc x1 x1-0 (pubk a-0)))- (send (enc "okay" x1-0 x1 (pubk a-0))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" x1-0 x1-0 (pubk a)))))- (label 115)- (parent 61)- (seen 128)- (seen-ops- (128- (operation nonce-test (displaced 4 3 resp 2) x1-0 (1 0)- (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 116)- (parent 61)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x1 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1-0)- (operation nonce-test (displaced 4 3 resp 2) x1-0 (1 0)- (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))- (recv (enc "okay" x1-0 x1 (pubk a))))- ((recv (enc x1 x1-0 (pubk a-0)))- (send (enc "okay" x1-0 x1 (pubk a-0))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" x1-0 x1-0 (pubk a)))))- (label 117)- (parent 61)- (seen 128 130)- (seen-ops- (128- (operation nonce-test (displaced 4 2 resp 2) x1-0 (1 0)- (enc "okay" x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 3))- (130- (operation nonce-test (added-strand resp 2) x1-0 (1 0)- (enc "okay" x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1-0)- (operation nonce-test (added-strand resp 2) x1-0 (1 0)- (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))- (recv (enc "okay" x1-0 x1 (pubk a))))- ((recv (enc x1 x1-0 (pubk a-0)))- (send (enc "okay" x1-0 x1 (pubk a-0))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" x1-0 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3-0 x1-0 (pubk a)))))- (label 118)- (parent 61)- (seen 115 130)- (seen-ops- (115- (operation nonce-test (displaced 5 2 resp 2) x1-0 (1 0)- (enc "okay" y3-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 3 2))- (130- (operation nonce-test (displaced 5 3 resp 2) x1-0 (1 0)- (enc "okay" y3-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 119)- (parent 62)- (seen 37)- (seen-ops- (37 (operation generalization weakened ((2 1) (1 0)))- (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 120)- (parent 62)- (unrealized (1 0))- (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 121)- (parent 62)- (seen 220)- (seen-ops- (220- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 122)- (parent 63)- (unrealized (1 0))- (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 123)- (parent 63)- (seen 37)- (seen-ops- (37 (operation generalization deleted (3 0)) (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))- (label 124)- (parent 63)- (seen 220 223)- (seen-ops- (220- (operation nonce-test (displaced 5 2 resp 2) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4))- (223- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 125)- (parent 64)- (seen 225)- (seen-ops- (225- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 126)- (parent 64)- (seen 37)- (seen-ops- (37 (operation generalization deleted (3 0)) (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)- (enc "okay" y3 x1 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))- (label 127)- (parent 65)- (seen 68)- (seen-ops- (68 (operation generalization deleted (2 0)) (strand-map 0 1)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1-0)- (operation nonce-test (added-strand resp 2) x1-0 (1 0)- (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2)- (traces- ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))- (recv (enc "okay" x1-0 x1 (pubk a))))- ((recv (enc x1 x1-0 (pubk a-0)))- (send (enc "okay" x1-0 x1 (pubk a-0))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" x1-0 x1-0 (pubk a)))))- (label 128)- (parent 65)- (unrealized (1 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 129)- (parent 66)- (seen 127)- (seen-ops- (127 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1-0)- (operation nonce-test (added-strand resp 2) x1-0 (1 0)- (enc "okay" y3-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))- (recv (enc "okay" x1-0 x1 (pubk a))))- ((recv (enc x1 x1-0 (pubk a-0)))- (send (enc "okay" x1-0 x1 (pubk a-0))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3-0 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" x1-0 x1-0 (pubk a)))))- (label 130)- (parent 66)- (seen 128)- (seen-ops- (128- (operation nonce-test (displaced 5 2 resp 2) x1-0 (1 0)- (enc "okay" x1-0 x1-0 (pubk a)) (enc "okay" y3-0 x1-0 (pubk a))- (enc x1-0 x1-0 (pubk a))) (strand-map 0 1 2 2 3)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3-0) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a) (privk a-0))- (uniq-orig y3-0)- (operation generalization separated a-0)- (strand-map 0 1 2)- (traces- ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3 (pubk a)))))- (label 131)- (parent 67)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3)- (operation generalization deleted (2 0))- (strand-map 0 1 3)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 132)- (parent 72)- (seen 43)- (seen-ops- (43 (operation generalization separated y3-0) (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3)- (operation generalization deleted (2 0))- (strand-map 0 1 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 133)- (parent 73)- (seen 25)- (seen-ops- (25 (operation generalization deleted (2 0)) (strand-map 0 1)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation generalization deleted (2 0))- (strand-map 0 1 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 134)- (parent 76)- (seen 25)- (seen-ops- (25 (operation generalization deleted (2 0)) (strand-map 0 1)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation generalization deleted (2 0))- (strand-map 0 1 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 135)- (parent 77)- (seen 28)- (seen-ops- (28 (operation generalization deleted (2 0)) (strand-map 0 1)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" x1 x3 (pubk a))- (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 136)- (parent 78)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" x1 x3 (pubk a))- (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 137)- (parent 78)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation generalization deleted (2 0))- (strand-map 0 1 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 138)- (parent 79)- (seen 25)- (seen-ops- (25 (operation generalization deleted (2 0)) (strand-map 0 1)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation generalization deleted (2 0))- (strand-map 0 1 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 139)- (parent 80)- (seen 28)- (seen-ops- (28 (operation generalization deleted (2 0)) (strand-map 0 1)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (displaced 4 3 resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))- (label 140)- (parent 81)- (seen 95 173)- (seen-ops- (95- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 2))- (173- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" x1 y3 (pubk a)) (enc "okay" y3 y3 (pubk a))- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))- (label 141)- (parent 81)- (seen 93)- (seen-ops- (93 (operation generalization deleted (3 0)) (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 142)- (parent 81)- (seen 173 177)- (seen-ops- (173- (operation nonce-test (displaced 5 3 resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3 4))- (177- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))- (label 143)- (parent 81)- (seen 177)- (seen-ops- (177- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" x1 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))- (label 144)- (parent 82)- (seen 43)- (seen-ops- (43 (operation generalization deleted (3 0)) (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))- (label 145)- (parent 83)- (seen 177 233)- (seen-ops- (177- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 2 3 4))- (233- (operation nonce-test (displaced 6 2 resp 2) y3 (1 0)- (enc "okay" x1 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 146)- (parent 83)- (seen 97)- (seen-ops- (97 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 147)- (parent 84)- (seen 178)- (seen-ops- (178- (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 148)- (parent 84)- (seen 100)- (seen-ops- (100 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (displaced 5 3 resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 149)- (parent 84)- (seen 174)- (seen-ops- (174- (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 150)- (parent 84)- (seen 98 238 240)- (seen-ops- (98- (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 2))- (238- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5))- (240- (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "5 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 151)- (parent 85)- (seen 177)- (seen-ops- (177- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 152)- (parent 85)- (seen 132)- (seen-ops- (132 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (displaced 4 3 resp 2) x1 (1 0)- (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 153)- (parent 85)- (seen 174)- (seen-ops- (174- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 154)- (parent 86)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 155)- (parent 86)- (seen 153 240)- (seen-ops- (153- (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 2))- (240- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 156)- (parent 87)- (seen 151 242)- (seen-ops- (151- (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 2 4))- (242- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 157)- (parent 87)- (seen 152)- (seen-ops- (152 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3)- (operation generalization deleted (2 0))- (strand-map 0 1 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 158)- (parent 88)- (seen 28)- (seen-ops- (28 (operation generalization deleted (2 0)) (strand-map 0 1)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 159)- (parent 89)- (seen 158)- (seen-ops- (158 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 160)- (parent 89)- (seen 133)- (seen-ops- (133 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a)))))- (label 161)- (parent 89)- (unrealized (1 0))- (comment "3 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 162)- (parent 89)- (seen 78 250)- (seen-ops- (78- (operation nonce-test (displaced 5 3 resp 2) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3 4))- (250- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc "okay" x1 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 163)- (parent 90)- (seen 135)- (seen-ops- (135 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc "okay" x1 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 164)- (parent 90)- (seen 134)- (seen-ops- (134 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a)))))- (label 165)- (parent 91)- (seen 161)- (seen-ops- (161- (operation nonce-test (displaced 6 2 resp 2) x3 (1 0)- (enc "okay" x1-0 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3 2 4)))- (unrealized (1 0))- (comment "4 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))- (label 166)- (parent 91)- (seen 159)- (seen-ops- (159 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))- (label 167)- (parent 91)- (seen 160)- (seen-ops- (160 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 168)- (parent 91)- (seen 162 183 255)- (seen-ops- (162- (operation nonce-test (displaced 6 2 resp 2) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3 2 4))- (183- (operation nonce-test (displaced 6 3 resp 2) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3 4 5))- (255- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "5 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 169)- (parent 92)- (seen 84 200)- (seen-ops- (84- (operation nonce-test (displaced 6 4 resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 4))- (200- (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "6 in cohort - 4 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (displaced 5 3 resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 170)- (parent 92)- (seen 149 202 260)- (seen-ops- (149- (operation nonce-test (displaced 5 4 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4))- (202- (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4))- (260- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "5 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 171)- (parent 92)- (seen 111 150 261 263)- (seen-ops- (111- (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 2))- (150- (operation nonce-test (displaced 6 4 resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5))- (261- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5))- (263- (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "6 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 172)- (parent 94)- (seen 93)- (seen-ops- (93 (operation generalization deleted (3 0)) (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))- (label 173)- (parent 94)- (seen 174)- (seen-ops- (174- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 2)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 174)- (parent 94)- (unrealized (1 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))- (label 175)- (parent 95)- (seen 245)- (seen-ops- (245 (operation generalization deleted (3 0)) (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" x1 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))- (label 176)- (parent 96)- (seen 144)- (seen-ops- (144 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 177)- (parent 96)- (unrealized (1 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 178)- (parent 98)- (unrealized (1 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 179)- (parent 98)- (seen 100)- (seen-ops- (100 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 180)- (parent 99)- (seen 219)- (seen-ops- (219 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc "okay" x1 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 181)- (parent 103)- (seen 77)- (seen-ops- (77 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc "okay" x1 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 182)- (parent 103)- (seen 76)- (seen-ops- (76 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc "okay" x1-0 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 183)- (parent 103)- (seen 78)- (seen-ops- (78- (operation nonce-test (displaced 6 2 resp 2) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" x1-0 x3 (pubk a))- (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1-0 x3 (pubk a))) (strand-map 0 1 2 2 3 4)))- (unrealized (1 0))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 184)- (parent 104)- (seen 80)- (seen-ops- (80 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 185)- (parent 104)- (seen 79)- (seen-ops- (79 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (displaced 5 4 resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 186)- (parent 105)- (seen 189 207)- (seen-ops- (189- (operation nonce-test (displaced 5 3 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4))- (207- (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "5 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 187)- (parent 105)- (seen 107 210 273)- (seen-ops- (107- (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 3))- (210- (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5))- (273- (operation nonce-test (displaced 6 4 resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "6 in cohort - 3 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 188)- (parent 105)- (seen 114 194 274 277)- (seen-ops- (114- (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 2))- (194- (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5))- (274- (operation nonce-test (displaced 6 4 resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5))- (277- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "6 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (added-strand resp 2) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a-0)))- (send (enc "okay" x3 y3-0 (pubk a-0))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a)))))- (label 189)- (parent 106)- (seen 220)- (seen-ops- (220- (operation nonce-test (displaced 5 2 resp 2) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a)))))- (label 190)- (parent 106)- (seen 119)- (seen-ops- (119 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (added-strand resp 2) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a-0)))- (send (enc "okay" x3 y3-0 (pubk a-0))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a)))))- (label 191)- (parent 106)- (seen 121 281)- (seen-ops- (121- (operation nonce-test (displaced 5 2 resp 2) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 2))- (281- (operation nonce-test (added-strand resp 2) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (added-strand resp 2) y3-0 (1 0)- (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a-0)))- (send (enc "okay" x3 y3-0 (pubk a-0))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a)))))- (label 192)- (parent 107)- (seen 223)- (seen-ops- (223- (operation nonce-test (displaced 6 2 resp 2) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)- (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a)))))- (label 193)- (parent 107)- (seen 123)- (seen-ops- (123 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 y3-2 text) (a a-0 name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (added-strand resp 2) y3-0 (1 0)- (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a-0)))- (send (enc "okay" x3 y3-0 (pubk a-0))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-2 y3-0 (pubk a)))))- (label 194)- (parent 107)- (seen 124 281 284)- (seen-ops- (124- (operation nonce-test (displaced 6 2 resp 2) y3-0 (1 0)- (enc "okay" y3-1 y3-0 (pubk a)) (enc "okay" y3-2 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4 2))- (281- (operation nonce-test (displaced 6 3 resp 2) y3-0 (1 0)- (enc "okay" y3-1 y3-0 (pubk a)) (enc "okay" y3-2 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4 5))- (284- (operation nonce-test (added-strand resp 2) y3-0 (1 0)- (enc "okay" y3-1 y3-0 (pubk a)) (enc "okay" y3-2 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "5 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (added-strand resp 2) y3-0 (1 0)- (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a-0)))- (send (enc "okay" x3 y3-0 (pubk a-0))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a)))))- (label 195)- (parent 108)- (seen 125 286)- (seen-ops- (125- (operation nonce-test (displaced 6 2 resp 2) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 2 4))- (286- (operation nonce-test (added-strand resp 2) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)- (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a)))))- (label 196)- (parent 108)- (seen 126)- (seen-ops- (126 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 197)- (parent 109)- (seen 99)- (seen-ops- (99- (operation nonce-test (displaced 6 3 resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 3 4)))- (unrealized (1 0))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))- (label 198)- (parent 109)- (seen 100)- (seen-ops- (100 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (displaced 5 2 resp 2) y3 (1 0)- (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))- (label 199)- (parent 109)- (seen 95)- (seen-ops- (95- (operation nonce-test (displaced 5 3 resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 3)))- (unrealized (1 0))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 y3-2 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-2 y3 (pubk a)))))- (label 200)- (parent 109)- (seen 98 289 291)- (seen-ops- (98- (operation nonce-test (displaced 6 3 resp 2) y3 (1 0)- (enc "okay" y3-2 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 3 4))- (289- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3-1 y3 (pubk a)) (enc "okay" y3-2 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4 5))- (291- (operation nonce-test (displaced 6 2 resp 2) y3 (1 0)- (enc "okay" y3-1 y3 (pubk a)) (enc "okay" y3-2 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "5 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 201)- (parent 110)- (seen 245)- (seen-ops- (245 (operation generalization deleted (3 0)) (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))- (label 202)- (parent 110)- (seen 174 291)- (seen-ops- (174- (operation nonce-test (displaced 5 3 resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4))- (291- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 203)- (parent 111)- (seen 177 293)- (seen-ops- (177- (operation nonce-test (displaced 6 3 resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4 5))- (293- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))- (label 204)- (parent 111)- (seen 152)- (seen-ops- (152 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 205)- (parent 112)- (seen 119)- (seen-ops- (119 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 206)- (parent 112)- (seen 120)- (seen-ops- (120- (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 2)))- (unrealized (1 0))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 207)- (parent 112)- (seen 220 297)- (seen-ops- (220- (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4))- (297- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)))- (unrealized (1 0))- (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 208)- (parent 113)- (seen 122)- (seen-ops- (122- (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 2 4)))- (unrealized (1 0))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 209)- (parent 113)- (seen 123)- (seen-ops- (123 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 210)- (parent 113)- (seen 124 297 300)- (seen-ops- (124- (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 2 4))- (297- (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5))- (300- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "5 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 211)- (parent 114)- (seen 225 302)- (seen-ops- (225- (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5))- (302- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 212)- (parent 114)- (seen 126)- (seen-ops- (126 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)- (enc "okay" y3 x1 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 213)- (parent 115)- (seen 215)- (seen-ops- (215 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1-0)- (operation nonce-test (added-strand resp 2) x1-0 (1 0)- (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))- (recv (enc "okay" x1-0 x1 (pubk a))))- ((recv (enc x1 x1-0 (pubk a-0)))- (send (enc "okay" x1-0 x1 (pubk a-0))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" x1-0 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" x1-0 x1-0 (pubk a)))))- (label 214)- (parent 115)- (unrealized (1 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation generalization deleted (2 0))- (strand-map 0 1 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 215)- (parent 116)- (seen 68)- (seen-ops- (68 (operation generalization deleted (2 0)) (strand-map 0 1)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 216)- (parent 117)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1-0)- (operation nonce-test (added-strand resp 2) x1-0 (1 0)- (enc "okay" y3-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))- (recv (enc "okay" x1-0 x1 (pubk a))))- ((recv (enc x1 x1-0 (pubk a-0)))- (send (enc "okay" x1-0 x1 (pubk a-0))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" x1-0 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" y3-0 x1-0 (pubk a))))- ((recv (enc x1-0 x1-0 (pubk a)))- (send (enc "okay" x1-0 x1-0 (pubk a)))))- (label 217)- (parent 118)- (seen 214)- (seen-ops- (214- (operation nonce-test (displaced 6 2 resp 2) x1-0 (1 0)- (enc "okay" x1-0 x1-0 (pubk a)) (enc "okay" y3-0 x1-0 (pubk a))- (enc x1-0 x1-0 (pubk a))) (strand-map 0 1 2 3 2 4)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 218)- (parent 118)- (seen 213)- (seen-ops- (213 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 219)- (parent 120)- (seen 119)- (seen-ops- (119 (operation generalization deleted (3 0)) (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))- (label 220)- (parent 120)- (unrealized (1 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 221)- (parent 121)- (seen 119)- (seen-ops- (119 (operation generalization deleted (3 0)) (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 222)- (parent 122)- (seen 219)- (seen-ops- (219 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))- (label 223)- (parent 122)- (unrealized (1 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))- (label 224)- (parent 124)- (seen 126)- (seen-ops- (126 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3-0 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 225)- (parent 124)- (unrealized (1 0))- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 226)- (parent 125)- (seen 244)- (seen-ops- (244 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 227)- (parent 128)- (seen 305)- (seen-ops- (305 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 228)- (parent 130)- (seen 227)- (seen-ops- (227 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3-0) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))- (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation generalization forgot (privk a-0))- (strand-map 0 1 2)- (traces- ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3 (pubk a)))))- (label 229)- (parent 131)- (realized)- (shape)- (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3-0) (a-0 a-0))))- (origs (y3-0 (0 0))))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation generalization deleted (2 0))- (strand-map 0 1 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 230)- (parent 136)- (seen 138)- (seen-ops- (138 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation generalization deleted (2 0))- (strand-map 0 1 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 231)- (parent 137)- (seen 139)- (seen-ops- (139 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" x1 y3 (pubk a)) (enc "okay" y3 y3 (pubk a))- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))- (label 232)- (parent 140)- (seen 93)- (seen-ops- (93 (operation generalization deleted (3 0)) (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))- (label 233)- (parent 142)- (seen 177)- (seen-ops- (177- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 2)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))- (label 234)- (parent 142)- (seen 172)- (seen-ops- (172 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))- (label 235)- (parent 143)- (seen 100)- (seen-ops- (100 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" x1 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))- (label 236)- (parent 145)- (seen 176)- (seen-ops- (176 (operation generalization deleted (3 0))- (strand-map 0 1 2 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 237)- (parent 147)- (seen 180)- (seen-ops- (180 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 238)- (parent 147)- (seen 178)- (seen-ops- (178- (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5 2)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 239)- (parent 149)- (seen 175)- (seen-ops- (175 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 240)- (parent 149)- (seen 174)- (seen-ops- (174- (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 2)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 241)- (parent 150)- (seen 179)- (seen-ops- (179 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 242)- (parent 150)- (seen 177)- (seen-ops- (177- (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 2 5)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 243)- (parent 151)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 244)- (parent 153)- (seen 245)- (seen-ops- (245 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation generalization deleted (2 0))- (strand-map 0 1 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 245)- (parent 154)- (seen 132)- (seen-ops- (132 (operation generalization weakened ((2 1) (1 0)))- (strand-map 0 1 2)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 246)- (parent 155)- (seen 244)- (seen-ops- (244 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 247)- (parent 156)- (seen 243)- (seen-ops- (243 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc "okay" x1 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 248)- (parent 161)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc "okay" x1 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 249)- (parent 161)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc "okay" x1-0 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 250)- (parent 161)- (unrealized (1 0))- (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 251)- (parent 162)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 252)- (parent 162)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc "okay" x1 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 253)- (parent 165)- (seen 249)- (seen-ops- (249 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc "okay" x1 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 254)- (parent 165)- (seen 248)- (seen-ops- (248 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))- (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (added-strand resp 2) x3 (1 0)- (enc "okay" x1-0 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 255)- (parent 165)- (seen 250)- (seen-ops- (250- (operation nonce-test (displaced 7 2 resp 2) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" x1-0 x3 (pubk a))- (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1-0 x3 (pubk a))) (strand-map 0 1 2 3 2 4 5)))- (unrealized (1 0))- (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 256)- (parent 168)- (seen 251)- (seen-ops- (251 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))- (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 257)- (parent 168)- (seen 252)- (seen-ops- (252 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 258)- (parent 169)- (seen 147 289)- (seen-ops- (147- (operation nonce-test (displaced 7 4 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 4 5))- (289- (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)))- (unrealized (1 0))- (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 259)- (parent 169)- (seen 198)- (seen-ops- (198 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (0 1))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 260)- (parent 169)- (seen 149 291)- (seen-ops- (149- (operation nonce-test (displaced 6 4 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 4))- (291- (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))- (label 261)- (parent 169)- (seen 150 200 324 326)- (seen-ops- (150- (operation nonce-test (displaced 7 4 resp 2) x1 (1 0)- (enc "okay" y3-2 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 4 5))- (200- (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 2))- (324- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6))- (326- (operation nonce-test (displaced 7 3 resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)))- (unrealized (1 0))- (comment "6 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (0 1)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 262)- (parent 170)- (seen 201)- (seen-ops- (201 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (0 1))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 263)- (parent 170)- (seen 202 240 326)- (seen-ops- (202- (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 2))- (240- (operation nonce-test (displaced 6 4 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5))- (326- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "4 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 264)- (parent 171)- (seen 203 242 327)- (seen-ops- (203- (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 2 5))- (242- (operation nonce-test (displaced 7 4 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6))- (327- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)))- (unrealized (1 0))- (comment "4 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 265)- (parent 171)- (seen 204)- (seen-ops- (204 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" x1 y3 (pubk a)) (enc "okay" y3 y3 (pubk a))- (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))- (label 266)- (parent 173)- (seen 232)- (seen-ops- (232 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 267)- (parent 174)- (seen 175)- (seen-ops- (175 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 268)- (parent 177)- (seen 267)- (seen-ops- (267 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 269)- (parent 178)- (seen 307)- (seen-ops- (307 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" x1 x3 (pubk a))- (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 270)- (parent 183)- (seen 136)- (seen-ops- (136 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" x1 x3 (pubk a))- (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 271)- (parent 183)- (seen 137)- (seen-ops- (137 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 272)- (parent 186)- (seen 205)- (seen-ops- (205 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 273)- (parent 186)- (seen 189 297)- (seen-ops- (189- (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 3))- (297- (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 274)- (parent 186)- (seen 207 281 332)- (seen-ops- (207- (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 2))- (281- (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5))- (332- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)))- (unrealized (1 0))- (comment "4 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 275)- (parent 187)- (seen 192 300)- (seen-ops- (192- (operation nonce-test (displaced 7 3 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 3 5))- (300- (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)))- (unrealized (1 0))- (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 276)- (parent 187)- (seen 209)- (seen-ops- (209 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))- (label 277)- (parent 187)- (seen 194 210 332 335)- (seen-ops- (194- (operation nonce-test (displaced 7 3 resp 2) x1 (1 0)- (enc "okay" y3-2 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 3 5))- (210- (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 2))- (332- (operation nonce-test (displaced 7 4 resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6))- (335- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)))- (unrealized (1 0))- (comment "6 in cohort - 2 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 278)- (parent 188)- (seen 211 286 336)- (seen-ops- (211- (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 2 5))- (286- (operation nonce-test (displaced 7 3 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6))- (336- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)))- (unrealized (1 0))- (comment "4 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 279)- (parent 188)- (seen 212)- (seen-ops- (212 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a)))))- (label 280)- (parent 189)- (seen 219)- (seen-ops- (219 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 y3-2 text) (a a-0 name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (added-strand resp 2) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a-0)))- (send (enc "okay" x3 y3-0 (pubk a-0))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-2 y3-0 (pubk a)))))- (label 281)- (parent 189)- (seen 220)- (seen-ops- (220- (operation nonce-test (displaced 6 2 resp 2) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 4 2)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a)))))- (label 282)- (parent 191)- (seen 221)- (seen-ops- (221 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a)))))- (label 283)- (parent 192)- (seen 222)- (seen-ops- (222 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 y3-2 text) (a a-0 name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (added-strand resp 2) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a-0)))- (send (enc "okay" x3 y3-0 (pubk a-0))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-2 y3-0 (pubk a)))))- (label 284)- (parent 192)- (seen 223)- (seen-ops- (223- (operation nonce-test (displaced 7 2 resp 2) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 4 5 2)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 y3-2 text) (a name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)- (enc "okay" y3-1 y3-0 (pubk a)) (enc "okay" y3-2 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-2 y3-0 (pubk a)))))- (label 285)- (parent 194)- (seen 224)- (seen-ops- (224 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 y3-2 text) (a a-0 name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-2) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (added-strand resp 2) y3-0 (1 0)- (enc "okay" y3-1 y3-0 (pubk a)) (enc "okay" y3-2 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a-0)))- (send (enc "okay" x3 y3-0 (pubk a-0))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-2 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a)))))- (label 286)- (parent 194)- (seen 225)- (seen-ops- (225- (operation nonce-test (displaced 7 2 resp 2) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 4 2 5)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a)))))- (label 287)- (parent 195)- (seen 226)- (seen-ops- (226 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 288)- (parent 197)- (seen 296)- (seen-ops- (296 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 y3-2 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-2 y3 (pubk a)))))- (label 289)- (parent 197)- (seen 178)- (seen-ops- (178- (operation nonce-test (displaced 7 3 resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-2 y3 (pubk a))- (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 3 4 5)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))- (label 290)- (parent 199)- (seen 175)- (seen-ops- (175 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 y3-2 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-2 y3 (pubk a)))))- (label 291)- (parent 199)- (seen 174)- (seen-ops- (174- (operation nonce-test (displaced 6 3 resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-2 y3 (pubk a))- (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 3 4)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 y3-2 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3-1 y3 (pubk a)) (enc "okay" y3-2 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-2 y3 (pubk a)))))- (label 292)- (parent 200)- (seen 179)- (seen-ops- (179 (operation generalization deleted (3 0))- (strand-map 0 1 2 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 y3-2 text) (a a-0 name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-2) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (added-strand resp 2) y3 (1 0)- (enc "okay" y3-1 y3 (pubk a)) (enc "okay" y3-2 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-2 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 293)- (parent 200)- (seen 177)- (seen-ops- (177- (operation nonce-test (displaced 7 3 resp 2) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-2 y3 (pubk a))- (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 3 4 5)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))- (label 294)- (parent 202)- (seen 244)- (seen-ops- (244 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 295)- (parent 203)- (seen 294)- (seen-ops- (294 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 296)- (parent 206)- (seen 219)- (seen-ops- (219 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 297)- (parent 206)- (seen 220)- (seen-ops- (220- (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 4)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))- (label 298)- (parent 207)- (seen 221)- (seen-ops- (221 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 299)- (parent 208)- (seen 222)- (seen-ops- (222 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 300)- (parent 208)- (seen 223)- (seen-ops- (223- (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 4 5)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 301)- (parent 210)- (seen 224)- (seen-ops- (224 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 302)- (parent 210)- (seen 225)- (seen-ops- (225- (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 4 5)))- (unrealized (1 0))- (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 303)- (parent 211)- (seen 226)- (seen-ops- (226 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 304)- (parent 214)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation generalization deleted (2 0))- (strand-map 0 1 3)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 305)- (parent 216)- (seen 68)- (seen-ops- (68 (operation generalization deleted (2 0)) (strand-map 0 1)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 306)- (parent 217)- (seen 304)- (seen-ops- (304 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))- (label 307)- (parent 220)- (seen 221)- (seen-ops- (221 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))- (label 308)- (parent 223)- (seen 307)- (seen-ops- (307 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))- (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 309)- (parent 225)- (seen 267)- (seen-ops- (267 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" x1 y3 (pubk a)) (enc "okay" y3 y3 (pubk a))- (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))- (enc y3 x3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))- (label 310)- (parent 233)- (seen 266)- (seen-ops- (266 (operation generalization deleted (3 0))- (strand-map 0 1 2 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 311)- (parent 238)- (seen 269)- (seen-ops- (269 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 312)- (parent 240)- (seen 267)- (seen-ops- (267 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 313)- (parent 242)- (seen 268)- (seen-ops- (268 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation generalization deleted (2 0))- (strand-map 0 1 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 314)- (parent 243)- (seen 245)- (seen-ops- (245 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation generalization deleted (2 0))- (strand-map 0 1 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 315)- (parent 248)- (seen 134)- (seen-ops- (134 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation generalization deleted (2 0))- (strand-map 0 1 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))- (label 316)- (parent 249)- (seen 135)- (seen-ops- (135 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" x1 x3 (pubk a))- (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 317)- (parent 250)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" x1 x3 (pubk a))- (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 318)- (parent 250)- (realized)- (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation generalization deleted (2 0))- (strand-map 0 1 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 319)- (parent 251)- (seen 139)- (seen-ops- (139 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation generalization deleted (2 0))- (strand-map 0 1 3 4)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 320)- (parent 252)- (seen 138)- (seen-ops- (138 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" x1 x3 (pubk a))- (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 321)- (parent 255)- (seen 317)- (seen-ops- (317 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)- (enc "okay" x3 x3 (pubk a)) (enc "okay" x1 x3 (pubk a))- (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))- (enc x1 x3 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 322)- (parent 255)- (seen 318)- (seen-ops- (318 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 323)- (parent 258)- (seen 288)- (seen-ops- (288 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((0 0) (7 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0))- ((7 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))- (label 324)- (parent 258)- (seen 238 289)- (seen-ops- (238- (operation nonce-test (displaced 8 4 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 4 5 6))- (289- (operation nonce-test (displaced 8 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5 6 2)))- (unrealized (1 0))- (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (0 1))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 325)- (parent 260)- (seen 290)- (seen-ops- (290 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0))- ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))- (label 326)- (parent 260)- (seen 240 291)- (seen-ops- (240- (operation nonce-test (displaced 7 4 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 4 5))- (291- (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5 2)))- (unrealized (1 0))- (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((0 0) (7 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0))- ((7 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 327)- (parent 261)- (seen 242 293)- (seen-ops- (242- (operation nonce-test (displaced 8 4 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 4 5 6))- (293- (operation nonce-test (displaced 8 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5 2 6)))- (unrealized (1 0))- (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))- (label 328)- (parent 261)- (seen 292)- (seen-ops- (292 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (0 1))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 329)- (parent 263)- (seen 294)- (seen-ops- (294 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 330)- (parent 264)- (seen 295)- (seen-ops- (295 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 331)- (parent 273)- (seen 296)- (seen-ops- (296 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))- (label 332)- (parent 273)- (seen 281 297)- (seen-ops- (281- (operation nonce-test (displaced 7 3 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 3 5))- (297- (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5 2)))- (unrealized (1 0))- (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 333)- (parent 274)- (seen 298)- (seen-ops- (298 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 334)- (parent 275)- (seen 299)- (seen-ops- (299 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((0 0) (7 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0))- ((7 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))- (label 335)- (parent 275)- (seen 284 300)- (seen-ops- (284- (operation nonce-test (displaced 8 3 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 3 5 6))- (300- (operation nonce-test (displaced 8 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5 6 2)))- (unrealized (1 0))- (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a a-0 name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((0 0) (7 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0))- ((7 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (added-strand resp 2) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 336)- (parent 277)- (seen 286 302)- (seen-ops- (286- (operation nonce-test (displaced 8 3 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 3 5 6))- (302- (operation nonce-test (displaced 8 2 resp 2) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5 2 6)))- (unrealized (1 0))- (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))- (label 337)- (parent 277)- (seen 301)- (seen-ops- (301 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 338)- (parent 278)- (seen 303)- (seen-ops- (303 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 y3-2 text) (a name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-2 y3-0 (pubk a)))))- (label 339)- (parent 281)- (seen 307)- (seen-ops- (307 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 y3-2 text) (a name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-2 y3-0 (pubk a)))))- (label 340)- (parent 284)- (seen 308)- (seen-ops- (308 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 y3-2 text) (a name))- (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-2) (a a))- (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3-0)- (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)- (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))- (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))- (enc y3-0 y3-0 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))- (recv (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a))))- ((recv (enc y3-0 y3-0 (pubk a)))- (send (enc "okay" y3-1 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-2 y3-0 (pubk a))))- ((recv (enc y3-0 x3 (pubk a)))- (send (enc "okay" y3-0 y3-0 (pubk a)))))- (label 341)- (parent 286)- (seen 309)- (seen-ops- (309 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 y3-2 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc "okay" y3-2 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-2 y3 (pubk a)))))- (label 342)- (parent 289)- (seen 345)- (seen-ops- (345 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 y3-2 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc "okay" y3-2 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-2 y3 (pubk a)))))- (label 343)- (parent 291)- (seen 267)- (seen-ops- (267 (operation generalization deleted (3 0))- (strand-map 0 1 2 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 y3 y3-0 y3-1 y3-2 text) (a name))- (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))- (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-2) (a a))- (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig y3)- (operation nonce-test (contracted (a-0 a)) y3 (1 0)- (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))- (enc "okay" y3-2 y3 (pubk a)) (enc y3 x3 (pubk a))- (enc y3 y3 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))- (recv (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))- ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-2 y3 (pubk a))))- ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))- (label 344)- (parent 293)- (seen 343)- (seen-ops- (343 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))- ((5 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 345)- (parent 297)- (seen 307)- (seen-ops- (307 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))- (label 346)- (parent 300)- (seen 308)- (seen-ops- (308 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))- (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 347)- (parent 302)- (seen 309)- (seen-ops- (309 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation generalization deleted (2 0))- (strand-map 0 1 3 4)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 348)- (parent 304)- (seen 305)- (seen-ops- (305 (operation generalization deleted (2 0)) (strand-map 0 1 3)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 349)- (parent 317)- (seen 230)- (seen-ops- (230 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))- ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))- (non-orig (privk a))- (uniq-orig x3)- (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5)- (traces- ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))- (recv (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))- ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))- (label 350)- (parent 318)- (seen 231)- (seen-ops- (231 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((0 0) (7 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0))- ((7 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6 7)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))- (label 351)- (parent 324)- (seen 342)- (seen-ops- (342 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6 7)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0))- ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))- (label 352)- (parent 326)- (seen 343)- (seen-ops- (343 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((0 0) (7 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0))- ((7 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6 7)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 353)- (parent 327)- (seen 344)- (seen-ops- (344 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6 7)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))- ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))- (label 354)- (parent 332)- (seen 345)- (seen-ops- (345 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((0 0) (7 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0))- ((7 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6 7)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))- (label 355)- (parent 335)- (seen 346)- (seen-ops- (346 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6 7)))- (realized)- (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2- (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a name))- (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))- (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))- (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))- (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))- ((0 0) (6 0)) ((0 0) (7 0)) ((1 1) (0 1)) ((2 1) (0 1))- ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0))- ((7 1) (1 0)))- (non-orig (privk a))- (uniq-orig x1)- (operation nonce-test (contracted (a-0 a)) x1 (1 0)- (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))- (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))- (enc x1 x1 (pubk a)))- (strand-map 0 1 2 3 4 5 6 7)- (traces- ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))- (recv (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))- ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a))))- ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))- (label 356)- (parent 336)- (seen 347)- (seen-ops- (347 (operation generalization deleted (2 0))- (strand-map 0 1 3 4 5 6 7)))- (realized)+(comment "CPSA 4.4.7")+(comment "All input read from tst/wonthull2.scm")+(comment "Strand count bounded at 9")++(defprotocol wonthull2 basic+ (defrole init+ (vars (a name) (x1 x2 x3 x4 text))+ (trace (send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))+ (recv (enc "okay" x3 x4 (pubk a))))+ (non-orig (privk a))+ (uniq-orig x3))+ (defrole resp+ (vars (a name) (y1 y2 y3 text))+ (trace (recv (enc y1 y2 (pubk a)))+ (send (enc "okay" y3 y1 (pubk a)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false)))))++(defskeleton wonthull2+ (vars (x1 x2 x3 x4 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x2) (x3 x3) (x4 x4) (a a))+ (non-orig (privk a))+ (uniq-orig x3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))+ (recv (enc "okay" x3 x4 (pubk a)))))+ (label 0)+ (unrealized (0 1))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x3) (x4 x4))))+ (origs (x3 (0 0)))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x2 x3 x4 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x2) (x3 x3) (x4 x4) (a a))+ (defstrand resp 2 (y1 x3) (y2 x2) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (0 1)+ (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a)))+ (strand-map 0)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))+ (recv (enc "okay" x3 x4 (pubk a))))+ ((recv (enc x3 x2 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+ (label 1)+ (parent 0)+ (unrealized (0 1))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x3) (x4 x4))))+ (comment "3 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x2 x4 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x4) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (0 1)+ (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a)))+ (strand-map 0)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))+ (recv (enc "okay" x1 x4 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+ (label 2)+ (parent 0)+ (seen 5)+ (seen-ops+ (5+ (operation nonce-test (added-strand resp 2) x1 (0 1)+ (enc "okay" y3 x1 (pubk a)) (enc x1 x1 (pubk a))+ (enc x1 x2 (pubk a))) (strand-map 0 1)))+ (unrealized (0 1))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x1) (x4 x4))))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x2 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x2) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x2) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (x3 y3) (x4 y3)) y3 (0 1)+ (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x2 (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x2 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x2 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 3)+ (parent 1)+ (realized)+ (shape)+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 y3) (x4 y3))))+ (origs (y3 (0 0))))++(defskeleton wonthull2+ (vars (x1 x2 x3 x4 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x2) (x3 x3) (x4 x4) (a a))+ (defstrand resp 2 (y1 x3) (y2 x2) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x2) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (0 1)+ (enc "okay" y3 x3 (pubk a)) (enc x1 x3 (pubk a))+ (enc x3 x2 (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))+ (recv (enc "okay" x3 x4 (pubk a))))+ ((recv (enc x3 x2 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x2 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 4)+ (parent 1)+ (unrealized (0 1))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x3) (x4 x4))))+ (comment "3 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x2 x4 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x4) (a a))+ (defstrand resp 2 (y1 x1) (y2 x2) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (0 1)+ (enc "okay" y3 x1 (pubk a)) (enc x1 x1 (pubk a))+ (enc x1 x2 (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))+ (recv (enc "okay" x1 x4 (pubk a))))+ ((recv (enc x1 x2 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 5)+ (parent 1)+ (seen 10)+ (seen-ops+ (10+ (operation nonce-test (added-strand resp 2) x1 (0 1)+ (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))) (strand-map 0 1 2)))+ (unrealized (0 1))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x1) (x4 x4))))+ (comment "4 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x2 y3 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x2) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (x1 y3) (x4 y3)) y3 (0 1)+ (enc "okay" y3 y3 (pubk a)) (enc y3 x2 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x2 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 6)+ (parent 2)+ (realized)+ (maps ((0) ((a a) (x1 y3) (x2 x2) (x3 y3) (x4 y3))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x2 x4 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x4) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (0 1)+ (enc "okay" y3 x1 (pubk a)) (enc x1 x1 (pubk a))+ (enc x1 x2 (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))+ (recv (enc "okay" x1 x4 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 7)+ (parent 2)+ (seen 6 13)+ (seen-ops+ (6+ (operation nonce-test (contracted (x1 y3) (x4 y3)) y3 (0 1)+ (enc "okay" y3 y3 (pubk a)) (enc y3 x2 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 1))+ (13+ (operation nonce-test (added-strand resp 2) x1 (0 1)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))) (strand-map 0 1 2)))+ (unrealized (0 1))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x1) (x4 x4))))+ (comment "3 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x2 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x2) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x2) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x3 x1) (x4 x1)) x1 (0 1)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x2 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x2 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 8)+ (parent 4)+ (realized)+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x1) (x4 x1))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x2 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x2) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x2) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x2) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (x3 y3) (x4 y3)) y3 (0 1)+ (enc "okay" x1 y3 (pubk a)) (enc "okay" y3 y3 (pubk a))+ (enc x1 y3 (pubk a)) (enc y3 x2 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x2 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x2 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x2 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))+ (label 9)+ (parent 4)+ (seen 3)+ (seen-ops+ (3 (operation generalization deleted (2 0)) (strand-map 0 1)))+ (realized)+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 y3) (x4 y3))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x2 x4 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x4) (a a))+ (defstrand resp 2 (y1 x1) (y2 x2) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x2) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (0 1)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))+ (recv (enc "okay" x1 x4 (pubk a))))+ ((recv (enc x1 x2 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x2 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 10)+ (parent 4)+ (seen 12)+ (seen-ops+ (12+ (operation nonce-test (contracted (x1 y3) (x4 y3)) y3 (0 1)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc y3 x2 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 1 2)))+ (unrealized (0 1))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x1) (x4 x4))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x2 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 y3-0) (x2 x2) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x2) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (contracted (x1 y3-0) (x4 y3-0)) y3-0 (0 1)+ (enc "okay" y3 y3-0 (pubk a)) (enc "okay" y3-0 y3-0 (pubk a))+ (enc y3-0 x2 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x2 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x2 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a)))))+ (label 11)+ (parent 5)+ (seen 6)+ (seen-ops+ (6 (operation generalization deleted (1 0)) (strand-map 0 2)))+ (realized)+ (maps ((0) ((a a) (x1 y3-0) (x2 x2) (x3 y3-0) (x4 y3-0))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x2 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x2) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x2) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (x1 y3) (x4 y3)) y3 (0 1)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc y3 x2 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x2 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x2 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 12)+ (parent 5)+ (seen 16)+ (seen-ops+ (16 (operation generalization deleted (2 0)) (strand-map 0 1)))+ (realized)+ (maps ((0) ((a a) (x1 y3) (x2 x2) (x3 y3) (x4 y3))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x2 x4 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x4) (a a))+ (defstrand resp 2 (y1 x1) (y2 x2) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (0 1)+ (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))+ (recv (enc "okay" x1 x4 (pubk a))))+ ((recv (enc x1 x2 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 13)+ (parent 5)+ (seen 11)+ (seen-ops+ (11+ (operation nonce-test (contracted (x1 y3-0) (x4 y3-0)) y3-0 (0 1)+ (enc "okay" y3 y3-0 (pubk a)) (enc "okay" y3-0 y3-0 (pubk a))+ (enc y3-0 x2 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 2)))+ (unrealized (0 1))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x1) (x4 x4))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x2 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x2) (x3 y3-0) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3 y3-0)+ (operation generalization separated y3-0)+ (strand-map 0 1)+ (traces+ ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x2 (pubk a))))+ (recv (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 14)+ (parent 6)+ (realized)+ (maps ((0) ((a a) (x1 y3) (x2 x2) (x3 y3-0) (x4 y3))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x2 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x4 x1)) x1 (0 1)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 15)+ (parent 7)+ (seen 6)+ (seen-ops+ (6 (operation generalization deleted (1 0)) (strand-map 0 2)))+ (realized)+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x1) (x4 x1))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x2 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x2) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation generalization deleted (1 0))+ (strand-map 0 2)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x2 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 16)+ (parent 8)+ (seen 3)+ (seen-ops+ (3 (operation generalization separated x1-0) (strand-map 0 1)))+ (realized)+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x1) (x4 x1))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x2 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x2) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x2) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x4 x1)) x1 (0 1)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x1 (pubk a))+ (enc x1 x2 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x2 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x2 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 17)+ (parent 10)+ (seen 12)+ (seen-ops+ (12 (operation generalization deleted (1 0)) (strand-map 0 2 3)))+ (realized)+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x1) (x4 x1))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x2 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x2) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x4 x1)) x1 (0 1)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x1 (pubk a))+ (enc x1 x2 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x2 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 18)+ (parent 13)+ (seen 15)+ (seen-ops+ (15 (operation generalization deleted (1 0)) (strand-map 0 2 3)))+ (realized)+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x1) (x4 x1))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x2 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x2) (x3 y3-0) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation generalization forgot y3)+ (strand-map 0 1)+ (traces+ ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x2 (pubk a))))+ (recv (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 19)+ (parent 14)+ (realized)+ (shape)+ (maps ((0) ((a a) (x1 y3) (x2 x2) (x3 y3-0) (x4 y3))))+ (origs (y3-0 (0 0))))++(comment "Nothing left to do")++(defprotocol wonthull2 basic+ (defrole init+ (vars (a name) (x1 x2 x3 x4 text))+ (trace (send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))+ (recv (enc "okay" x3 x4 (pubk a))))+ (non-orig (privk a))+ (uniq-orig x3))+ (defrole resp+ (vars (a name) (y1 y2 y3 text))+ (trace (recv (enc y1 y2 (pubk a)))+ (send (enc "okay" y3 y1 (pubk a)))))+ (defgenrule neqRl_indx+ (forall ((x indx)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_strd+ (forall ((x strd)) (implies (fact neq x x) (false))))+ (defgenrule neqRl_mesg+ (forall ((x mesg)) (implies (fact neq x x) (false)))))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 x3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3-0) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3-0)+ (traces+ ((send (cat (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a))))+ (recv (enc "okay" x3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0)))+ (send (enc "okay" x3 x1 (pubk a-0)))))+ (label 20)+ (unrealized (0 1))+ (maps+ ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3-0) (a-0 a-0))))+ (origs (x3-0 (0 0)))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 text) (a name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (displaced 2 1 resp 2) x3-0 (0 1)+ (enc x1-0 x3-0 (pubk a-0)) (enc x3-0 x3 (pubk a-0)))+ (strand-map 0 1)+ (traces+ ((send (cat (enc x1-0 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a)))))+ (label 21)+ (parent 20)+ (unrealized (0 1))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x1) (a-0 a))))+ (origs (x1 (0 0)))+ (comment "3 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (displaced 2 1 resp 2) x3-0 (0 1)+ (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0)))+ (send (enc "okay" x3 x1 (pubk a-0)))))+ (label 22)+ (parent 20)+ (seen 25)+ (seen-ops+ (25+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a))) (strand-map 0 1)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (origs (x3 (0 0)))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 x3-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3-0) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3-0) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3-0)+ (operation nonce-test (added-strand resp 2) x3-0 (0 1)+ (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (cat (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a))))+ (recv (enc "okay" x3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3-0 x3 (pubk a)))+ (send (enc "okay" y3 x3-0 (pubk a)))))+ (label 23)+ (parent 20)+ (seen 27)+ (seen-ops+ (27+ (operation nonce-test (displaced 3 1 resp 2) x3-0 (0 1)+ (enc "okay" y3 x3-0 (pubk a-0)) (enc x1-0 x3-0 (pubk a-0))+ (enc x3-0 x3 (pubk a-0))) (strand-map 0 1 2)))+ (unrealized (0 1))+ (maps+ ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3-0) (a-0 a-0))))+ (comment "5 in cohort - 4 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1-0) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1-0)+ (operation nonce-test (added-strand resp 2) x1-0 (0 1)+ (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))))+ (recv (enc "okay" x1-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3 x1-0 (pubk a)))))+ (label 24)+ (parent 20)+ (seen 26 33)+ (seen-ops+ (26+ (operation nonce-test (displaced 3 1 resp 2) x1-0 (0 1)+ (enc "okay" y3 x1-0 (pubk a-0)) (enc x1-0 x3 (pubk a-0))+ (enc x1-0 x1-0 (pubk a-0))) (strand-map 0 1 2))+ (33+ (operation nonce-test (added-strand resp 2) x1-0 (0 1)+ (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))+ (enc x1-0 x1-0 (pubk a))) (strand-map 0 1 2)))+ (unrealized (0 1))+ (maps+ ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x1-0) (a-0 a-0))))+ (comment "5 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (displaced 2 1 resp 2) x1-0 (0 1)+ (enc "okay" x3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))+ (enc x1 x1-0 (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 25)+ (parent 21)+ (realized)+ (shape)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (origs (x3 (0 0))))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (0 1)+ (enc "okay" x3 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+ (label 26)+ (parent 21)+ (unrealized (0 1))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 text) (a name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (0 1)+ (enc "okay" x3 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1-0 x1 (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (cat (enc x1-0 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+ (label 27)+ (parent 21)+ (seen 40)+ (seen-ops+ (40+ (operation nonce-test (added-strand resp 2) x1 (0 1)+ (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a))) (strand-map 0 1 2)))+ (unrealized (0 1))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x1) (a-0 a))))+ (comment "4 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a)))))+ (label 28)+ (parent 22)+ (realized)+ (shape)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (origs (x3 (0 0))))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+ (label 29)+ (parent 22)+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 x3-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3-0) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3-0) (y2 x3) (y3 x1-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3-0)+ (operation nonce-test (added-strand resp 2) x3-0 (0 1)+ (enc "okay" y3 x3-0 (pubk a)) (enc x1-0 x3-0 (pubk a))+ (enc x3-0 x3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a))))+ (recv (enc "okay" x3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3-0 x3 (pubk a))) (send (enc "okay" y3 x3-0 (pubk a))))+ ((recv (enc x3-0 x3 (pubk a)))+ (send (enc "okay" x1-0 x3-0 (pubk a)))))+ (label 30)+ (parent 23)+ (seen 42)+ (seen-ops+ (42+ (operation nonce-test (displaced 4 1 resp 2) x3-0 (0 1)+ (enc "okay" x1-0 x3-0 (pubk a-0))+ (enc "okay" y3 x3-0 (pubk a-0)) (enc x1-0 x3-0 (pubk a-0))+ (enc x3-0 x3 (pubk a-0))) (strand-map 0 1 2 3)))+ (unrealized (0 1))+ (maps+ ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3-0) (a-0 a-0))))+ (comment "5 in cohort - 4 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (x1-0 y3) (x3-0 y3)) y3 (0 1)+ (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 31)+ (parent 23)+ (seen 43)+ (seen-ops+ (43+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))) (strand-map 0 1 2)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0))))+ (comment "4 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (displaced 3 1 resp 2) x3-0 (0 1)+ (enc "okay" y3 x3-0 (pubk a)) (enc x1-0 x3-0 (pubk a))+ (enc x3-0 x3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+ (label 32)+ (parent 23)+ (seen 29 41)+ (seen-ops+ (29+ (operation nonce-test (displaced 3 2 resp 2) x3 (1 0)+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a))) (strand-map 0 1 2))+ (41+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a))) (strand-map 0 1 2)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1-0) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1-0)+ (operation nonce-test (added-strand resp 2) x1-0 (0 1)+ (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))+ (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))))+ (recv (enc "okay" x1-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1-0 x3 (pubk a))) (send (enc "okay" y3 x1-0 (pubk a))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3-0 x1-0 (pubk a)))))+ (label 33)+ (parent 23)+ (seen 36 40 51)+ (seen-ops+ (36+ (operation nonce-test (displaced 4 3 resp 2) x1-0 (0 1)+ (enc "okay" y3 x1-0 (pubk a)) (enc "okay" y3-0 x1-0 (pubk a))+ (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2 2))+ (40+ (operation nonce-test (displaced 4 1 resp 2) x1-0 (0 1)+ (enc "okay" y3 x1-0 (pubk a-0))+ (enc "okay" y3-0 x1-0 (pubk a-0)) (enc x1-0 x3 (pubk a-0))+ (enc x1-0 x1-0 (pubk a-0))) (strand-map 0 1 2 3))+ (51+ (operation nonce-test (added-strand resp 2) x1-0 (0 1)+ (enc "okay" y3 x1-0 (pubk a)) (enc "okay" y3-0 x1-0 (pubk a))+ (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2 3)))+ (unrealized (0 1))+ (maps+ ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x1-0) (a-0 a-0))))+ (comment "6 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1-0) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1-0)+ (operation nonce-test (added-strand resp 2) x1-0 (0 1)+ (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))+ (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))))+ (recv (enc "okay" x1-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3 x1-0 (pubk a))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" x1-0 x1-0 (pubk a)))))+ (label 34)+ (parent 24)+ (seen 35 57)+ (seen-ops+ (35+ (operation nonce-test (contracted (x1 y3) (x1-0 y3)) y3 (0 1)+ (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 2))+ (57+ (operation nonce-test (added-strand resp 2) x1-0 (0 1)+ (enc "okay" x1-0 x1-0 (pubk a)) (enc "okay" y3 x1-0 (pubk a))+ (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2 3)))+ (unrealized (0 1))+ (maps+ ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x1-0) (a-0 a-0))))+ (comment "5 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (x1 y3) (x1-0 y3)) y3 (0 1)+ (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 35)+ (parent 24)+ (seen 37)+ (seen-ops+ (37+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a))) (strand-map 0 1 2)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "4 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1-0)+ (operation nonce-test (displaced 3 2 resp 2) x1-0 (0 1)+ (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))+ (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))+ (recv (enc "okay" x1-0 x1 (pubk a))))+ ((recv (enc x1 x1-0 (pubk a-0)))+ (send (enc "okay" x1-0 x1 (pubk a-0))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3 x1-0 (pubk a)))))+ (label 36)+ (parent 24)+ (seen 39)+ (seen-ops+ (39+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)+ (enc x1 x1 (pubk a))) (strand-map 0 1 2)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 x1) (x3 x1-0) (a a) (x1-0 x1-0) (x3-0 x1-0) (a-0 a-0))))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (displaced 3 2 resp 2) x1 (0 1)+ (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 37)+ (parent 26)+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (0 1)+ (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 38)+ (parent 26)+ (seen 37)+ (seen-ops+ (37 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (displaced 3 2 resp 2) x1 (0 1)+ (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+ (label 39)+ (parent 26)+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x1) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (0 1)+ (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 40)+ (parent 26)+ (seen 39)+ (seen-ops+ (39+ (operation nonce-test (displaced 4 2 resp 2) x1 (0 1)+ (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 2)))+ (unrealized (0 1))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "5 in cohort - 4 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (displaced 3 1 resp 2) x1-0 (0 1)+ (enc "okay" x3 x1-0 (pubk a)) (enc "okay" y3 x1-0 (pubk a))+ (enc x1-0 x3 (pubk a)) (enc x1 x1-0 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+ (label 41)+ (parent 27)+ (seen 25)+ (seen-ops+ (25 (operation generalization deleted (2 0)) (strand-map 0 1)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 text) (a name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (0 1)+ (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1-0 x1 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1-0 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1-0 x1 (pubk a)))))+ (label 42)+ (parent 27)+ (unrealized (0 1))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x1) (a-0 a))))+ (comment "3 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (displaced 3 2 resp 2) x1-0 (0 1)+ (enc "okay" x3 x1-0 (pubk a)) (enc "okay" y3 x1-0 (pubk a))+ (enc x1-0 x3 (pubk a)) (enc x1 x1-0 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 43)+ (parent 27)+ (realized)+ (shape)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))+ (origs (y3 (0 0))))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+ (label 44)+ (parent 29)+ (seen 28)+ (seen-ops+ (28 (operation generalization deleted (2 0)) (strand-map 0 1)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+ (label 45)+ (parent 29)+ (seen 25)+ (seen-ops+ (25 (operation generalization deleted (2 0)) (strand-map 0 1)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a)))))+ (label 46)+ (parent 29)+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "3 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 47)+ (parent 29)+ (seen 79)+ (seen-ops+ (79+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (x1-0 y3) (x3-0 y3)) y3 (0 1)+ (enc "okay" x1 y3 (pubk a)) (enc "okay" y3 y3 (pubk a))+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))+ (label 48)+ (parent 30)+ (seen 54 75)+ (seen-ops+ (54+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a))) (strand-map 0 1 2 2))+ (75+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0))))+ (comment "6 in cohort - 4 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x1-0 x1) (x3-0 x1)) x1 (0 1)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 49)+ (parent 30)+ (seen 76)+ (seen-ops+ (76+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "5 in cohort - 4 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (displaced 4 1 resp 2) x3-0 (0 1)+ (enc "okay" x1-0 x3-0 (pubk a)) (enc "okay" y3 x3-0 (pubk a))+ (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a)))))+ (label 50)+ (parent 30)+ (seen 74)+ (seen-ops+ (74+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "5 in cohort - 4 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1-0) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1-0) (y2 x3) (y3 x1-0) (a a))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1-0)+ (operation nonce-test (added-strand resp 2) x1-0 (0 1)+ (enc "okay" x1-0 x1-0 (pubk a)) (enc "okay" y3 x1-0 (pubk a))+ (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))))+ (recv (enc "okay" x1-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1-0 x3 (pubk a))) (send (enc "okay" y3 x1-0 (pubk a))))+ ((recv (enc x1-0 x3 (pubk a)))+ (send (enc "okay" x1-0 x1-0 (pubk a))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3-0 x1-0 (pubk a)))))+ (label 51)+ (parent 30)+ (seen 59 62)+ (seen-ops+ (59+ (operation nonce-test (contracted (x1 y3) (x1-0 y3)) y3 (0 1)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 2 3))+ (62+ (operation nonce-test (displaced 5 4 resp 2) x1-0 (0 1)+ (enc "okay" x1-0 x1-0 (pubk a)) (enc "okay" y3 x1-0 (pubk a))+ (enc "okay" y3-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))+ (enc x1-0 x1-0 (pubk a))) (strand-map 0 1 2 3 2)))+ (unrealized (0 1))+ (maps+ ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x1-0) (a-0 a-0))))+ (comment "3 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (displaced 3 2 resp 2) y3 (1 0)+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 52)+ (parent 31)+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0))))+ (comment "3 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 53)+ (parent 31)+ (seen 96)+ (seen-ops+ (96+ (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a))) (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0))))+ (comment "4 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+ (label 54)+ (parent 31)+ (seen 97 100)+ (seen-ops+ (97+ (operation nonce-test (displaced 4 2 resp 2) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3))+ (100+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+ (label 55)+ (parent 32)+ (seen 28)+ (seen-ops+ (28 (operation generalization deleted (2 0)) (strand-map 0 1)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+ (label 56)+ (parent 32)+ (seen 29)+ (seen-ops+ (29+ (operation nonce-test (displaced 4 2 resp 2) x3 (1 0)+ (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1-0 x3 (pubk a))) (strand-map 0 1 2 2)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "5 in cohort - 4 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1-0) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1-0)+ (operation nonce-test (added-strand resp 2) x1-0 (0 1)+ (enc "okay" y3 x1-0 (pubk a)) (enc "okay" y3-0 x1-0 (pubk a))+ (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))))+ (recv (enc "okay" x1-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1-0 x3 (pubk a))) (send (enc "okay" y3 x1-0 (pubk a))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3-0 x1-0 (pubk a))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" x1-0 x1-0 (pubk a)))))+ (label 57)+ (parent 33)+ (seen 58 62)+ (seen-ops+ (58+ (operation nonce-test (contracted (x1 y3-0) (x1-0 y3-0)) y3-0+ (0 1) (enc "okay" y3 y3-0 (pubk a))+ (enc "okay" y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 3))+ (62+ (operation nonce-test (displaced 5 4 resp 2) x1-0 (0 1)+ (enc "okay" x1-0 x1-0 (pubk a)) (enc "okay" y3 x1-0 (pubk a))+ (enc "okay" y3-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))+ (enc x1-0 x1-0 (pubk a))) (strand-map 0 1 2 2 3)))+ (unrealized (0 1))+ (maps+ ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x1-0) (a-0 a-0))))+ (comment "3 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (contracted (x1 y3-0) (x1-0 y3-0)) y3-0 (0 1)+ (enc "okay" y3 y3-0 (pubk a)) (enc "okay" y3-0 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a-0)))+ (send (enc "okay" x3 y3-0 (pubk a-0))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a)))))+ (label 58)+ (parent 33)+ (seen 65 72)+ (seen-ops+ (65+ (operation nonce-test (displaced 4 2 resp 2) y3-0 (1 0)+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3))+ (72+ (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a-0))))+ (comment "5 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (x1 y3) (x1-0 y3)) y3 (0 1)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 59)+ (parent 33)+ (seen 54 73)+ (seen-ops+ (54+ (operation nonce-test (displaced 4 3 resp 2) y3 (1 0)+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a))) (strand-map 0 1 2 3))+ (73+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "5 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x1-0 x1)) x1 (0 1)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 60)+ (parent 34)+ (seen 38 64)+ (seen-ops+ (38+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a))) (strand-map 0 1 2 3))+ (64+ (operation nonce-test (displaced 4 2 resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "5 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (displaced 4 2 resp 2) x1-0 (0 1)+ (enc "okay" x1-0 x1-0 (pubk a)) (enc "okay" y3 x1-0 (pubk a))+ (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2 2)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+ (recv (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 61)+ (parent 34)+ (seen 83)+ (seen-ops+ (83+ (operation nonce-test (contracted (x1 y3) (a-0 a)) y3 (1 0)+ (enc y3 y3 (pubk a))) (strand-map 0 1 2)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 y3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1-0)+ (operation nonce-test (displaced 4 3 resp 2) x1-0 (0 1)+ (enc "okay" x1-0 x1-0 (pubk a)) (enc "okay" y3 x1-0 (pubk a))+ (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))+ (recv (enc "okay" x1-0 x1 (pubk a))))+ ((recv (enc x1 x1-0 (pubk a-0)))+ (send (enc "okay" x1-0 x1 (pubk a-0))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3 x1-0 (pubk a))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" x1-0 x1-0 (pubk a)))))+ (label 62)+ (parent 34)+ (seen 118)+ (seen-ops+ (118+ (operation nonce-test (displaced 4 2 resp 2) x1-0 (1 0)+ (enc x1-0 x1-0 (pubk a))) (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 x1) (x3 x1-0) (a a) (x1-0 x1-0) (x3-0 x1-0) (a-0 a-0))))+ (comment "4 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (displaced 3 2 resp 2) y3 (1 0)+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 63)+ (parent 35)+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "3 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 64)+ (parent 35)+ (seen 123)+ (seen-ops+ (123+ (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "4 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 65)+ (parent 35)+ (seen 124 127)+ (seen-ops+ (124+ (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3))+ (127+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1-0)+ (operation nonce-test (displaced 3 2 resp 2) x1-0 (1 0)+ (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))+ (recv (enc "okay" x1-0 x1 (pubk a))))+ ((recv (enc x1 x1-0 (pubk a-0)))+ (send (enc "okay" x1-0 x1 (pubk a-0))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3 x1-0 (pubk a)))))+ (label 66)+ (parent 36)+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 x1) (x3 x1-0) (a a) (x1-0 x1-0) (x3-0 x1-0) (a-0 a-0))))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1-0)+ (operation nonce-test (added-strand resp 2) x1-0 (1 0)+ (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))+ (recv (enc "okay" x1-0 x1 (pubk a))))+ ((recv (enc x1 x1-0 (pubk a-0)))+ (send (enc "okay" x1-0 x1 (pubk a-0))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3 x1-0 (pubk a))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3-0 x1-0 (pubk a)))))+ (label 67)+ (parent 36)+ (seen 66)+ (seen-ops+ (66+ (operation nonce-test (displaced 4 2 resp 2) x1-0 (1 0)+ (enc "okay" y3-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2 2)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 x1) (x3 x1-0) (a a) (x1-0 x1-0) (x3-0 x1-0) (a-0 a-0))))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3-0) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation generalization separated y3-0)+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 68)+ (parent 37)+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3-0) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((1 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation generalization deleted (2 0))+ (strand-map 0 1)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 69)+ (parent 39)+ (seen 25)+ (seen-ops+ (25 (operation generalization separated x1-0) (strand-map 0 1)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x1) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (origs (x1 (0 0)))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (0 1)+ (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 70)+ (parent 40)+ (seen 76)+ (seen-ops+ (76 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (0 1)+ (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 71)+ (parent 40)+ (seen 72)+ (seen-ops+ (72 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (displaced 4 2 resp 2) x1 (0 1)+ (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 72)+ (parent 40)+ (seen 37)+ (seen-ops+ (37 (operation generalization deleted (3 0)) (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (displaced 4 3 resp 2) x1 (0 1)+ (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a)))))+ (label 73)+ (parent 40)+ (realized)+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (displaced 4 1 resp 2) x1-0 (0 1)+ (enc "okay" x3 x1-0 (pubk a)) (enc "okay" x1 x1-0 (pubk a))+ (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))+ (enc x1 x1-0 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 74)+ (parent 42)+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (displaced 4 2 resp 2) x1-0 (0 1)+ (enc "okay" x3 x1-0 (pubk a)) (enc "okay" x1 x1-0 (pubk a))+ (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))+ (enc x1 x1-0 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))+ (label 75)+ (parent 42)+ (seen 43)+ (seen-ops+ (43 (operation generalization deleted (3 0)) (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (displaced 4 3 resp 2) x1-0 (0 1)+ (enc "okay" x3 x1-0 (pubk a)) (enc "okay" x1 x1-0 (pubk a))+ (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))+ (enc x1 x1-0 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 76)+ (parent 42)+ (seen 135)+ (seen-ops+ (135 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc "okay" x1 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 77)+ (parent 46)+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc "okay" x1 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 78)+ (parent 46)+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" x1-0 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 79)+ (parent 46)+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 80)+ (parent 47)+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 81)+ (parent 47)+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))+ (label 82)+ (parent 48)+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0))))+ (comment "4 in cohort - 4 not yet seen"))++(defskeleton wonthull2+ (vars (x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x3 x1) (a-0 a) (y3 x1)) x1 (1 0)+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 2)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 83)+ (parent 48)+ (seen 69)+ (seen-ops+ (69 (operation generalization deleted (2 0)) (strand-map 0 1)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x1) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (displaced 4 3 resp 2) y3 (1 0)+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))+ (label 84)+ (parent 48)+ (seen 98 143 146)+ (seen-ops+ (98+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" x1 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a))) (strand-map 0 1 2 3))+ (143+ (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)+ (enc "okay" x1 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a))) (strand-map 0 1 2 3))+ (146+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 85)+ (parent 48)+ (seen 98 100 145)+ (seen-ops+ (98+ (operation nonce-test (displaced 5 3 resp 2) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a))) (strand-map 0 1 2 3 4))+ (100+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 2 3))+ (145+ (operation nonce-test (displaced 5 2 resp 2) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a))) (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0))))+ (comment "6 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 86)+ (parent 49)+ (seen 100)+ (seen-ops+ (100+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "6 in cohort - 5 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (displaced 4 2 resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 87)+ (parent 49)+ (seen 100)+ (seen-ops+ (100+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "4 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (displaced 4 3 resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 88)+ (parent 49)+ (seen 154 158)+ (seen-ops+ (154+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3))+ (158+ (operation nonce-test (displaced 4 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 89)+ (parent 49)+ (seen 87 155 160)+ (seen-ops+ (87+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2))+ (155+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4))+ (160+ (operation nonce-test (displaced 5 3 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "5 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 90)+ (parent 50)+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (displaced 4 2 resp 2) x3 (1 0)+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a)))))+ (label 91)+ (parent 50)+ (seen 46)+ (seen-ops+ (46+ (operation nonce-test (displaced 4 3 resp 2) x3 (1 0)+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1-0 x3 (pubk a))) (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "5 in cohort - 4 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (displaced 4 3 resp 2) x3 (1 0)+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a)))))+ (label 92)+ (parent 50)+ (seen 46 105)+ (seen-ops+ (46+ (operation nonce-test (displaced 4 2 resp 2) x3 (1 0)+ (enc "okay" x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1-0 x3 (pubk a))) (strand-map 0 1 2 3))+ (105+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1-0 x3 (pubk a))) (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+ (label 93)+ (parent 50)+ (seen 91 105)+ (seen-ops+ (91+ (operation nonce-test (displaced 5 2 resp 2) x3 (1 0)+ (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1-0 x3 (pubk a))) (strand-map 0 1 2 3 2))+ (105+ (operation nonce-test (displaced 5 3 resp 2) x3 (1 0)+ (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1-0 x3 (pubk a))) (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "6 in cohort - 4 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x1-0 x1)) x1 (0 1)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 94)+ (parent 51)+ (seen 70 86 113 119)+ (seen-ops+ (70+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4))+ (86+ (operation nonce-test (displaced 5 4 resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4))+ (113+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4))+ (119+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "8 in cohort - 4 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 95)+ (parent 52)+ (seen 43)+ (seen-ops+ (43 (operation generalization weakened ((2 1) (1 0)))+ (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 96)+ (parent 52)+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0))))+ (comment "3 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+ (label 97)+ (parent 52)+ (seen 180)+ (seen-ops+ (180+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))+ (label 98)+ (parent 53)+ (seen 179)+ (seen-ops+ (179+ (operation nonce-test (displaced 5 2 resp 2) y3 (1 0)+ (enc "okay" x1 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0))))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 99)+ (parent 53)+ (seen 43)+ (seen-ops+ (43 (operation generalization deleted (3 0)) (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 100)+ (parent 53)+ (seen 150 180 183)+ (seen-ops+ (150+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 3))+ (180+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4))+ (183+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "6 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 101)+ (parent 54)+ (seen 184)+ (seen-ops+ (184+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+ (label 102)+ (parent 54)+ (seen 135)+ (seen-ops+ (135 (operation generalization deleted (3 0)) (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+ (label 103)+ (parent 56)+ (seen 44)+ (seen-ops+ (44 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+ (label 104)+ (parent 56)+ (seen 45)+ (seen-ops+ (45 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a)))))+ (label 105)+ (parent 56)+ (seen 46)+ (seen-ops+ (46+ (operation nonce-test (displaced 5 2 resp 2) x3 (1 0)+ (enc "okay" x1-0 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "4 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 106)+ (parent 56)+ (seen 47 190)+ (seen-ops+ (47+ (operation nonce-test (displaced 5 2 resp 2) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 2 3))+ (190+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x1-0 x1)) x1 (0 1)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 107)+ (parent 57)+ (seen 71 109 116 119 174)+ (seen-ops+ (71+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4))+ (109+ (operation nonce-test (displaced 5 3 resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4))+ (116+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4))+ (119+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 2 3))+ (174+ (operation nonce-test (displaced 5 4 resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "8 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (displaced 4 3 resp 2) y3-0 (1 0)+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a-0)))+ (send (enc "okay" x3 y3-0 (pubk a-0))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a)))))+ (label 108)+ (parent 58)+ (seen 124)+ (seen-ops+ (124+ (operation nonce-test (displaced 4 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a-0))))+ (comment "4 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (added-strand resp 2) y3-0 (1 0)+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a-0)))+ (send (enc "okay" x3 y3-0 (pubk a-0))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a)))))+ (label 109)+ (parent 58)+ (seen 127 151 196)+ (seen-ops+ (127+ (operation nonce-test (displaced 5 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 4))+ (151+ (operation nonce-test (displaced 5 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-1 (pubk a)) (enc y3-1 x3 (pubk a))+ (enc y3-1 y3-1 (pubk a))) (strand-map 0 1 2 3 2))+ (196+ (operation nonce-test (displaced 5 3 resp 2) y3-0 (1 0)+ (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a-0))))+ (comment "6 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (added-strand resp 2) y3-0 (1 0)+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a-0)))+ (send (enc "okay" x3 y3-0 (pubk a-0))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a)))))+ (label 110)+ (parent 58)+ (seen 65 198 201)+ (seen-ops+ (65+ (operation nonce-test (displaced 5 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 2))+ (198+ (operation nonce-test (displaced 5 3 resp 2) y3-0 (1 0)+ (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 4))+ (201+ (operation nonce-test (added-strand resp 2) y3-0 (1 0)+ (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a-0))))+ (comment "5 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+ (label 111)+ (parent 59)+ (seen 54)+ (seen-ops+ (54+ (operation nonce-test (displaced 5 3 resp 2) y3 (1 0)+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "5 in cohort - 4 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 112)+ (parent 59)+ (seen 97 206)+ (seen-ops+ (97+ (operation nonce-test (displaced 4 3 resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3))+ (206+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+ (label 113)+ (parent 59)+ (seen 100 151 207 209)+ (seen-ops+ (100+ (operation nonce-test (displaced 5 3 resp 2) y3 (1 0)+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 4))+ (151+ (operation nonce-test (displaced 5 3 resp 2) y3 (1 0)+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 3))+ (207+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 4))+ (209+ (operation nonce-test (displaced 5 2 resp 2) y3 (1 0)+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "6 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (displaced 4 3 resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 114)+ (parent 60)+ (seen 123)+ (seen-ops+ (123+ (operation nonce-test (displaced 4 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "4 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 115)+ (parent 60)+ (seen 64 213)+ (seen-ops+ (64+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2))+ (213+ (operation nonce-test (displaced 5 3 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "5 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 116)+ (parent 60)+ (seen 127 151 214 217)+ (seen-ops+ (127+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4))+ (151+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2))+ (214+ (operation nonce-test (displaced 5 3 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4))+ (217+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "6 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (displaced 3 2 resp 2) y3 (1 0)+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+ (recv (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 117)+ (parent 61)+ (seen 131)+ (seen-ops+ (131+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 y3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+ (recv (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 118)+ (parent 61)+ (seen 131 150)+ (seen-ops+ (131+ (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3))+ (150+ (operation nonce-test (contracted (x1 y3) (a-0 a)) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 y3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "3 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 119)+ (parent 62)+ (seen 83)+ (seen-ops+ (83 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x1) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1-0)+ (operation nonce-test (displaced 4 3 resp 2) x1-0 (1 0)+ (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))+ (recv (enc "okay" x1-0 x1 (pubk a))))+ ((recv (enc x1 x1-0 (pubk a-0)))+ (send (enc "okay" x1-0 x1 (pubk a-0))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3 x1-0 (pubk a))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" x1-0 x1-0 (pubk a)))))+ (label 120)+ (parent 62)+ (seen 131 133)+ (seen-ops+ (131+ (operation nonce-test (displaced 4 2 resp 2) x1-0 (1 0)+ (enc "okay" x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2 3))+ (133+ (operation nonce-test (added-strand resp 2) x1-0 (1 0)+ (enc "okay" x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 x1) (x3 x1-0) (a a) (x1-0 x1-0) (x3-0 x1-0) (a-0 a-0))))+ (comment "3 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1-0)+ (operation nonce-test (added-strand resp 2) x1-0 (1 0)+ (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))+ (recv (enc "okay" x1-0 x1 (pubk a))))+ ((recv (enc x1 x1-0 (pubk a-0)))+ (send (enc "okay" x1-0 x1 (pubk a-0))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3 x1-0 (pubk a))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" x1-0 x1-0 (pubk a))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3-0 x1-0 (pubk a)))))+ (label 121)+ (parent 62)+ (seen 118 133)+ (seen-ops+ (118+ (operation nonce-test (displaced 5 2 resp 2) x1-0 (1 0)+ (enc "okay" y3-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2 3 2))+ (133+ (operation nonce-test (displaced 5 3 resp 2) x1-0 (1 0)+ (enc "okay" y3-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 x1) (x3 x1-0) (a a) (x1-0 x1-0) (x3-0 x1-0) (a-0 a-0))))+ (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 122)+ (parent 63)+ (seen 37)+ (seen-ops+ (37 (operation generalization weakened ((2 1) (1 0)))+ (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 123)+ (parent 63)+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 124)+ (parent 63)+ (seen 226)+ (seen-ops+ (226+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 125)+ (parent 64)+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 126)+ (parent 64)+ (seen 37)+ (seen-ops+ (37 (operation generalization deleted (3 0)) (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+ (label 127)+ (parent 64)+ (seen 150 186 226 229)+ (seen-ops+ (150+ (operation nonce-test (contracted (x3 y3) (a-0 a)) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 3))+ (186+ (operation nonce-test (displaced 5 2 resp 2) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 3))+ (226+ (operation nonce-test (displaced 5 2 resp 2) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4))+ (229+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "6 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 128)+ (parent 65)+ (seen 231)+ (seen-ops+ (231+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 129)+ (parent 65)+ (seen 37)+ (seen-ops+ (37 (operation generalization deleted (3 0)) (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+ (label 130)+ (parent 66)+ (seen 69)+ (seen-ops+ (69 (operation generalization deleted (2 0)) (strand-map 0 1)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x1) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1-0)+ (operation nonce-test (added-strand resp 2) x1-0 (1 0)+ (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))+ (recv (enc "okay" x1-0 x1 (pubk a))))+ ((recv (enc x1 x1-0 (pubk a-0)))+ (send (enc "okay" x1-0 x1 (pubk a-0))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3 x1-0 (pubk a))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" x1-0 x1-0 (pubk a)))))+ (label 131)+ (parent 66)+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 x1) (x3 x1-0) (a a) (x1-0 x1-0) (x3-0 x1-0) (a-0 a-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 132)+ (parent 67)+ (seen 130)+ (seen-ops+ (130 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x1) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1-0)+ (operation nonce-test (added-strand resp 2) x1-0 (1 0)+ (enc "okay" y3-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))+ (recv (enc "okay" x1-0 x1 (pubk a))))+ ((recv (enc x1 x1-0 (pubk a-0)))+ (send (enc "okay" x1-0 x1 (pubk a-0))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3 x1-0 (pubk a))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3-0 x1-0 (pubk a))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" x1-0 x1-0 (pubk a)))))+ (label 133)+ (parent 67)+ (seen 131)+ (seen-ops+ (131+ (operation nonce-test (displaced 5 2 resp 2) x1-0 (1 0)+ (enc "okay" x1-0 x1-0 (pubk a)) (enc "okay" y3-0 x1-0 (pubk a))+ (enc x1-0 x1-0 (pubk a))) (strand-map 0 1 2 2 3)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 x1) (x3 x1-0) (a a) (x1-0 x1-0) (x3-0 x1-0) (a-0 a-0))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3-0) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a) (privk a-0))+ (uniq-orig y3-0)+ (operation generalization separated a-0)+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 134)+ (parent 68)+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3-0) (a-0 a-0))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation generalization deleted (2 0))+ (strand-map 0 1 3)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 135)+ (parent 73)+ (seen 43)+ (seen-ops+ (43 (operation generalization separated y3-0) (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation generalization deleted (2 0))+ (strand-map 0 1 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 136)+ (parent 74)+ (seen 25)+ (seen-ops+ (25 (operation generalization deleted (2 0)) (strand-map 0 1)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation generalization deleted (2 0))+ (strand-map 0 1 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 137)+ (parent 77)+ (seen 25)+ (seen-ops+ (25 (operation generalization deleted (2 0)) (strand-map 0 1)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation generalization deleted (2 0))+ (strand-map 0 1 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 138)+ (parent 78)+ (seen 28)+ (seen-ops+ (28 (operation generalization deleted (2 0)) (strand-map 0 1)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" x1 x3 (pubk a))+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 139)+ (parent 79)+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" x1 x3 (pubk a))+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 140)+ (parent 79)+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation generalization deleted (2 0))+ (strand-map 0 1 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 141)+ (parent 80)+ (seen 25)+ (seen-ops+ (25 (operation generalization deleted (2 0)) (strand-map 0 1)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation generalization deleted (2 0))+ (strand-map 0 1 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 142)+ (parent 81)+ (seen 28)+ (seen-ops+ (28 (operation generalization deleted (2 0)) (strand-map 0 1)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (displaced 4 3 resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))+ (label 143)+ (parent 82)+ (seen 97 179 220)+ (seen-ops+ (97+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 2))+ (179+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" x1 y3 (pubk a)) (enc "okay" y3 y3 (pubk a))+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))) (strand-map 0 1 2 3))+ (220+ (operation nonce-test (contracted (x3 x1) (a-0 a) (y3 x1)) x1+ (1 0) (enc "okay" x1 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 2)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))+ (label 144)+ (parent 82)+ (seen 95)+ (seen-ops+ (95 (operation generalization deleted (3 0)) (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 145)+ (parent 82)+ (seen 179 183)+ (seen-ops+ (179+ (operation nonce-test (displaced 5 3 resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3 4))+ (183+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0))))+ (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+ (label 146)+ (parent 82)+ (seen 183)+ (seen-ops+ (183+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" x1 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))+ (label 147)+ (parent 84)+ (seen 43)+ (seen-ops+ (43 (operation generalization deleted (3 0)) (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))+ (label 148)+ (parent 85)+ (seen 183 239)+ (seen-ops+ (183+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 2 3 4))+ (239+ (operation nonce-test (displaced 6 2 resp 2) y3 (1 0)+ (enc "okay" x1 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0))))+ (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 149)+ (parent 85)+ (seen 99)+ (seen-ops+ (99 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x3 x1) (a-0 a) (y3-0 x1)) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+ (label 150)+ (parent 85)+ (seen 130)+ (seen-ops+ (130 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x1) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2)+ (traces+ ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 151)+ (parent 86)+ (seen 150 186)+ (seen-ops+ (150+ (operation nonce-test (contracted (a-0 a)) x3 (1 0)+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a)))+ (strand-map 0 1 2 3))+ (186+ (operation nonce-test (displaced 4 3 resp 2) x3 (1 0)+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a)))+ (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x3) (x3-0 x3) (a-0 a-0))))+ (comment "3 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 152)+ (parent 86)+ (seen 184 244)+ (seen-ops+ (184+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5))+ (244+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 153)+ (parent 86)+ (seen 102)+ (seen-ops+ (102 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (displaced 5 3 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 154)+ (parent 86)+ (seen 180 186)+ (seen-ops+ (180+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4))+ (186+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 155)+ (parent 86)+ (seen 100 151 224 246 248)+ (seen-ops+ (100+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 2))+ (151+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2 2))+ (224+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 4))+ (246+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5))+ (248+ (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "8 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 156)+ (parent 87)+ (seen 183)+ (seen-ops+ (183+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 157)+ (parent 87)+ (seen 135)+ (seen-ops+ (135 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (displaced 4 3 resp 2) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 158)+ (parent 87)+ (seen 180)+ (seen-ops+ (180+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 159)+ (parent 88)+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 160)+ (parent 88)+ (seen 158 248)+ (seen-ops+ (158+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2))+ (248+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "3 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 161)+ (parent 89)+ (seen 156 249)+ (seen-ops+ (156+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2 4))+ (249+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "3 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 162)+ (parent 89)+ (seen 157)+ (seen-ops+ (157 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation generalization deleted (2 0))+ (strand-map 0 1 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 163)+ (parent 90)+ (seen 28)+ (seen-ops+ (28 (operation generalization deleted (2 0)) (strand-map 0 1)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 164)+ (parent 91)+ (seen 163)+ (seen-ops+ (163 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 165)+ (parent 91)+ (seen 136)+ (seen-ops+ (136 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a)))))+ (label 166)+ (parent 91)+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "3 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 167)+ (parent 91)+ (seen 79 259)+ (seen-ops+ (79+ (operation nonce-test (displaced 5 3 resp 2) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3 4))+ (259+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc "okay" x1 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 168)+ (parent 92)+ (seen 138)+ (seen-ops+ (138 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc "okay" x1 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 169)+ (parent 92)+ (seen 137)+ (seen-ops+ (137 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a)))))+ (label 170)+ (parent 93)+ (seen 166)+ (seen-ops+ (166+ (operation nonce-test (displaced 6 2 resp 2) x3 (1 0)+ (enc "okay" x1-0 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3 2 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "4 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+ (label 171)+ (parent 93)+ (seen 164)+ (seen-ops+ (164 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+ (label 172)+ (parent 93)+ (seen 165)+ (seen-ops+ (165 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 173)+ (parent 93)+ (seen 167 190 264)+ (seen-ops+ (167+ (operation nonce-test (displaced 6 2 resp 2) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3 2 4))+ (190+ (operation nonce-test (displaced 6 3 resp 2) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3 4 5))+ (264+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "5 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (displaced 5 3 resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2)+ (traces+ ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 174)+ (parent 94)+ (seen 186 222 251)+ (seen-ops+ (186+ (operation nonce-test (displaced 4 2 resp 2) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc x3 x3 (pubk a)))+ (strand-map 0 1 2 3))+ (222+ (operation nonce-test (contracted (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc x3 x3 (pubk a)))+ (strand-map 0 1 2 3))+ (251+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc x3 x3 (pubk a)))+ (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x3) (x3-0 x3) (a-0 a-0))))+ (comment "3 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 175)+ (parent 94)+ (seen 86 207 224 251)+ (seen-ops+ (86+ (operation nonce-test (displaced 6 4 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 4))+ (207+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5))+ (224+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2 4))+ (251+ (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "9 in cohort - 5 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (displaced 5 3 resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 176)+ (parent 94)+ (seen 154 209 222 270)+ (seen-ops+ (154+ (operation nonce-test (displaced 5 4 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4))+ (209+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4))+ (222+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2))+ (270+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "6 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 177)+ (parent 94)+ (seen 113 155 224 251 267 271 273)+ (seen-ops+ (113+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 2))+ (155+ (operation nonce-test (displaced 6 4 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5))+ (224+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2 4))+ (251+ (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 4))+ (267+ (operation nonce-test (displaced 6 4 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 4))+ (271+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5))+ (273+ (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "9 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 178)+ (parent 96)+ (seen 95)+ (seen-ops+ (95 (operation generalization deleted (3 0)) (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))+ (label 179)+ (parent 96)+ (seen 180 233)+ (seen-ops+ (180+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2))+ (233+ (operation nonce-test (contracted (x3 x1) (a-0 a) (y3-0 x1)) x1+ (1 0) (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0))))+ (comment "3 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 180)+ (parent 96)+ (seen 233)+ (seen-ops+ (233+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+ (label 181)+ (parent 97)+ (seen 254)+ (seen-ops+ (254 (operation generalization deleted (3 0)) (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" x1 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))+ (label 182)+ (parent 98)+ (seen 147)+ (seen-ops+ (147 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 183)+ (parent 98)+ (seen 243)+ (seen-ops+ (243+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 184)+ (parent 100)+ (seen 243)+ (seen-ops+ (243+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 185)+ (parent 100)+ (seen 102)+ (seen-ops+ (102 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 3)+ (traces+ ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+ (label 186)+ (parent 100)+ (seen 233)+ (seen-ops+ (233+ (operation nonce-test (contracted (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+ (enc x3 x3 (pubk a))) (strand-map 0 1 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x3) (x3-0 x3) (a-0 a-0))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 187)+ (parent 101)+ (seen 225)+ (seen-ops+ (225 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc "okay" x1 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 188)+ (parent 105)+ (seen 78)+ (seen-ops+ (78 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc "okay" x1 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 189)+ (parent 105)+ (seen 77)+ (seen-ops+ (77 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" x1-0 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 190)+ (parent 105)+ (seen 79 131)+ (seen-ops+ (79+ (operation nonce-test (displaced 6 2 resp 2) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" x1-0 x3 (pubk a))+ (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1-0 x3 (pubk a))) (strand-map 0 1 2 2 3 4))+ (131+ (operation nonce-test (displaced 6 2 resp 2) x1-0 (1 0)+ (enc "okay" x1-0 x1-0 (pubk a)) (enc "okay" y3-0 x1-0 (pubk a))+ (enc x1-0 x1-0 (pubk a))) (strand-map 0 1 2 2 3 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 191)+ (parent 106)+ (seen 81)+ (seen-ops+ (81 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 192)+ (parent 106)+ (seen 80)+ (seen-ops+ (80 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (displaced 5 4 resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 193)+ (parent 107)+ (seen 196 214 222)+ (seen-ops+ (196+ (operation nonce-test (displaced 5 3 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4))+ (214+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4))+ (222+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 2 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "6 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 194)+ (parent 107)+ (seen 109 217 224 251 267 283)+ (seen-ops+ (109+ (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 3))+ (217+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5))+ (224+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 2 3 4))+ (251+ (operation nonce-test (displaced 6 4 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 2 3 4))+ (267+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 2))+ (283+ (operation nonce-test (displaced 6 4 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "9 in cohort - 3 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 195)+ (parent 107)+ (seen 116 201 224 251 267 284 287)+ (seen-ops+ (116+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 2))+ (201+ (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5))+ (224+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 2 3 4))+ (251+ (operation nonce-test (displaced 6 4 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 2 3 4))+ (267+ (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 3))+ (284+ (operation nonce-test (displaced 6 4 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5))+ (287+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "9 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (added-strand resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a-0)))+ (send (enc "okay" x3 y3-0 (pubk a-0))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a)))))+ (label 196)+ (parent 108)+ (seen 186 226)+ (seen-ops+ (186+ (operation nonce-test (displaced 5 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 2))+ (226+ (operation nonce-test (displaced 5 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a-0))))+ (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a)))))+ (label 197)+ (parent 108)+ (seen 122)+ (seen-ops+ (122 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (added-strand resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a-0)))+ (send (enc "okay" x3 y3-0 (pubk a-0))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a)))))+ (label 198)+ (parent 108)+ (seen 124 291)+ (seen-ops+ (124+ (operation nonce-test (displaced 5 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 2))+ (291+ (operation nonce-test (added-strand resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a-0))))+ (comment "3 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (added-strand resp 2) y3-0 (1 0)+ (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a-0)))+ (send (enc "okay" x3 y3-0 (pubk a-0))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a)))))+ (label 199)+ (parent 109)+ (seen 229 244)+ (seen-ops+ (229+ (operation nonce-test (displaced 6 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4 5))+ (244+ (operation nonce-test (displaced 6 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 2 4)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a-0))))+ (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)+ (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a)))))+ (label 200)+ (parent 109)+ (seen 126)+ (seen-ops+ (126 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 y3-2 text) (a a-0 name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (added-strand resp 2) y3-0 (1 0)+ (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a-0)))+ (send (enc "okay" x3 y3-0 (pubk a-0))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-2 y3-0 (pubk a)))))+ (label 201)+ (parent 109)+ (seen 127 151 224 251 291 294)+ (seen-ops+ (127+ (operation nonce-test (displaced 6 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-1 y3-0 (pubk a)) (enc "okay" y3-2 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4 2))+ (151+ (operation nonce-test (displaced 6 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-1 (pubk a)) (enc "okay" y3-2 y3-1 (pubk a))+ (enc y3-1 x3 (pubk a)) (enc y3-1 y3-1 (pubk a)))+ (strand-map 0 1 2 3 2 2))+ (224+ (operation nonce-test (contracted (x3 y3-0) (a-0 a)) y3-0 (1 0)+ (enc "okay" y3-1 y3-0 (pubk a)) (enc "okay" y3-2 y3-0 (pubk a))+ (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 4 4))+ (251+ (operation nonce-test (displaced 6 3 resp 2) y3-0 (1 0)+ (enc "okay" y3-1 y3-0 (pubk a)) (enc "okay" y3-2 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4 4))+ (291+ (operation nonce-test (displaced 6 3 resp 2) y3-0 (1 0)+ (enc "okay" y3-1 y3-0 (pubk a)) (enc "okay" y3-2 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4 5))+ (294+ (operation nonce-test (added-strand resp 2) y3-0 (1 0)+ (enc "okay" y3-1 y3-0 (pubk a)) (enc "okay" y3-2 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a-0))))+ (comment "8 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (added-strand resp 2) y3-0 (1 0)+ (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a-0)))+ (send (enc "okay" x3 y3-0 (pubk a-0))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a)))))+ (label 202)+ (parent 110)+ (seen 128 295)+ (seen-ops+ (128+ (operation nonce-test (displaced 6 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 2 4))+ (295+ (operation nonce-test (added-strand resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a-0))))+ (comment "3 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)+ (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a)))))+ (label 203)+ (parent 110)+ (seen 129)+ (seen-ops+ (129 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 204)+ (parent 111)+ (seen 101)+ (seen-ops+ (101+ (operation nonce-test (displaced 6 3 resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+ (label 205)+ (parent 111)+ (seen 102)+ (seen-ops+ (102 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (displaced 5 2 resp 2) y3 (1 0)+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+ (label 206)+ (parent 111)+ (seen 97)+ (seen-ops+ (97+ (operation nonce-test (displaced 5 3 resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 y3-2 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-2 y3 (pubk a)))))+ (label 207)+ (parent 111)+ (seen 100 151 224 251 299 301)+ (seen-ops+ (100+ (operation nonce-test (displaced 6 3 resp 2) y3 (1 0)+ (enc "okay" y3-2 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 3 4))+ (151+ (operation nonce-test (displaced 6 3 resp 2) y3 (1 0)+ (enc "okay" y3-1 y3 (pubk a)) (enc "okay" y3-2 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 3 3))+ (224+ (operation nonce-test (contracted (x3 y3) (a-0 a)) y3 (1 0)+ (enc "okay" y3-1 y3 (pubk a)) (enc "okay" y3-2 y3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 4 4))+ (251+ (operation nonce-test (displaced 6 2 resp 2) y3-1 (1 0)+ (enc "okay" y3-0 y3-1 (pubk a)) (enc "okay" y3-2 y3-1 (pubk a))+ (enc y3-1 x3 (pubk a)) (enc y3-1 y3-1 (pubk a)))+ (strand-map 0 1 2 3 4 4))+ (299+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3-1 y3 (pubk a)) (enc "okay" y3-2 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 5))+ (301+ (operation nonce-test (displaced 6 2 resp 2) y3 (1 0)+ (enc "okay" y3-1 y3 (pubk a)) (enc "okay" y3-2 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "8 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 208)+ (parent 112)+ (seen 254)+ (seen-ops+ (254 (operation generalization deleted (3 0)) (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+ (label 209)+ (parent 112)+ (seen 180 186 301)+ (seen-ops+ (180+ (operation nonce-test (displaced 5 3 resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4))+ (186+ (operation nonce-test (displaced 5 3 resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 3))+ (301+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 210)+ (parent 113)+ (seen 183 244 302)+ (seen-ops+ (183+ (operation nonce-test (displaced 6 3 resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 5))+ (244+ (operation nonce-test (displaced 6 3 resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 3 4))+ (302+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+ (label 211)+ (parent 113)+ (seen 157)+ (seen-ops+ (157 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 212)+ (parent 114)+ (seen 122)+ (seen-ops+ (122 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 213)+ (parent 114)+ (seen 123)+ (seen-ops+ (123+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 214)+ (parent 114)+ (seen 186 226 307)+ (seen-ops+ (186+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2))+ (226+ (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4))+ (307+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 215)+ (parent 115)+ (seen 125)+ (seen-ops+ (125+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 216)+ (parent 115)+ (seen 126)+ (seen-ops+ (126 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 217)+ (parent 115)+ (seen 127 151 224 251 307 310)+ (seen-ops+ (127+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2 4))+ (151+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2 2))+ (224+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 4))+ (251+ (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 4))+ (307+ (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5))+ (310+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "8 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 218)+ (parent 116)+ (seen 231 244 311)+ (seen-ops+ (231+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5))+ (244+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2 4))+ (311+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 219)+ (parent 116)+ (seen 129)+ (seen-ops+ (129 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (y3 text) (a name))+ (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (x1 y3) (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 220)+ (parent 117)+ (seen 69)+ (seen-ops+ (69 (operation generalization deleted (2 0)) (strand-map 0 1)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 y3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+ (recv (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 221)+ (parent 118)+ (seen 243)+ (seen-ops+ (243+ (operation nonce-test (contracted (x1 y3) (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 y3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 222)+ (parent 120)+ (seen 220)+ (seen-ops+ (220 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x1) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 x1-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1-0)+ (operation nonce-test (added-strand resp 2) x1-0 (1 0)+ (enc "okay" y3-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))+ (recv (enc "okay" x1-0 x1 (pubk a))))+ ((recv (enc x1 x1-0 (pubk a-0)))+ (send (enc "okay" x1-0 x1 (pubk a-0))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3 x1-0 (pubk a))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" x1-0 x1-0 (pubk a))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" y3-0 x1-0 (pubk a))))+ ((recv (enc x1-0 x1-0 (pubk a)))+ (send (enc "okay" x1-0 x1-0 (pubk a)))))+ (label 223)+ (parent 121)+ (seen 221)+ (seen-ops+ (221+ (operation nonce-test (displaced 6 2 resp 2) x1-0 (1 0)+ (enc "okay" x1-0 x1-0 (pubk a)) (enc "okay" y3-0 x1-0 (pubk a))+ (enc x1-0 x1-0 (pubk a))) (strand-map 0 1 2 3 2 4)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 x1) (x3 x1-0) (a a) (x1-0 x1-0) (x3-0 x1-0) (a-0 a-0))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 224)+ (parent 121)+ (seen 150)+ (seen-ops+ (150 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x1) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 225)+ (parent 123)+ (seen 122)+ (seen-ops+ (122 (operation generalization deleted (3 0)) (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+ (label 226)+ (parent 123)+ (seen 233)+ (seen-ops+ (233+ (operation nonce-test (contracted (x3 y3) (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 227)+ (parent 124)+ (seen 122)+ (seen-ops+ (122 (operation generalization deleted (3 0)) (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 228)+ (parent 125)+ (seen 225)+ (seen-ops+ (225 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+ (label 229)+ (parent 125)+ (seen 243)+ (seen-ops+ (243+ (operation nonce-test (contracted (x3 y3) (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+ (label 230)+ (parent 127)+ (seen 129)+ (seen-ops+ (129 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3-0 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 231)+ (parent 127)+ (seen 243)+ (seen-ops+ (243+ (operation nonce-test (contracted (x3 y3) (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 232)+ (parent 128)+ (seen 253)+ (seen-ops+ (253 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 233)+ (parent 131)+ (seen 220)+ (seen-ops+ (220 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x1) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 234)+ (parent 133)+ (seen 233)+ (seen-ops+ (233 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x1) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3-0) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))+ (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation generalization forgot (privk a-0))+ (strand-map 0 1 2)+ (traces+ ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 235)+ (parent 134)+ (realized)+ (shape)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3-0) (a-0 a-0))))+ (origs (y3-0 (0 0))))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation generalization deleted (2 0))+ (strand-map 0 1 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 236)+ (parent 139)+ (seen 141)+ (seen-ops+ (141 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation generalization deleted (2 0))+ (strand-map 0 1 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 237)+ (parent 140)+ (seen 142)+ (seen-ops+ (142 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" x1 y3 (pubk a)) (enc "okay" y3 y3 (pubk a))+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))+ (label 238)+ (parent 143)+ (seen 95)+ (seen-ops+ (95 (operation generalization deleted (3 0)) (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))+ (label 239)+ (parent 145)+ (seen 183 243)+ (seen-ops+ (183+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 2))+ (243+ (operation nonce-test (contracted (x3 x1) (a-0 a) (y3-0 x1)) x1+ (1 0) (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 2)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0))))+ (comment "3 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+ (label 240)+ (parent 145)+ (seen 178)+ (seen-ops+ (178 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+ (label 241)+ (parent 146)+ (seen 102)+ (seen-ops+ (102 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" x1 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))+ (label 242)+ (parent 148)+ (seen 182)+ (seen-ops+ (182 (operation generalization deleted (3 0))+ (strand-map 0 1 2 4 5)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x3 x1) (a-0 a) (y3-0 x1)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 243)+ (parent 148)+ (seen 233)+ (seen-ops+ (233 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x1) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 244)+ (parent 151)+ (seen 243)+ (seen-ops+ (243+ (operation nonce-test (contracted (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+ (enc x3 x3 (pubk a))) (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x3) (x3-0 x3) (a-0 a-0))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 245)+ (parent 152)+ (seen 187)+ (seen-ops+ (187 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 246)+ (parent 152)+ (seen 184 244 314)+ (seen-ops+ (184+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5 2))+ (244+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 4 2))+ (314+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 247)+ (parent 154)+ (seen 181)+ (seen-ops+ (181 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 248)+ (parent 154)+ (seen 180 186 234)+ (seen-ops+ (180+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 2))+ (186+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 2))+ (234+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 249)+ (parent 155)+ (seen 183 244 314)+ (seen-ops+ (183+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 2 5))+ (244+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 2 4))+ (314+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 250)+ (parent 155)+ (seen 185)+ (seen-ops+ (185 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 4)+ (traces+ ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+ (label 251)+ (parent 155)+ (seen 186 234)+ (seen-ops+ (186+ (operation nonce-test (displaced 5 2 resp 2) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a))) (strand-map 0 1 2 3 2))+ (234+ (operation nonce-test (contracted (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a))) (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x3) (x3-0 x3) (a-0 a-0))))+ (comment "2 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 252)+ (parent 156)+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 253)+ (parent 158)+ (seen 254)+ (seen-ops+ (254 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation generalization deleted (2 0))+ (strand-map 0 1 3)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 254)+ (parent 159)+ (seen 135)+ (seen-ops+ (135 (operation generalization weakened ((2 1) (1 0)))+ (strand-map 0 1 2)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 255)+ (parent 160)+ (seen 253)+ (seen-ops+ (253 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 256)+ (parent 161)+ (seen 252)+ (seen-ops+ (252 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc "okay" x1 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 257)+ (parent 166)+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc "okay" x1 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 258)+ (parent 166)+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" x1-0 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 259)+ (parent 166)+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 260)+ (parent 167)+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 261)+ (parent 167)+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc "okay" x1 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 262)+ (parent 170)+ (seen 258)+ (seen-ops+ (258 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc "okay" x1 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 263)+ (parent 170)+ (seen 257)+ (seen-ops+ (257 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" x1-0 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 264)+ (parent 170)+ (seen 221 259)+ (seen-ops+ (221+ (operation nonce-test (displaced 7 2 resp 2) x1-0 (1 0)+ (enc "okay" x1-0 x1-0 (pubk a)) (enc "okay" y3-0 x1-0 (pubk a))+ (enc x1-0 x1-0 (pubk a))) (strand-map 0 1 2 3 2 4 4))+ (259+ (operation nonce-test (displaced 7 2 resp 2) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" x1-0 x3 (pubk a))+ (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1-0 x3 (pubk a))) (strand-map 0 1 2 3 2 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0))))+ (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 265)+ (parent 173)+ (seen 260)+ (seen-ops+ (260 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))+ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 266)+ (parent 173)+ (seen 261)+ (seen-ops+ (261 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 2)+ (traces+ ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+ (label 267)+ (parent 175)+ (seen 224 244 251)+ (seen-ops+ (224+ (operation nonce-test (contracted (a-0 a)) x3 (1 0)+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a)))+ (strand-map 0 1 2 3 4))+ (244+ (operation nonce-test (displaced 5 4 resp 2) x3 (1 0)+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a)))+ (strand-map 0 1 2 3 4))+ (251+ (operation nonce-test (displaced 5 3 resp 2) x3 (1 0)+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a)))+ (strand-map 0 1 2 3 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x3) (x3-0 x3) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 268)+ (parent 175)+ (seen 152 299 314 331)+ (seen-ops+ (152+ (operation nonce-test (displaced 7 4 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 4 5))+ (299+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6))+ (314+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 4 5))+ (331+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 2 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "6 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 269)+ (parent 175)+ (seen 205)+ (seen-ops+ (205 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (0 1))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 270)+ (parent 175)+ (seen 154 234 251 301)+ (seen-ops+ (154+ (operation nonce-test (displaced 6 4 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 4))+ (234+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 4))+ (251+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 2))+ (301+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "6 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))+ (label 271)+ (parent 175)+ (seen 155 207 224 251 267 333 335)+ (seen-ops+ (155+ (operation nonce-test (displaced 7 4 resp 2) x1 (1 0)+ (enc "okay" y3-2 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 4 5))+ (207+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 2))+ (224+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 4 4))+ (251+ (operation nonce-test (displaced 7 3 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2 4 4))+ (267+ (operation nonce-test (displaced 7 4 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 4 4))+ (333+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6))+ (335+ (operation nonce-test (displaced 7 3 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "9 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (0 1)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 272)+ (parent 176)+ (seen 208)+ (seen-ops+ (208 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (0 1))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 273)+ (parent 176)+ (seen 209 234 248 251 335)+ (seen-ops+ (209+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 2))+ (234+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 4))+ (248+ (operation nonce-test (displaced 6 4 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5))+ (251+ (operation nonce-test (displaced 6 4 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 4))+ (335+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "6 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 274)+ (parent 177)+ (seen 210 249 314 331 336)+ (seen-ops+ (210+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 2 5))+ (249+ (operation nonce-test (displaced 7 4 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6))+ (314+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 4 5))+ (331+ (operation nonce-test (displaced 7 4 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 4 5))+ (336+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "6 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 275)+ (parent 177)+ (seen 211)+ (seen-ops+ (211 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" x1 y3 (pubk a)) (enc "okay" y3 y3 (pubk a))+ (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))+ (label 276)+ (parent 179)+ (seen 238)+ (seen-ops+ (238 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 277)+ (parent 180)+ (seen 181)+ (seen-ops+ (181 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 278)+ (parent 183)+ (seen 277)+ (seen-ops+ (277 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 279)+ (parent 184)+ (seen 315)+ (seen-ops+ (315 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" x1 x3 (pubk a))+ (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 280)+ (parent 190)+ (seen 140)+ (seen-ops+ (140 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" x1 x3 (pubk a))+ (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 281)+ (parent 190)+ (seen 139)+ (seen-ops+ (139 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 282)+ (parent 193)+ (seen 212)+ (seen-ops+ (212 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 283)+ (parent 193)+ (seen 196 234 251 307)+ (seen-ops+ (196+ (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 3))+ (234+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 2 3 4))+ (251+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 2))+ (307+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "6 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 284)+ (parent 193)+ (seen 214 234 251 291 341)+ (seen-ops+ (214+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 2))+ (234+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 2 3 4))+ (251+ (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 3))+ (291+ (operation nonce-test (displaced 6 3 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5))+ (341+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "6 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 285)+ (parent 194)+ (seen 199 310 314 331)+ (seen-ops+ (199+ (operation nonce-test (displaced 7 3 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 3 5))+ (310+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6))+ (314+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 2 3 4 5))+ (331+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 2 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "6 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 286)+ (parent 194)+ (seen 216)+ (seen-ops+ (216 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))+ (label 287)+ (parent 194)+ (seen 201 217 224 251 267 341 344)+ (seen-ops+ (201+ (operation nonce-test (displaced 7 3 resp 2) x1 (1 0)+ (enc "okay" y3-2 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 3 5))+ (217+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 2))+ (224+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 2 3 4 4))+ (251+ (operation nonce-test (displaced 7 4 resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 2 3 4 4))+ (267+ (operation nonce-test (displaced 7 3 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 3 3))+ (341+ (operation nonce-test (displaced 7 4 resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6))+ (344+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "9 in cohort - 2 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 288)+ (parent 195)+ (seen 218 295 314 331 345)+ (seen-ops+ (218+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 2 5))+ (295+ (operation nonce-test (displaced 7 3 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6))+ (314+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 2 3 4 5))+ (331+ (operation nonce-test (displaced 7 3 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 3 5))+ (345+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "6 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 289)+ (parent 195)+ (seen 219)+ (seen-ops+ (219 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a)))))+ (label 290)+ (parent 196)+ (seen 225)+ (seen-ops+ (225 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 y3-2 text) (a a-0 name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (added-strand resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a-0)))+ (send (enc "okay" x3 y3-0 (pubk a-0))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-2 y3-0 (pubk a)))))+ (label 291)+ (parent 196)+ (seen 186 226 234)+ (seen-ops+ (186+ (operation nonce-test (displaced 6 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 2 2))+ (226+ (operation nonce-test (displaced 6 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 4 2))+ (234+ (operation nonce-test (contracted (x3 y3-0) (a-0 a)) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4 4)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a)))))+ (label 292)+ (parent 198)+ (seen 227)+ (seen-ops+ (227 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a)))))+ (label 293)+ (parent 199)+ (seen 228)+ (seen-ops+ (228 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 y3-2 text) (a a-0 name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (added-strand resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a-0)))+ (send (enc "okay" x3 y3-0 (pubk a-0))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-2 y3-0 (pubk a)))))+ (label 294)+ (parent 199)+ (seen 229 244 314)+ (seen-ops+ (229+ (operation nonce-test (displaced 7 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 4 5 2))+ (244+ (operation nonce-test (displaced 7 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 2 4 2))+ (314+ (operation nonce-test (contracted (x3 y3-0) (a-0 a)) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4 5 4)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 y3-2 text) (a a-0 name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-2) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (added-strand resp 2) y3-0 (1 0)+ (enc "okay" y3-1 y3-0 (pubk a)) (enc "okay" y3-2 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a-0)))+ (send (enc "okay" x3 y3-0 (pubk a-0))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-2 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a)))))+ (label 295)+ (parent 201)+ (seen 231 244 314)+ (seen-ops+ (231+ (operation nonce-test (displaced 7 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 4 2 5))+ (244+ (operation nonce-test (displaced 7 2 resp 2) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a))) (strand-map 0 1 2 3 2 2 4))+ (314+ (operation nonce-test (contracted (x3 y3-0) (a-0 a)) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4 4 5)))+ (unrealized (1 0))+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 y3-2 text) (a name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)+ (enc "okay" y3-1 y3-0 (pubk a)) (enc "okay" y3-2 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-2 y3-0 (pubk a)))))+ (label 296)+ (parent 201)+ (seen 230)+ (seen-ops+ (230 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a)))))+ (label 297)+ (parent 202)+ (seen 232)+ (seen-ops+ (232 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 298)+ (parent 204)+ (seen 306)+ (seen-ops+ (306 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 y3-2 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-2 y3 (pubk a)))))+ (label 299)+ (parent 204)+ (seen 184 244 314)+ (seen-ops+ (184+ (operation nonce-test (displaced 7 3 resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-2 y3 (pubk a))+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 3 4 5))+ (244+ (operation nonce-test (displaced 7 3 resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc "okay" y3-2 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 3 4 3))+ (314+ (operation nonce-test (contracted (x3 y3) (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc "okay" y3-2 y3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 5 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+ (label 300)+ (parent 206)+ (seen 181)+ (seen-ops+ (181 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 y3-2 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-2 y3 (pubk a)))))+ (label 301)+ (parent 206)+ (seen 180 186 234)+ (seen-ops+ (180+ (operation nonce-test (displaced 6 3 resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-2 y3 (pubk a))+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 3 4))+ (186+ (operation nonce-test (displaced 6 3 resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc "okay" y3-2 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 3 3))+ (234+ (operation nonce-test (contracted (x3 y3) (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc "okay" y3-2 y3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 y3-2 text) (a a-0 name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-2) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (added-strand resp 2) y3 (1 0)+ (enc "okay" y3-1 y3 (pubk a)) (enc "okay" y3-2 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-2 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 302)+ (parent 207)+ (seen 183 244 314)+ (seen-ops+ (183+ (operation nonce-test (displaced 7 3 resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-2 y3 (pubk a))+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 3 4 5))+ (244+ (operation nonce-test (displaced 7 3 resp 2) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc "okay" y3-2 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a))) (strand-map 0 1 2 3 3 3 4))+ (314+ (operation nonce-test (contracted (x3 y3) (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc "okay" y3-2 y3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 y3-2 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3-1 y3 (pubk a)) (enc "okay" y3-2 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-2 y3 (pubk a)))))+ (label 303)+ (parent 207)+ (seen 185)+ (seen-ops+ (185 (operation generalization deleted (3 0))+ (strand-map 0 1 2 4 5)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+ (label 304)+ (parent 209)+ (seen 253)+ (seen-ops+ (253 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 305)+ (parent 210)+ (seen 304)+ (seen-ops+ (304 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 306)+ (parent 213)+ (seen 225)+ (seen-ops+ (225 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 307)+ (parent 213)+ (seen 186 226 234)+ (seen-ops+ (186+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 2))+ (226+ (operation nonce-test (displaced 6 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 4))+ (234+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+ (label 308)+ (parent 214)+ (seen 227)+ (seen-ops+ (227 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 309)+ (parent 215)+ (seen 228)+ (seen-ops+ (228 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 310)+ (parent 215)+ (seen 229 244 314)+ (seen-ops+ (229+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 4 5))+ (244+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 4 2))+ (314+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 311)+ (parent 217)+ (seen 231 244 314)+ (seen-ops+ (231+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 4 5))+ (244+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 2 2 4))+ (314+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" y3-0 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 312)+ (parent 217)+ (seen 230)+ (seen-ops+ (230 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 313)+ (parent 218)+ (seen 232)+ (seen-ops+ (232 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 314)+ (parent 223)+ (seen 243)+ (seen-ops+ (243 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x1) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+ (label 315)+ (parent 226)+ (seen 227)+ (seen-ops+ (227 (operation generalization deleted (3 0)) (strand-map 0 1 2 4)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+ (label 316)+ (parent 229)+ (seen 315)+ (seen-ops+ (315 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+ (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 317)+ (parent 231)+ (seen 277)+ (seen-ops+ (277 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" x1 y3 (pubk a)) (enc "okay" y3 y3 (pubk a))+ (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))+ (enc y3 x3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x1 y3 (pubk a)))))+ (label 318)+ (parent 239)+ (seen 276)+ (seen-ops+ (276 (operation generalization deleted (3 0))+ (strand-map 0 1 2 4 5)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 319)+ (parent 246)+ (seen 279)+ (seen-ops+ (279 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 320)+ (parent 248)+ (seen 277)+ (seen-ops+ (277 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 321)+ (parent 249)+ (seen 278)+ (seen-ops+ (278 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation generalization deleted (2 0))+ (strand-map 0 1 3 4)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 322)+ (parent 252)+ (seen 254)+ (seen-ops+ (254 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation generalization deleted (2 0))+ (strand-map 0 1 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 323)+ (parent 257)+ (seen 137)+ (seen-ops+ (137 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation generalization deleted (2 0))+ (strand-map 0 1 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a)))))+ (label 324)+ (parent 258)+ (seen 138)+ (seen-ops+ (138 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" x1 x3 (pubk a))+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 325)+ (parent 259)+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" x1 x3 (pubk a))+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 326)+ (parent 259)+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation generalization deleted (2 0))+ (strand-map 0 1 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 327)+ (parent 260)+ (seen 142)+ (seen-ops+ (142 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation generalization deleted (2 0))+ (strand-map 0 1 3 4)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 328)+ (parent 261)+ (seen 141)+ (seen-ops+ (141 (operation generalization deleted (2 0)) (strand-map 0 1 3)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" x1 x3 (pubk a))+ (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 329)+ (parent 264)+ (seen 326)+ (seen-ops+ (326 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" x1 x3 (pubk a))+ (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+ (enc x1 x3 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 330)+ (parent 264)+ (seen 325)+ (seen-ops+ (325 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 text) (a a-0 name))+ (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (0 1))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation nonce-test (added-strand resp 2) x3 (1 0)+ (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a)))+ (strand-map 0 1 2 3 4)+ (traces+ ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 331)+ (parent 267)+ (seen 314)+ (seen-ops+ (314+ (operation nonce-test (contracted (a-0 a)) x3 (1 0)+ (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+ (enc x3 x3 (pubk a))) (strand-map 0 1 2 3 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x3) (x3-0 x3) (a-0 a-0))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 332)+ (parent 268)+ (seen 298)+ (seen-ops+ (298 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((0 0) (7 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0))+ ((7 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))+ (label 333)+ (parent 268)+ (seen 246 299 314 331)+ (seen-ops+ (246+ (operation nonce-test (displaced 8 4 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 4 5 6))+ (299+ (operation nonce-test (displaced 8 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5 6 2))+ (314+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2 4 5 4))+ (331+ (operation nonce-test (displaced 8 4 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 4 5 4)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "5 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (0 1))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 334)+ (parent 270)+ (seen 300)+ (seen-ops+ (300 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0))+ ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))+ (label 335)+ (parent 270)+ (seen 234 248 251 301)+ (seen-ops+ (234+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2 4 4))+ (248+ (operation nonce-test (displaced 7 4 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 4 5))+ (251+ (operation nonce-test (displaced 7 4 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 4 4))+ (301+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5 2)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "5 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((0 0) (7 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0))+ ((7 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 336)+ (parent 271)+ (seen 249 302 314 331)+ (seen-ops+ (249+ (operation nonce-test (displaced 8 4 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 4 5 6))+ (302+ (operation nonce-test (displaced 8 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5 2 6))+ (314+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 2 4 4 5))+ (331+ (operation nonce-test (displaced 8 4 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 4 4 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "5 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))+ (label 337)+ (parent 271)+ (seen 303)+ (seen-ops+ (303 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (0 1))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 338)+ (parent 273)+ (seen 304)+ (seen-ops+ (304 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 339)+ (parent 274)+ (seen 305)+ (seen-ops+ (305 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 340)+ (parent 283)+ (seen 306)+ (seen-ops+ (306 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))+ (label 341)+ (parent 283)+ (seen 234 251 291 307)+ (seen-ops+ (234+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 2 3 4 4))+ (251+ (operation nonce-test (displaced 7 3 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 3 3))+ (291+ (operation nonce-test (displaced 7 3 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 3 5))+ (307+ (operation nonce-test (displaced 7 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5 2)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "5 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 342)+ (parent 284)+ (seen 308)+ (seen-ops+ (308 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 343)+ (parent 285)+ (seen 309)+ (seen-ops+ (309 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((0 0) (7 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0))+ ((7 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))+ (label 344)+ (parent 285)+ (seen 294 310 314 331)+ (seen-ops+ (294+ (operation nonce-test (displaced 8 3 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 3 5 6))+ (310+ (operation nonce-test (displaced 8 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5 6 2))+ (314+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 2 3 4 5 4))+ (331+ (operation nonce-test (displaced 8 3 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 3 5 3)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "5 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a a-0 name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((0 0) (7 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0))+ ((7 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (added-strand resp 2) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 345)+ (parent 287)+ (seen 295 311 314 331)+ (seen-ops+ (295+ (operation nonce-test (displaced 8 3 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 3 5 6))+ (311+ (operation nonce-test (displaced 8 2 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 5 2 6))+ (314+ (operation nonce-test (contracted (x3 x1) (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 2 3 4 4 5))+ (331+ (operation nonce-test (displaced 8 3 resp 2) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a))) (strand-map 0 1 2 3 4 3 3 5)))+ (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a-0))))+ (comment "5 in cohort - 1 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" y3-1 x1 (pubk a)) (enc "okay" y3-2 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))+ (label 346)+ (parent 287)+ (seen 312)+ (seen-ops+ (312 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 347)+ (parent 288)+ (seen 313)+ (seen-ops+ (313 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 y3-2 text) (a name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-2 y3-0 (pubk a)))))+ (label 348)+ (parent 291)+ (seen 315)+ (seen-ops+ (315 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 y3-2 text) (a name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-2 y3-0 (pubk a)))))+ (label 349)+ (parent 294)+ (seen 316)+ (seen-ops+ (316 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 y3-2 text) (a name))+ (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-2) (a a))+ (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3-0)+ (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)+ (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+ (enc "okay" y3-2 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+ (enc y3-0 y3-0 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+ (recv (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" y3 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a))))+ ((recv (enc y3-0 y3-0 (pubk a)))+ (send (enc "okay" y3-1 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-2 y3-0 (pubk a))))+ ((recv (enc y3-0 x3 (pubk a)))+ (send (enc "okay" y3-0 y3-0 (pubk a)))))+ (label 350)+ (parent 295)+ (seen 317)+ (seen-ops+ (317 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps+ ((0 1) ((x1 y3-0) (x3 x3) (a a) (x1-0 y3-0) (x3-0 y3-0) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 y3-2 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc "okay" y3-2 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-2 y3 (pubk a)))))+ (label 351)+ (parent 299)+ (seen 354)+ (seen-ops+ (354 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 y3-2 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc "okay" y3-2 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-2 y3 (pubk a)))))+ (label 352)+ (parent 301)+ (seen 277)+ (seen-ops+ (277 (operation generalization deleted (3 0))+ (strand-map 0 1 2 4 5)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 y3 y3-0 y3-1 y3-2 text) (a name))+ (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-2) (a a))+ (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig y3)+ (operation nonce-test (contracted (a-0 a)) y3 (1 0)+ (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+ (enc "okay" y3-2 y3 (pubk a)) (enc y3 x3 (pubk a))+ (enc y3 y3 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+ (recv (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+ ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-2 y3 (pubk a))))+ ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+ (label 353)+ (parent 302)+ (seen 352)+ (seen-ops+ (352 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+ ((5 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 354)+ (parent 307)+ (seen 315)+ (seen-ops+ (315 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a)))))+ (label 355)+ (parent 310)+ (seen 316)+ (seen-ops+ (316 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+ (enc "okay" y3-1 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 356)+ (parent 311)+ (seen 317)+ (seen-ops+ (317 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 357)+ (parent 325)+ (seen 236)+ (seen-ops+ (236 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+ ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x3)+ (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5)+ (traces+ ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+ (recv (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x1 x3 (pubk a))))+ ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+ (label 358)+ (parent 326)+ (seen 237)+ (seen-ops+ (237 (operation generalization deleted (2 0)) (strand-map 0 1 3 4)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((0 0) (7 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0))+ ((7 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))+ (label 359)+ (parent 333)+ (seen 351)+ (seen-ops+ (351 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6 7)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0))+ ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))+ (label 360)+ (parent 335)+ (seen 352)+ (seen-ops+ (352 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((0 0) (7 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0))+ ((7 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 361)+ (parent 336)+ (seen 353)+ (seen-ops+ (353 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6 7)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (0 1))+ ((4 1) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))+ (label 362)+ (parent 341)+ (seen 354)+ (seen-ops+ (354 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((0 0) (7 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0))+ ((7 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a)))))+ (label 363)+ (parent 344)+ (seen 355)+ (seen-ops+ (355 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6 7)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a))))+ (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+ (vars (x3 x1 y3 y3-0 y3-1 y3-2 text) (a name))+ (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-1) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-2) (a a))+ (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+ (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+ ((0 0) (6 0)) ((0 0) (7 0)) ((1 1) (0 1)) ((2 1) (0 1))+ ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (1 0)) ((6 1) (1 0))+ ((7 1) (1 0)))+ (non-orig (privk a))+ (uniq-orig x1)+ (operation nonce-test (contracted (a-0 a)) x1 (1 0)+ (enc "okay" x1 x1 (pubk a)) (enc "okay" y3-1 x1 (pubk a))+ (enc "okay" y3-2 x1 (pubk a)) (enc x1 x3 (pubk a))+ (enc x1 x1 (pubk a)))+ (strand-map 0 1 2 3 4 5 6 7)+ (traces+ ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+ (recv (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+ ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-1 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-2 x1 (pubk a))))+ ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+ (label 364)+ (parent 345)+ (seen 356)+ (seen-ops+ (356 (operation generalization deleted (2 0))+ (strand-map 0 1 3 4 5 6 7)))+ (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x1) (a-0 a)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
tst/wonthull3.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/wonthull3.scm") (defprotocol wonthull3 basic@@ -31,6 +31,7 @@ (recv (enc "okay" x3 x4 (pubk a))))) (label 0) (unrealized (0 2))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x3) (x4 x4)))) (origs (x3 (0 0))) (comment "2 in cohort - 2 not yet seen")) @@ -49,6 +50,7 @@ (label 1) (parent 0) (unrealized (0 2))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x2) (x4 x4)))) (origs (x2 (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -70,6 +72,7 @@ (label 2) (parent 0) (unrealized (0 2) (1 0))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x3) (x4 x4)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton wonthull3@@ -90,6 +93,7 @@ (label 3) (parent 1) (unrealized (0 2) (1 0))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x2) (x4 x4)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton wonthull3@@ -116,6 +120,7 @@ (enc x3 (pubk a)) (enc "okay" y3 x3 (pubk a)) (enc x3 x2 (pubk a))) (strand-map 0 1))) (unrealized (0 2))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x3) (x4 x4)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton wonthull3@@ -136,6 +141,7 @@ (label 5) (parent 3) (unrealized (0 2))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x2) (x4 x4)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wonthull3@@ -185,6 +191,7 @@ (operation nonce-test (displaced 3 0 init 2) x3 (2 0) (enc x3 (pubk a))) (strand-map 0 1 1))) (unrealized (0 2) (2 0))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x3) (x4 x4)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -209,6 +216,7 @@ (seen-ops (6 (operation generalization separated y3-0) (strand-map 0 1))) (realized)+ (maps ((0) ((a a) (x1 x1) (x2 y3) (x3 y3) (x4 y3)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -237,6 +245,7 @@ (operation nonce-test (displaced 3 0 init 2) x2 (2 0) (enc x2 (pubk a))) (strand-map 0 1 1))) (unrealized (0 2) (2 0))+ (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 x2) (x4 x4)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")@@ -275,6 +284,8 @@ (send (enc "okay" x3 x1 (pubk a-0))))) (label 10) (unrealized (0 2))+ (maps+ ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3-0) (a-0 a-0)))) (origs (x3-0 (0 0))) (comment "3 in cohort - 3 not yet seen")) @@ -297,6 +308,7 @@ (label 11) (parent 10) (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0)))) (origs (x3 (0 0))) (comment "3 in cohort - 3 not yet seen")) @@ -324,6 +336,7 @@ (enc x1-0 (pubk a)) (enc "okay" x3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))) (strand-map 0 1))) (unrealized (0 2))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x1) (a-0 a)))) (origs (x1 (0 0))) (comment "2 in cohort - 1 not yet seen")) @@ -348,6 +361,8 @@ (label 13) (parent 10) (unrealized (0 2) (2 0))+ (maps+ ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3-0) (a-0 a-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton wonthull3@@ -414,6 +429,7 @@ (label 16) (parent 11) (unrealized (1 0) (2 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton wonthull3@@ -436,6 +452,7 @@ (label 17) (parent 12) (unrealized (0 2) (2 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x1) (a-0 a)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton wonthull3@@ -465,6 +482,8 @@ (enc x3-0 (pubk a-0)) (enc "okay" y3 x3-0 (pubk a-0)) (enc x3-0 x3 (pubk a-0))) (strand-map 0 1 2))) (unrealized (0 2))+ (maps+ ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3-0) (a-0 a-0)))) (comment "4 in cohort - 3 not yet seen")) (defskeleton wonthull3@@ -487,6 +506,7 @@ (label 19) (parent 16) (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton wonthull3@@ -509,6 +529,7 @@ (label 20) (parent 17) (unrealized (0 2))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x1) (a-0 a)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton wonthull3@@ -542,6 +563,7 @@ (enc x3 (pubk a)) (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a))) (strand-map 0 1 2))) (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0)))) (comment "4 in cohort - 2 not yet seen")) (defskeleton wonthull3@@ -569,6 +591,7 @@ (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a)) (enc y3 x3 (pubk a))) (strand-map 0 1 2))) (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0)))) (comment "4 in cohort - 3 not yet seen")) (defskeleton wonthull3@@ -601,6 +624,8 @@ (operation nonce-test (displaced 4 0 init 2) x3-0 (3 0) (enc x3-0 (pubk a))) (strand-map 0 1 2 2))) (unrealized (0 2) (3 0))+ (maps+ ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3-0) (a-0 a-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -627,6 +652,7 @@ (seen-ops (14 (operation generalization deleted (2 0)) (strand-map 0 1))) (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -653,6 +679,7 @@ (seen-ops (15 (operation generalization deleted (2 0)) (strand-map 0 1))) (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -684,6 +711,7 @@ (operation nonce-test (displaced 4 0 init 2) x3 (3 0) (enc x3 (pubk a))) (strand-map 0 1 2 2))) (unrealized (1 0) (3 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -710,6 +738,7 @@ (seen-ops (14 (operation generalization deleted (2 0)) (strand-map 0 1))) (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -766,6 +795,7 @@ (operation nonce-test (displaced 4 0 init 2) x1 (3 0) (enc x1 (pubk a))) (strand-map 0 1 2 2))) (unrealized (0 2) (3 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x1) (a-0 a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -791,6 +821,7 @@ (seen-ops (15 (operation generalization deleted (2 0)) (strand-map 0 1))) (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -816,6 +847,7 @@ (label 31) (parent 21) (unrealized (1 0) (3 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton wonthull3@@ -838,6 +870,7 @@ (label 32) (parent 22) (unrealized (1 0))+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a-0)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton wonthull3@@ -866,6 +899,7 @@ (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))) (strand-map 0 1 2))) (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton wonthull3@@ -891,6 +925,7 @@ (label 34) (parent 22) (unrealized (1 0) (3 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton wonthull3@@ -923,6 +958,7 @@ (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a))) (strand-map 0 1 2 2))) (unrealized (1 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0)))) (comment "4 in cohort - 3 not yet seen")) (defskeleton wonthull3@@ -948,6 +984,7 @@ (seen-ops (14 (operation generalization deleted (2 0)) (strand-map 0 1))) (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -970,6 +1007,7 @@ (label 37) (parent 32) (unrealized (1 0))+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wonthull3@@ -995,6 +1033,7 @@ (label 38) (parent 32) (unrealized (1 0) (3 0))+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton wonthull3@@ -1021,6 +1060,7 @@ (28 (operation generalization weakened ((2 1) (1 0))) (strand-map 0 1 2))) (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -1046,6 +1086,7 @@ (label 40) (parent 33) (unrealized (1 0) (3 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton wonthull3@@ -1081,6 +1122,7 @@ (enc y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))) (strand-map 0 1 2 3))) (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0)))) (comment "4 in cohort - 2 not yet seen")) (defskeleton wonthull3@@ -1110,6 +1152,7 @@ (seen-ops (25 (operation generalization deleted (2 0)) (strand-map 0 1 3))) (realized)+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -1139,6 +1182,7 @@ (seen-ops (24 (operation generalization deleted (2 0)) (strand-map 0 1 3))) (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -1172,6 +1216,7 @@ (operation nonce-test (displaced 5 0 init 2) x3 (4 0) (enc x3 (pubk a))) (strand-map 0 1 2 3 3))) (unrealized (1 0) (4 0))+ (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1-0) (x3-0 x3) (a-0 a-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -1198,6 +1243,7 @@ (seen-ops (14 (operation generalization deleted (2 0)) (strand-map 0 1))) (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -1224,6 +1270,7 @@ (label 46) (parent 37) (unrealized (1 0) (3 0))+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a-0)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton wonthull3@@ -1256,6 +1303,7 @@ (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a))) (strand-map 0 1 2 3))) (unrealized (1 0))+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a-0)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton wonthull3@@ -1288,6 +1336,7 @@ (enc "okay" y3 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))) (strand-map 0 1 2 2))) (unrealized (1 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton wonthull3@@ -1316,6 +1365,7 @@ (seen-ops (28 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -1348,6 +1398,7 @@ (operation nonce-test (displaced 5 0 init 2) y3 (4 0) (enc y3 (pubk a))) (strand-map 0 1 2 3 3))) (unrealized (1 0) (4 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -1373,6 +1424,7 @@ (label 51) (parent 46) (unrealized (1 0))+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a-0)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton wonthull3@@ -1402,6 +1454,7 @@ (seen-ops (24 (operation generalization deleted (2 0)) (strand-map 0 1 3))) (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -1435,6 +1488,7 @@ (operation nonce-test (displaced 5 0 init 2) x3 (4 0) (enc x3 (pubk a))) (strand-map 0 1 2 3 3))) (unrealized (1 0) (4 0))+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -1464,6 +1518,7 @@ (seen-ops (39 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -1497,6 +1552,7 @@ (operation nonce-test (displaced 5 0 init 2) y3 (4 0) (enc y3 (pubk a))) (strand-map 0 1 2 3 3))) (unrealized (1 0) (4 0))+ (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a-0)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -1526,6 +1582,7 @@ (seen-ops (24 (operation generalization deleted (2 0)) (strand-map 0 1 3))) (realized)+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton wonthull3@@ -1559,6 +1616,7 @@ (operation nonce-test (displaced 5 0 init 2) x3 (4 0) (enc x3 (pubk a))) (strand-map 0 1 2 3 3))) (unrealized (1 0) (4 0))+ (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a-0)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")
tst/woolam.tst view
@@ -1,6 +1,6 @@ (herald "Woo-Lam Protocol") -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/woolam.scm") (defprotocol woolam basic@@ -37,6 +37,7 @@ (recv (enc a n (ltk b s))))) (label 0) (unrealized (0 2) (0 4))+ (maps ((0) ((a a) (s s) (b b) (n n)))) (origs (n (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -58,6 +59,7 @@ (label 1) (parent 0) (unrealized (0 4))+ (maps ((0) ((a a) (s s) (b b) (n n)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton woolam@@ -81,6 +83,7 @@ (label 2) (parent 1) (unrealized (2 0))+ (maps ((0) ((a a) (s s) (b b) (n n)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton woolam@@ -142,6 +145,7 @@ (recv (enc n (ltk b s))))) (label 4) (unrealized (0 4))+ (maps ((0) ((a a) (s s) (b b) (n n) (m m)))) (origs (n (0 1))) (comment "2 in cohort - 2 not yet seen")) @@ -184,6 +188,7 @@ (label 6) (parent 4) (unrealized (1 0))+ (maps ((0) ((a a) (s s) (b b) (n n) (m m)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton woolam-msg@@ -205,6 +210,7 @@ (label 7) (parent 6) (unrealized (0 2))+ (maps ((0) ((a a) (s s) (b b) (n n) (m (enc n (ltk a s)))))) (comment "2 in cohort - 2 not yet seen")) (defskeleton woolam-msg@@ -279,6 +285,7 @@ (label 10) (parent 7) (unrealized (2 0))+ (maps ((0) ((a a) (s s) (b b) (n n) (m (enc n (ltk a s)))))) (comment "1 in cohort - 1 not yet seen")) (defskeleton woolam-msg@@ -345,6 +352,7 @@ (recv (enc a n (ltk b s))))) (label 12) (unrealized (0 4))+ (maps ((0) ((a a) (s s) (b b) (n n) (m m)))) (origs (n (0 1))) (comment "3 in cohort - 3 not yet seen")) @@ -406,6 +414,7 @@ (label 15) (parent 12) (unrealized (1 0))+ (maps ((0) ((a a) (s s) (b b) (n n) (m m)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton woolam-msg1@@ -427,6 +436,7 @@ (label 16) (parent 15) (unrealized (0 2))+ (maps ((0) ((a a) (s s) (b b) (n n) (m (enc n (ltk a s)))))) (comment "2 in cohort - 2 not yet seen")) (defskeleton woolam-msg1@@ -450,6 +460,7 @@ (label 17) (parent 15) (unrealized (2 2))+ (maps ((0) ((a a) (s s) (b b) (n n) (m m)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton woolam-msg1
tst/yahalom-6.3.6.tst view
@@ -5,7 +5,7 @@ (url "http://www.eecs.umich.edu/acal/swerve/docs/49-1.pdf") (bound 15)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/yahalom-6.3.6.scm") (comment "Strand count bounded at 15") @@ -44,6 +44,7 @@ (send (cat blob (enc n-b k))))) (label 0) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k) (blob blob)))) (origs (n-a (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -66,6 +67,7 @@ (label 1) (parent 0) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k) (blob blob)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -130,6 +132,7 @@ (recv (cat (enc a k (ltk b s)) (enc n-b k)))) ((recv k) (send k))) (label 3) (unrealized (0 2))+ (maps ((0 1) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (origs (n-b (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -152,6 +155,7 @@ (label 4) (parent 3) (unrealized (0 2) (1 0) (2 0))+ (maps ((0 1) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -174,6 +178,7 @@ (parent 4) (unrealized (0 2) (1 0)) (dead)+ (maps ((0 1) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -198,6 +203,7 @@ (parent 4) (unrealized (0 2) (1 0)) (dead)+ (maps ((0 1) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -236,6 +242,7 @@ (recv (cat (enc a k (ltk b s)) (enc n-b k))))) (label 7) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (origs (n-b (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -257,6 +264,7 @@ (label 8) (parent 7) (unrealized (0 2) (1 0))+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -277,6 +285,7 @@ (label 9) (parent 8) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -299,6 +308,7 @@ (label 10) (parent 8) (unrealized (0 2))+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -324,6 +334,7 @@ (label 11) (parent 9) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton yahalom@@ -346,6 +357,7 @@ (parent 9) (unrealized (0 2) (2 0)) (dead)+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -373,6 +385,7 @@ (label 13) (parent 10) (unrealized (3 1))+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -397,6 +410,7 @@ (parent 10) (unrealized (0 2) (3 0)) (dead)+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -454,6 +468,7 @@ (label 16) (parent 11) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -490,6 +505,7 @@ (enc a n-a n-b (ltk b s)) (enc b k n-a n-b (ltk a s)) (enc b k-0 n-a n-b (ltk a s))) (strand-map 0 1 2 3))) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -522,6 +538,7 @@ (label 18) (parent 13) (unrealized (3 1))+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -556,6 +573,7 @@ (label 19) (parent 16) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -589,6 +607,7 @@ (parent 16) (unrealized (4 0)) (dead)+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -621,6 +640,7 @@ (seen-ops (15 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton yahalom@@ -657,6 +677,7 @@ (label 22) (parent 17) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -694,6 +715,7 @@ (label 23) (parent 18) (unrealized (3 1))+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -733,6 +755,7 @@ (parent 19) (unrealized (5 0)) (dead)+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -773,6 +796,7 @@ (label 25) (parent 22) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -812,6 +836,7 @@ (parent 22) (unrealized (2 1) (5 0)) (dead)+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -853,6 +878,7 @@ (label 27) (parent 23) (unrealized (3 1))+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -893,6 +919,7 @@ (parent 23) (unrealized (3 1) (6 0)) (dead)+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -936,6 +963,7 @@ (parent 25) (unrealized (2 1) (6 0)) (dead)+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -981,6 +1009,7 @@ (parent 27) (unrealized (3 1) (7 0)) (dead)+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -1019,6 +1048,7 @@ (send (cat (enc b k n-a n-b (ltk a s)) (enc a k (ltk b s)))))) (label 31) (unrealized (0 0))+ (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k)))) (origs (k (0 1))) (comment "1 in cohort - 1 not yet seen"))
tst/yahalom-forward.tst view
@@ -1,6 +1,6 @@ (herald "Yahalom Protocol With Forwarding" (bound 15)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/yahalom-forward.scm") (comment "Strand count bounded at 15") @@ -38,6 +38,7 @@ (recv (enc n-b k)))) (label 0) (unrealized (0 2) (0 4))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (origs (n-b (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -61,6 +62,7 @@ (label 1) (parent 0) (unrealized (0 4) (1 0))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -83,6 +85,7 @@ (label 2) (parent 1) (unrealized (0 4))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -107,6 +110,7 @@ (label 3) (parent 1) (unrealized (0 4))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -132,6 +136,7 @@ (label 4) (parent 2) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton yahalom@@ -156,6 +161,7 @@ (parent 2) (unrealized (0 4) (2 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -184,6 +190,7 @@ (label 6) (parent 3) (unrealized (3 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -210,6 +217,7 @@ (parent 3) (unrealized (0 4) (3 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -274,6 +282,7 @@ (enc n-b k) (enc a n-a n-b (ltk b c)) (enc b k n-a n-b (ltk a c))) (strand-map 0 1 2 2))) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -310,6 +319,7 @@ (enc a n-a n-b (ltk b c)) (enc b k n-a n-b (ltk a c)) (enc b k-0 n-a n-b (ltk a c))) (strand-map 0 1 2 3))) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -342,6 +352,7 @@ (label 11) (parent 6) (unrealized (3 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -375,6 +386,7 @@ (label 12) (parent 9) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton yahalom@@ -407,6 +419,7 @@ (parent 9) (unrealized (4 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -440,6 +453,7 @@ (seen-ops (8 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton yahalom@@ -481,6 +495,7 @@ (enc b k n-a n-b (ltk a c)) (enc b k-0 n-a n-b (ltk a c))) (strand-map 0 1 2 3 4))) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "4 in cohort - 3 not yet seen")) (defskeleton yahalom@@ -516,6 +531,7 @@ (label 16) (parent 11) (unrealized (3 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -549,6 +565,7 @@ (label 17) (parent 12) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -586,6 +603,7 @@ (label 18) (parent 12) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "4 in cohort - 4 not yet seen")) (defskeleton yahalom@@ -624,6 +642,7 @@ (parent 12) (unrealized (5 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -660,6 +679,7 @@ (seen-ops (14 (operation generalization deleted (4 0)) (strand-map 0 1 2 3))) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton yahalom@@ -705,6 +725,7 @@ (enc b k n-a n-b (ltk a c)) (enc b k-0 n-a n-b (ltk a c)) (enc b k-1 n-a n-b (ltk a c))) (strand-map 0 1 2 3 4 5))) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -742,6 +763,7 @@ (parent 15) (unrealized (2 1) (5 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -781,6 +803,7 @@ (label 23) (parent 16) (unrealized (3 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -819,6 +842,7 @@ (parent 16) (unrealized (3 1) (6 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -850,6 +874,7 @@ (seen-ops (8 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton yahalom@@ -891,6 +916,7 @@ (label 26) (parent 18) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton yahalom@@ -927,6 +953,7 @@ (label 27) (parent 18) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -967,6 +994,7 @@ (parent 18) (unrealized (6 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -1007,6 +1035,7 @@ (parent 18) (unrealized (2 1) (6 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -1045,6 +1074,7 @@ (label 30) (parent 21) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -1086,6 +1116,7 @@ (parent 21) (unrealized (2 1) (6 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -1129,6 +1160,7 @@ (parent 23) (unrealized (3 1) (7 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -1170,6 +1202,7 @@ (label 33) (parent 26) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -1214,6 +1247,7 @@ (parent 26) (unrealized (7 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -1258,6 +1292,7 @@ (parent 26) (unrealized (2 1) (7 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -1292,6 +1327,7 @@ (seen-ops (25 (operation generalization deleted (4 0)) (strand-map 0 1 2 3))) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton yahalom@@ -1326,6 +1362,7 @@ (seen-ops (14 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton yahalom@@ -1361,6 +1398,7 @@ (label 38) (parent 33) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -1395,6 +1433,7 @@ (seen-ops (25 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (rest rest) (k k)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")@@ -1434,6 +1473,8 @@ (recv (enc n-b k))) ((recv k) (send k))) (label 40) (unrealized (0 2) (0 4))+ (maps+ ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a) (rest rest)))) (origs (n-b (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -1458,6 +1499,8 @@ (label 41) (parent 40) (unrealized (0 4) (1 0) (2 0))+ (maps+ ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a) (rest rest)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -1482,6 +1525,8 @@ (parent 41) (unrealized (0 4) (1 0)) (dead)+ (maps+ ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a) (rest rest)))) (comment "empty cohort")) (defskeleton yahalom@@ -1508,6 +1553,8 @@ (parent 41) (unrealized (0 4) (1 0)) (dead)+ (maps+ ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a) (rest rest)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -1544,6 +1591,7 @@ (send (enc n-b k)))) (label 44) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (c c) (n-a n-a) (n-b n-b) (k k)))) (origs (n-a (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -1565,6 +1613,7 @@ (label 45) (parent 44) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (c c) (n-a n-a) (n-b n-b) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom
tst/yahalom.tst view
@@ -1,6 +1,6 @@ (herald "Yahalom Protocol Without Forwarding" (bound 15)) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/yahalom.scm") (comment "Strand count bounded at 15") @@ -35,6 +35,7 @@ (recv (enc a k (ltk b c))) (recv (enc n-b k)))) (label 0) (unrealized (0 2) (0 3))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (origs (n-b (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -57,6 +58,7 @@ (label 1) (parent 0) (unrealized (0 3) (1 0))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -77,6 +79,7 @@ (label 2) (parent 1) (unrealized (0 3))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -99,6 +102,7 @@ (label 3) (parent 1) (unrealized (0 3))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -121,6 +125,7 @@ (label 4) (parent 2) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton yahalom@@ -142,6 +147,7 @@ (label 5) (parent 2) (unrealized (0 3) (2 0))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -168,6 +174,7 @@ (label 6) (parent 3) (unrealized (3 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -191,6 +198,7 @@ (label 7) (parent 3) (unrealized (0 3) (3 0))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -250,6 +258,7 @@ (enc n-b k) (enc a n-a n-b (ltk b c)) (enc b k n-a n-b (ltk a c))) (strand-map 0 1 2 2))) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -283,6 +292,7 @@ (enc a n-a n-b (ltk b c)) (enc b k n-a n-b (ltk a c)) (enc b k-0 n-a n-b (ltk a c))) (strand-map 0 1 2 3))) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -306,6 +316,7 @@ (parent 5) (unrealized (0 3) (2 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -336,6 +347,7 @@ (label 12) (parent 6) (unrealized (3 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -361,6 +373,7 @@ (parent 7) (unrealized (0 3) (3 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -391,6 +404,7 @@ (label 14) (parent 9) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton yahalom@@ -419,6 +433,7 @@ (label 15) (parent 9) (unrealized (4 0))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -450,6 +465,7 @@ (seen-ops (8 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton yahalom@@ -488,6 +504,7 @@ (enc b k n-a n-b (ltk a c)) (enc b k-0 n-a n-b (ltk a c))) (strand-map 0 1 2 3 4))) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "4 in cohort - 3 not yet seen")) (defskeleton yahalom@@ -521,6 +538,7 @@ (label 18) (parent 12) (unrealized (3 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -552,6 +570,7 @@ (label 19) (parent 14) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -586,6 +605,7 @@ (label 20) (parent 14) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "4 in cohort - 4 not yet seen")) (defskeleton yahalom@@ -619,6 +639,7 @@ (label 21) (parent 14) (unrealized (5 0))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -648,6 +669,7 @@ (parent 15) (unrealized (4 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -682,6 +704,7 @@ (seen-ops (16 (operation generalization deleted (4 0)) (strand-map 0 1 2 3))) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton yahalom@@ -724,6 +747,7 @@ (enc b k n-a n-b (ltk a c)) (enc b k-0 n-a n-b (ltk a c)) (enc b k-1 n-a n-b (ltk a c))) (strand-map 0 1 2 3 4 5))) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "3 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -757,6 +781,7 @@ (label 25) (parent 17) (unrealized (2 1) (5 0))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -794,6 +819,7 @@ (label 26) (parent 18) (unrealized (3 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -829,6 +855,7 @@ (label 27) (parent 18) (unrealized (3 1) (6 0))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -858,6 +885,7 @@ (seen-ops (8 (operation generalization deleted (3 0)) (strand-map 0 1 2))) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton yahalom@@ -896,6 +924,7 @@ (label 29) (parent 20) (unrealized (2 1))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "3 in cohort - 3 not yet seen")) (defskeleton yahalom@@ -930,6 +959,7 @@ (label 30) (parent 20) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -966,6 +996,7 @@ (label 31) (parent 20) (unrealized (6 0))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -1002,6 +1033,7 @@ (label 32) (parent 20) (unrealized (2 1) (6 0))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -1035,6 +1067,7 @@ (parent 21) (unrealized (5 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -1071,6 +1104,7 @@ (label 34) (parent 24) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -1107,6 +1141,7 @@ (label 35) (parent 24) (unrealized (2 1) (6 0))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -1141,6 +1176,7 @@ (parent 25) (unrealized (2 1) (4 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -1180,6 +1216,7 @@ (label 37) (parent 26) (unrealized (3 1) (7 0))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -1217,6 +1254,7 @@ (parent 27) (unrealized (3 1) (5 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -1256,6 +1294,7 @@ (label 39) (parent 29) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -1295,6 +1334,7 @@ (label 40) (parent 29) (unrealized (7 0))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -1334,6 +1374,7 @@ (label 41) (parent 29) (unrealized (2 1) (7 0))+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -1366,6 +1407,7 @@ (seen-ops (28 (operation generalization deleted (4 0)) (strand-map 0 1 2 3))) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton yahalom@@ -1402,6 +1444,7 @@ (parent 31) (unrealized (6 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -1439,6 +1482,7 @@ (parent 32) (unrealized (2 1) (5 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -1471,6 +1515,7 @@ (seen-ops (16 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 0 not yet seen")) (defskeleton yahalom@@ -1508,6 +1553,7 @@ (parent 35) (unrealized (2 1) (5 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -1548,6 +1594,7 @@ (parent 37) (unrealized (3 1) (6 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -1581,6 +1628,7 @@ (label 48) (parent 39) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -1620,6 +1668,7 @@ (parent 40) (unrealized (7 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -1660,6 +1709,7 @@ (parent 41) (unrealized (2 1) (6 0)) (dead)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "empty cohort")) (defskeleton yahalom@@ -1692,6 +1742,7 @@ (seen-ops (28 (operation generalization deleted (3 0)) (strand-map 0 1 2 4))) (realized)+ (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k)))) (comment "1 in cohort - 0 not yet seen")) (comment "Nothing left to do")@@ -1729,6 +1780,7 @@ ((recv k) (send k))) (label 52) (unrealized (0 2) (0 3))+ (maps ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a)))) (origs (n-b (0 1))) (comment "1 in cohort - 1 not yet seen")) @@ -1752,6 +1804,7 @@ (label 53) (parent 52) (unrealized (0 3) (1 0) (2 0))+ (maps ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a)))) (comment "2 in cohort - 2 not yet seen")) (defskeleton yahalom@@ -1773,6 +1826,7 @@ (label 54) (parent 53) (unrealized (0 3) (1 0))+ (maps ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -1796,6 +1850,7 @@ (label 55) (parent 53) (unrealized (0 3) (1 0))+ (maps ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom@@ -1818,6 +1873,7 @@ (parent 54) (unrealized (0 3) (1 0)) (dead)+ (maps ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a)))) (comment "empty cohort")) (defskeleton yahalom@@ -1842,6 +1898,7 @@ (parent 55) (unrealized (0 3) (1 0)) (dead)+ (maps ((0 1) ((a a) (b b) (c c) (n-b n-b) (k k) (n-a n-a)))) (comment "empty cohort")) (comment "Nothing left to do")@@ -1877,6 +1934,7 @@ (send (enc n-b k)))) (label 58) (unrealized (0 1))+ (maps ((0) ((a a) (b b) (c c) (n-a n-a) (n-b n-b) (k k)))) (origs (n-a (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -1898,6 +1956,7 @@ (label 59) (parent 58) (unrealized (1 0))+ (maps ((0) ((a a) (b b) (c c) (n-a n-a) (n-b n-b) (k k)))) (comment "1 in cohort - 1 not yet seen")) (defskeleton yahalom
tst/yes-or-no.tst view
@@ -1,6 +1,6 @@ (herald yes-or-no) -(comment "CPSA 4.4.5")+(comment "CPSA 4.4.7") (comment "All input read from tst/yes-or-no.scm") (defprotocol yes-or-no basic@@ -32,6 +32,7 @@ (traces ((send (enc question y n ans-key)) (recv y))) (label 0) (unrealized (0 1))+ (maps ((0) ((y y) (ans-key ans-key) (n n) (question question)))) (origs (y (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -87,6 +88,7 @@ (traces ((send (enc question y n ans-key)) (recv n))) (label 2) (unrealized (0 1))+ (maps ((0) ((ans-key ans-key) (n n) (y y) (question question)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -144,6 +146,7 @@ (label 4) (unrealized (1 0)) (preskeleton)+ (maps ((0 1) ((y y) (ans-key ans-key) (n n) (question question)))) (origs (y (0 0))) (comment "Not a skeleton")) @@ -159,6 +162,7 @@ (label 5) (parent 4) (unrealized (1 0))+ (maps ((0 1) ((y y) (ans-key ans-key) (n n) (question question)))) (origs (y (0 0))) (comment "1 in cohort - 1 not yet seen")) @@ -217,6 +221,7 @@ (label 7) (unrealized (1 0)) (preskeleton)+ (maps ((0 1) ((n n) (ans-key ans-key) (y y) (question question)))) (origs (n (0 0))) (comment "Not a skeleton")) @@ -232,6 +237,7 @@ (label 8) (parent 7) (unrealized (1 0))+ (maps ((0 1) ((n n) (ans-key ans-key) (y y) (question question)))) (origs (n (0 0))) (comment "1 in cohort - 1 not yet seen"))