%------------------------------------------------------------------------------
% File : CSE_E---1.7
% Problem : SWV013+1 : TPTP v9.2.1. Released v2.4.0.
% Transfm : none
% Format : tptp:raw
% Command : /export/starexec/sandbox2/solver/bin/lemma_parallel_prover %s --lemma-prover /export/starexec/sandbox2/solver/bin/cse --final-prover /export/starexec/sandbox2/solver/bin/eprover --proof-time %d --global-time-limit %d
% Computer : n018.cluster.edu
% Model : x86_64 x86_64
% CPU : Intel(R) Xeon(R) CPU E5-2620 v4 2.10GHz
% Memory : 8042.1875MB
% OS : Linux 3.10.0-693.el7.x86_64
% CPULimit : 300s
% WCLimit : 300s
% DateTime : Tue May 5 05:20:36 PM UTC 2026
% Result : Satisfiable 1.31s 1.74s
% Output : Saturation 1.31s
% Verified :
% SZS Type : ERROR: Analysing output (MakeTreeStats fails)
% Comments :
%------------------------------------------------------------------------------
fof(server_t_generates_key,axiom,
! [X1,X2,X3,X4,X5,X6,X7] :
( ( message(sent(X1,t,triple(X1,X2,encrypt(triple(X3,X4,X5),X6))))
& t_holds(key(X6,X1))
& t_holds(key(X7,X3))
& a_nonce(X4) )
=> message(sent(t,X3,triple(encrypt(quadruple(X1,X4,generate_key(X4),X5),X7),encrypt(triple(X3,generate_key(X4),X5),X6),X2))) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',server_t_generates_key) ).
fof(b_creates_freash_nonces_in_time,axiom,
! [X1,X2] :
( ( message(sent(X1,b,pair(X1,X2)))
& fresh_to_b(X2) )
=> ( message(sent(b,t,triple(b,generate_b_nonce(X2),encrypt(triple(X1,X2,generate_expiration_time(X2)),bt))))
& b_stored(pair(X1,X2)) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',b_creates_freash_nonces_in_time) ).
fof(intruder_message_sent,axiom,
! [X1,X2,X3] :
( ( intruder_message(X1)
& party_of_protocol(X2)
& party_of_protocol(X3) )
=> message(sent(X2,X3,X1)) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',intruder_message_sent) ).
fof(t_holds_key_at_for_a,axiom,
t_holds(key(at,a)),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',t_holds_key_at_for_a) ).
fof(intruder_can_record,axiom,
! [X1,X2,X3] :
( message(sent(X1,X2,X3))
=> intruder_message(X3) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',intruder_can_record) ).
fof(a_sent_message_i_to_b,axiom,
message(sent(a,b,pair(a,an_a_nonce))),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',a_sent_message_i_to_b) ).
fof(nonce_a_is_fresh_to_b,axiom,
fresh_to_b(an_a_nonce),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',nonce_a_is_fresh_to_b) ).
fof(b_is_party_of_protocol,axiom,
party_of_protocol(b),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',b_is_party_of_protocol) ).
fof(intruder_composes_pairs,axiom,
! [X1,X2] :
( ( intruder_message(X1)
& intruder_message(X2) )
=> intruder_message(pair(X1,X2)) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',intruder_composes_pairs) ).
fof(t_holds_key_bt_for_b,axiom,
t_holds(key(bt,b)),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',t_holds_key_bt_for_b) ).
fof(a_forwards_secure,axiom,
! [X1,X2,X3,X4,X5,X6] :
( ( message(sent(t,a,triple(encrypt(quadruple(X5,X6,X3,X2),at),X4,X1)))
& a_stored(pair(X5,X6)) )
=> ( message(sent(a,X5,pair(X4,encrypt(X1,X3))))
& a_holds(key(X3,X5)) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',a_forwards_secure) ).
fof(intruder_decomposes_triples,axiom,
! [X1,X2,X3] :
( intruder_message(triple(X1,X2,X3))
=> ( intruder_message(X1)
& intruder_message(X2)
& intruder_message(X3) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',intruder_decomposes_triples) ).
fof(a_stored_message_i,axiom,
a_stored(pair(b,an_a_nonce)),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',a_stored_message_i) ).
fof(an_a_nonce_is_a_nonce,axiom,
a_nonce(an_a_nonce),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',an_a_nonce_is_a_nonce) ).
fof(b_accepts_secure_session_key,axiom,
! [X2,X4,X5] :
( ( message(sent(X4,b,pair(encrypt(triple(X4,X2,generate_expiration_time(X5)),bt),encrypt(generate_b_nonce(X5),X2))))
& b_stored(pair(X4,X5)) )
=> b_holds(key(X2,X4)) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',b_accepts_secure_session_key) ).
fof(t_is_party_of_protocol,axiom,
party_of_protocol(t),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',t_is_party_of_protocol) ).
fof(intruder_composes_triples,axiom,
! [X1,X2,X3] :
( ( intruder_message(X1)
& intruder_message(X2)
& intruder_message(X3) )
=> intruder_message(triple(X1,X2,X3)) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',intruder_composes_triples) ).
fof(intruder_decomposes_pairs,axiom,
! [X1,X2] :
( intruder_message(pair(X1,X2))
=> ( intruder_message(X1)
& intruder_message(X2) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',intruder_decomposes_pairs) ).
fof(a_is_party_of_protocol,axiom,
party_of_protocol(a),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',a_is_party_of_protocol) ).
fof(intruder_key_encrypts,axiom,
! [X1,X2,X3] :
( ( intruder_message(X1)
& intruder_holds(key(X2,X3))
& party_of_protocol(X3) )
=> intruder_message(encrypt(X1,X2)) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',intruder_key_encrypts) ).
fof(intruder_holds_key,axiom,
! [X2,X3] :
( ( intruder_message(X2)
& party_of_protocol(X3) )
=> intruder_holds(key(X2,X3)) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',intruder_holds_key) ).
fof(generated_keys_are_not_nonces,axiom,
! [X1] : ~ a_nonce(generate_key(X1)),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',generated_keys_are_not_nonces) ).
fof(intruder_composes_quadruples,axiom,
! [X1,X2,X3,X4] :
( ( intruder_message(X1)
& intruder_message(X2)
& intruder_message(X3)
& intruder_message(X4) )
=> intruder_message(quadruple(X1,X2,X3,X4)) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',intruder_composes_quadruples) ).
fof(intruder_interception,axiom,
! [X1,X2,X3] :
( ( intruder_message(encrypt(X1,X2))
& intruder_holds(key(X2,X3))
& party_of_protocol(X3) )
=> intruder_message(X2) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',intruder_interception) ).
fof(intruder_decomposes_quadruples,axiom,
! [X1,X2,X3,X4] :
( intruder_message(quadruple(X1,X2,X3,X4))
=> ( intruder_message(X1)
& intruder_message(X2)
& intruder_message(X3)
& intruder_message(X4) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',intruder_decomposes_quadruples) ).
fof(generated_times_and_nonces_are_nonces,axiom,
! [X1] :
( a_nonce(generate_expiration_time(X1))
& a_nonce(generate_b_nonce(X1)) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',generated_times_and_nonces_are_nonces) ).
fof(b_hold_key_bt_for_t,axiom,
b_holds(key(bt,t)),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',b_hold_key_bt_for_t) ).
fof(a_holds_key_at_for_t,axiom,
a_holds(key(at,t)),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',a_holds_key_at_for_t) ).
fof(c_0_28,plain,
! [X71,X72,X73,X74,X75,X76,X77] :
( ~ message(sent(X71,t,triple(X71,X72,encrypt(triple(X73,X74,X75),X76))))
| ~ t_holds(key(X76,X71))
| ~ t_holds(key(X77,X73))
| ~ a_nonce(X74)
| message(sent(t,X73,triple(encrypt(quadruple(X71,X74,generate_key(X74),X75),X77),encrypt(triple(X73,generate_key(X74),X75),X76),X72))) ),
inference(variable_rename,[status(thm)],[inference(fof_nnf,[status(thm)],[server_t_generates_key])]) ).
fof(c_0_29,plain,
! [X66,X67] :
( ( message(sent(b,t,triple(b,generate_b_nonce(X67),encrypt(triple(X66,X67,generate_expiration_time(X67)),bt))))
| ~ message(sent(X66,b,pair(X66,X67)))
| ~ fresh_to_b(X67) )
& ( b_stored(pair(X66,X67))
| ~ message(sent(X66,b,pair(X66,X67)))
| ~ fresh_to_b(X67) ) ),
inference(distribute,[status(thm)],[inference(variable_rename,[status(thm)],[inference(fof_nnf,[status(thm)],[b_creates_freash_nonces_in_time])])]) ).
fof(c_0_30,plain,
! [X102,X103,X104] :
( ~ intruder_message(X102)
| ~ party_of_protocol(X103)
| ~ party_of_protocol(X104)
| message(sent(X103,X104,X102)) ),
inference(variable_rename,[status(thm)],[inference(fof_nnf,[status(thm)],[intruder_message_sent])]) ).
cnf(c_0_31,plain,
( message(sent(t,X3,triple(encrypt(quadruple(X1,X4,generate_key(X4),X5),X7),encrypt(triple(X3,generate_key(X4),X5),X6),X2)))
| ~ message(sent(X1,t,triple(X1,X2,encrypt(triple(X3,X4,X5),X6))))
| ~ t_holds(key(X6,X1))
| ~ t_holds(key(X7,X3))
| ~ a_nonce(X4) ),
inference(split_conjunct,[status(thm)],[c_0_28]),
[final] ).
cnf(c_0_32,plain,
t_holds(key(at,a)),
inference(split_conjunct,[status(thm)],[t_holds_key_at_for_a]),
[final] ).
fof(c_0_33,plain,
! [X78,X79,X80] :
( ~ message(sent(X78,X79,X80))
| intruder_message(X80) ),
inference(variable_rename,[status(thm)],[inference(fof_nnf,[status(thm)],[intruder_can_record])]) ).
cnf(c_0_34,plain,
( message(sent(b,t,triple(b,generate_b_nonce(X1),encrypt(triple(X2,X1,generate_expiration_time(X1)),bt))))
| ~ message(sent(X2,b,pair(X2,X1)))
| ~ fresh_to_b(X1) ),
inference(split_conjunct,[status(thm)],[c_0_29]),
[final] ).
cnf(c_0_35,plain,
message(sent(a,b,pair(a,an_a_nonce))),
inference(split_conjunct,[status(thm)],[a_sent_message_i_to_b]),
[final] ).
cnf(c_0_36,plain,
fresh_to_b(an_a_nonce),
inference(split_conjunct,[status(thm)],[nonce_a_is_fresh_to_b]),
[final] ).
cnf(c_0_37,plain,
( message(sent(X2,X3,X1))
| ~ intruder_message(X1)
| ~ party_of_protocol(X2)
| ~ party_of_protocol(X3) ),
inference(split_conjunct,[status(thm)],[c_0_30]),
[final] ).
cnf(c_0_38,plain,
party_of_protocol(b),
inference(split_conjunct,[status(thm)],[b_is_party_of_protocol]),
[final] ).
fof(c_0_39,plain,
! [X90,X91] :
( ~ intruder_message(X90)
| ~ intruder_message(X91)
| intruder_message(pair(X90,X91)) ),
inference(variable_rename,[status(thm)],[inference(fof_nnf,[status(thm)],[intruder_composes_pairs])]) ).
cnf(c_0_40,plain,
t_holds(key(bt,b)),
inference(split_conjunct,[status(thm)],[t_holds_key_bt_for_b]),
[final] ).
fof(c_0_41,plain,
! [X60,X61,X62,X63,X64,X65] :
( ( message(sent(a,X64,pair(X63,encrypt(X60,X62))))
| ~ message(sent(t,a,triple(encrypt(quadruple(X64,X65,X62,X61),at),X63,X60)))
| ~ a_stored(pair(X64,X65)) )
& ( a_holds(key(X62,X64))
| ~ message(sent(t,a,triple(encrypt(quadruple(X64,X65,X62,X61),at),X63,X60)))
| ~ a_stored(pair(X64,X65)) ) ),
inference(distribute,[status(thm)],[inference(variable_rename,[status(thm)],[inference(fof_nnf,[status(thm)],[a_forwards_secure])])]) ).
cnf(c_0_42,plain,
( message(sent(t,a,triple(encrypt(quadruple(X1,X2,generate_key(X2),X3),at),encrypt(triple(a,generate_key(X2),X3),X4),X5)))
| ~ a_nonce(X2)
| ~ t_holds(key(X4,X1))
| ~ message(sent(X1,t,triple(X1,X5,encrypt(triple(a,X2,X3),X4)))) ),
inference(spm,[status(thm)],[c_0_31,c_0_32]),
[final] ).
cnf(c_0_43,plain,
( b_stored(pair(X1,X2))
| ~ message(sent(X1,b,pair(X1,X2)))
| ~ fresh_to_b(X2) ),
inference(split_conjunct,[status(thm)],[c_0_29]),
[final] ).
fof(c_0_44,plain,
! [X83,X84,X85] :
( ( intruder_message(X83)
| ~ intruder_message(triple(X83,X84,X85)) )
& ( intruder_message(X84)
| ~ intruder_message(triple(X83,X84,X85)) )
& ( intruder_message(X85)
| ~ intruder_message(triple(X83,X84,X85)) ) ),
inference(distribute,[status(thm)],[inference(variable_rename,[status(thm)],[inference(fof_nnf,[status(thm)],[intruder_decomposes_triples])])]) ).
cnf(c_0_45,plain,
( intruder_message(X3)
| ~ message(sent(X1,X2,X3)) ),
inference(split_conjunct,[status(thm)],[c_0_33]),
[final] ).
cnf(c_0_46,plain,
message(sent(b,t,triple(b,generate_b_nonce(an_a_nonce),encrypt(triple(a,an_a_nonce,generate_expiration_time(an_a_nonce)),bt)))),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_34,c_0_35]),c_0_36])]),
[final] ).
cnf(c_0_47,plain,
( message(sent(b,t,triple(b,generate_b_nonce(X1),encrypt(triple(X2,X1,generate_expiration_time(X1)),bt))))
| ~ intruder_message(pair(X2,X1))
| ~ fresh_to_b(X1)
| ~ party_of_protocol(X2) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_34,c_0_37]),c_0_38])]),
[final] ).
cnf(c_0_48,plain,
( intruder_message(pair(X1,X2))
| ~ intruder_message(X1)
| ~ intruder_message(X2) ),
inference(split_conjunct,[status(thm)],[c_0_39]),
[final] ).
cnf(c_0_49,plain,
( message(sent(t,b,triple(encrypt(quadruple(X1,X2,generate_key(X2),X3),bt),encrypt(triple(b,generate_key(X2),X3),X4),X5)))
| ~ a_nonce(X2)
| ~ t_holds(key(X4,X1))
| ~ message(sent(X1,t,triple(X1,X5,encrypt(triple(b,X2,X3),X4)))) ),
inference(spm,[status(thm)],[c_0_31,c_0_40]),
[final] ).
cnf(c_0_50,plain,
( message(sent(a,X1,pair(X2,encrypt(X3,X4))))
| ~ message(sent(t,a,triple(encrypt(quadruple(X1,X5,X4,X6),at),X2,X3)))
| ~ a_stored(pair(X1,X5)) ),
inference(split_conjunct,[status(thm)],[c_0_41]),
[final] ).
cnf(c_0_51,plain,
a_stored(pair(b,an_a_nonce)),
inference(split_conjunct,[status(thm)],[a_stored_message_i]),
[final] ).
cnf(c_0_52,plain,
( message(sent(t,a,triple(encrypt(quadruple(b,X1,generate_key(X1),X2),at),encrypt(triple(a,generate_key(X1),X2),bt),X3)))
| ~ a_nonce(X1)
| ~ message(sent(b,t,triple(b,X3,encrypt(triple(a,X1,X2),bt)))) ),
inference(spm,[status(thm)],[c_0_42,c_0_40]),
[final] ).
cnf(c_0_53,plain,
a_nonce(an_a_nonce),
inference(split_conjunct,[status(thm)],[an_a_nonce_is_a_nonce]),
[final] ).
fof(c_0_54,plain,
! [X68,X69,X70] :
( ~ message(sent(X69,b,pair(encrypt(triple(X69,X68,generate_expiration_time(X70)),bt),encrypt(generate_b_nonce(X70),X68))))
| ~ b_stored(pair(X69,X70))
| b_holds(key(X68,X69)) ),
inference(variable_rename,[status(thm)],[inference(fof_nnf,[status(thm)],[b_accepts_secure_session_key])]) ).
cnf(c_0_55,plain,
( b_stored(pair(X1,X2))
| ~ intruder_message(pair(X1,X2))
| ~ fresh_to_b(X2)
| ~ party_of_protocol(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_43,c_0_37]),c_0_38])]),
[final] ).
cnf(c_0_56,plain,
party_of_protocol(t),
inference(split_conjunct,[status(thm)],[t_is_party_of_protocol]),
[final] ).
fof(c_0_57,plain,
! [X92,X93,X94] :
( ~ intruder_message(X92)
| ~ intruder_message(X93)
| ~ intruder_message(X94)
| intruder_message(triple(X92,X93,X94)) ),
inference(variable_rename,[status(thm)],[inference(fof_nnf,[status(thm)],[intruder_composes_triples])]) ).
cnf(c_0_58,plain,
( intruder_message(X1)
| ~ intruder_message(triple(X1,X2,X3)) ),
inference(split_conjunct,[status(thm)],[c_0_44]),
[final] ).
cnf(c_0_59,plain,
intruder_message(triple(b,generate_b_nonce(an_a_nonce),encrypt(triple(a,an_a_nonce,generate_expiration_time(an_a_nonce)),bt))),
inference(spm,[status(thm)],[c_0_45,c_0_46]),
[final] ).
cnf(c_0_60,plain,
( message(sent(b,t,triple(b,generate_b_nonce(X1),encrypt(triple(X2,X1,generate_expiration_time(X1)),bt))))
| ~ intruder_message(X1)
| ~ intruder_message(X2)
| ~ fresh_to_b(X1)
| ~ party_of_protocol(X2) ),
inference(spm,[status(thm)],[c_0_47,c_0_48]),
[final] ).
fof(c_0_61,plain,
! [X81,X82] :
( ( intruder_message(X81)
| ~ intruder_message(pair(X81,X82)) )
& ( intruder_message(X82)
| ~ intruder_message(pair(X81,X82)) ) ),
inference(distribute,[status(thm)],[inference(variable_rename,[status(thm)],[inference(fof_nnf,[status(thm)],[intruder_decomposes_pairs])])]) ).
cnf(c_0_62,plain,
( message(sent(t,b,triple(encrypt(quadruple(b,X1,generate_key(X1),X2),bt),encrypt(triple(b,generate_key(X1),X2),bt),X3)))
| ~ a_nonce(X1)
| ~ message(sent(b,t,triple(b,X3,encrypt(triple(b,X1,X2),bt)))) ),
inference(spm,[status(thm)],[c_0_49,c_0_40]),
[final] ).
cnf(c_0_63,plain,
( message(sent(a,b,pair(X1,encrypt(X2,X3))))
| ~ message(sent(t,a,triple(encrypt(quadruple(b,an_a_nonce,X3,X4),at),X1,X2))) ),
inference(spm,[status(thm)],[c_0_50,c_0_51]),
[final] ).
cnf(c_0_64,plain,
party_of_protocol(a),
inference(split_conjunct,[status(thm)],[a_is_party_of_protocol]),
[final] ).
cnf(c_0_65,plain,
message(sent(t,a,triple(encrypt(quadruple(b,an_a_nonce,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),at),encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt),generate_b_nonce(an_a_nonce)))),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_52,c_0_46]),c_0_53])]),
[final] ).
cnf(c_0_66,plain,
( b_holds(key(X2,X1))
| ~ message(sent(X1,b,pair(encrypt(triple(X1,X2,generate_expiration_time(X3)),bt),encrypt(generate_b_nonce(X3),X2))))
| ~ b_stored(pair(X1,X3)) ),
inference(split_conjunct,[status(thm)],[c_0_54]),
[final] ).
cnf(c_0_67,plain,
( b_stored(pair(X1,X2))
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ fresh_to_b(X2)
| ~ party_of_protocol(X1) ),
inference(spm,[status(thm)],[c_0_55,c_0_48]),
[final] ).
fof(c_0_68,plain,
! [X107,X108,X109] :
( ~ intruder_message(X107)
| ~ intruder_holds(key(X108,X109))
| ~ party_of_protocol(X109)
| intruder_message(encrypt(X107,X108)) ),
inference(variable_rename,[status(thm)],[inference(fof_nnf,[status(thm)],[intruder_key_encrypts])]) ).
fof(c_0_69,plain,
! [X105,X106] :
( ~ intruder_message(X105)
| ~ party_of_protocol(X106)
| intruder_holds(key(X105,X106)) ),
inference(variable_rename,[status(thm)],[inference(fof_nnf,[status(thm)],[intruder_holds_key])]) ).
cnf(c_0_70,plain,
( message(sent(t,a,triple(encrypt(quadruple(b,X1,generate_key(X1),X2),at),encrypt(triple(a,generate_key(X1),X2),bt),X3)))
| ~ intruder_message(triple(b,X3,encrypt(triple(a,X1,X2),bt)))
| ~ a_nonce(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_52,c_0_37]),c_0_56]),c_0_38])]),
[final] ).
cnf(c_0_71,plain,
( intruder_message(triple(X1,X2,X3))
| ~ intruder_message(X1)
| ~ intruder_message(X2)
| ~ intruder_message(X3) ),
inference(split_conjunct,[status(thm)],[c_0_57]),
[final] ).
cnf(c_0_72,plain,
intruder_message(b),
inference(spm,[status(thm)],[c_0_58,c_0_59]),
[final] ).
cnf(c_0_73,plain,
( intruder_message(X1)
| ~ intruder_message(triple(X2,X3,X1)) ),
inference(split_conjunct,[status(thm)],[c_0_44]),
[final] ).
cnf(c_0_74,plain,
( intruder_message(triple(b,generate_b_nonce(X1),encrypt(triple(X2,X1,generate_expiration_time(X1)),bt)))
| ~ intruder_message(X1)
| ~ intruder_message(X2)
| ~ fresh_to_b(X1)
| ~ party_of_protocol(X2) ),
inference(spm,[status(thm)],[c_0_45,c_0_60]),
[final] ).
cnf(c_0_75,plain,
( intruder_message(X1)
| ~ intruder_message(pair(X1,X2)) ),
inference(split_conjunct,[status(thm)],[c_0_61]),
[final] ).
cnf(c_0_76,plain,
intruder_message(pair(a,an_a_nonce)),
inference(spm,[status(thm)],[c_0_45,c_0_35]),
[final] ).
cnf(c_0_77,plain,
( message(sent(t,b,triple(encrypt(quadruple(b,X1,generate_key(X1),X2),bt),encrypt(triple(b,generate_key(X1),X2),bt),X3)))
| ~ intruder_message(triple(b,X3,encrypt(triple(b,X1,X2),bt)))
| ~ a_nonce(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_62,c_0_37]),c_0_56]),c_0_38])]),
[final] ).
cnf(c_0_78,plain,
b_stored(pair(a,an_a_nonce)),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_43,c_0_35]),c_0_36])]),
[final] ).
cnf(c_0_79,plain,
( message(sent(a,b,pair(X1,encrypt(X2,X3))))
| ~ intruder_message(triple(encrypt(quadruple(b,an_a_nonce,X3,X4),at),X1,X2)) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_63,c_0_37]),c_0_64]),c_0_56])]),
[final] ).
cnf(c_0_80,plain,
intruder_message(triple(encrypt(quadruple(b,an_a_nonce,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),at),encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt),generate_b_nonce(an_a_nonce))),
inference(spm,[status(thm)],[c_0_45,c_0_65]),
[final] ).
cnf(c_0_81,plain,
( b_holds(key(X1,X2))
| ~ intruder_message(X3)
| ~ intruder_message(X2)
| ~ fresh_to_b(X3)
| ~ message(sent(X2,b,pair(encrypt(triple(X2,X1,generate_expiration_time(X3)),bt),encrypt(generate_b_nonce(X3),X1))))
| ~ party_of_protocol(X2) ),
inference(spm,[status(thm)],[c_0_66,c_0_67]),
[final] ).
cnf(c_0_82,plain,
( intruder_message(encrypt(X1,X2))
| ~ intruder_message(X1)
| ~ intruder_holds(key(X2,X3))
| ~ party_of_protocol(X3) ),
inference(split_conjunct,[status(thm)],[c_0_68]),
[final] ).
cnf(c_0_83,plain,
( intruder_holds(key(X1,X2))
| ~ intruder_message(X1)
| ~ party_of_protocol(X2) ),
inference(split_conjunct,[status(thm)],[c_0_69]),
[final] ).
cnf(c_0_84,plain,
( message(sent(t,a,triple(encrypt(quadruple(b,X1,generate_key(X1),X2),at),encrypt(triple(a,generate_key(X1),X2),bt),X3)))
| ~ intruder_message(encrypt(triple(a,X1,X2),bt))
| ~ intruder_message(X3)
| ~ a_nonce(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_70,c_0_71]),c_0_72])]),
[final] ).
cnf(c_0_85,plain,
( intruder_message(encrypt(triple(X1,X2,generate_expiration_time(X2)),bt))
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ fresh_to_b(X2)
| ~ party_of_protocol(X1) ),
inference(spm,[status(thm)],[c_0_73,c_0_74]),
[final] ).
cnf(c_0_86,plain,
intruder_message(a),
inference(spm,[status(thm)],[c_0_75,c_0_76]),
[final] ).
cnf(c_0_87,plain,
( message(sent(t,b,triple(encrypt(quadruple(b,X1,generate_key(X1),X2),bt),encrypt(triple(b,generate_key(X1),X2),bt),X3)))
| ~ intruder_message(encrypt(triple(b,X1,X2),bt))
| ~ intruder_message(X3)
| ~ a_nonce(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_77,c_0_71]),c_0_72])]),
[final] ).
cnf(c_0_88,plain,
( b_holds(key(X1,a))
| ~ message(sent(a,b,pair(encrypt(triple(a,X1,generate_expiration_time(an_a_nonce)),bt),encrypt(generate_b_nonce(an_a_nonce),X1)))) ),
inference(spm,[status(thm)],[c_0_66,c_0_78]),
[final] ).
cnf(c_0_89,plain,
( message(sent(a,b,pair(X1,encrypt(X2,X3))))
| ~ intruder_message(encrypt(quadruple(b,an_a_nonce,X3,X4),at))
| ~ intruder_message(X2)
| ~ intruder_message(X1) ),
inference(spm,[status(thm)],[c_0_79,c_0_71]),
[final] ).
cnf(c_0_90,plain,
intruder_message(encrypt(quadruple(b,an_a_nonce,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),at)),
inference(spm,[status(thm)],[c_0_58,c_0_80]),
[final] ).
cnf(c_0_91,plain,
intruder_message(encrypt(triple(a,an_a_nonce,generate_expiration_time(an_a_nonce)),bt)),
inference(spm,[status(thm)],[c_0_73,c_0_59]),
[final] ).
cnf(c_0_92,plain,
( b_holds(key(X1,X2))
| ~ intruder_message(pair(encrypt(triple(X2,X1,generate_expiration_time(X3)),bt),encrypt(generate_b_nonce(X3),X1)))
| ~ intruder_message(X3)
| ~ intruder_message(X2)
| ~ fresh_to_b(X3)
| ~ party_of_protocol(X2) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_81,c_0_37]),c_0_38])]),
[final] ).
cnf(c_0_93,plain,
( intruder_message(encrypt(X1,X2))
| ~ intruder_message(X1)
| ~ intruder_message(X2)
| ~ party_of_protocol(X3) ),
inference(spm,[status(thm)],[c_0_82,c_0_83]) ).
cnf(c_0_94,plain,
( message(sent(t,b,triple(encrypt(quadruple(b,X1,generate_key(X1),generate_expiration_time(X1)),bt),encrypt(triple(b,generate_key(X1),generate_expiration_time(X1)),bt),generate_b_nonce(X1))))
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_62,c_0_60]),c_0_72]),c_0_38])]),
[final] ).
cnf(c_0_95,plain,
( message(sent(t,a,triple(encrypt(quadruple(b,X1,generate_key(X1),generate_expiration_time(X1)),at),encrypt(triple(a,generate_key(X1),generate_expiration_time(X1)),bt),X2)))
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_84,c_0_85]),c_0_86]),c_0_64])]),
[final] ).
cnf(c_0_96,plain,
( message(sent(t,b,triple(encrypt(quadruple(b,X1,generate_key(X1),generate_expiration_time(X1)),bt),encrypt(triple(b,generate_key(X1),generate_expiration_time(X1)),bt),X2)))
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_87,c_0_85]),c_0_72]),c_0_38])]),
[final] ).
cnf(c_0_97,plain,
( b_holds(key(X1,a))
| ~ intruder_message(pair(encrypt(triple(a,X1,generate_expiration_time(an_a_nonce)),bt),encrypt(generate_b_nonce(an_a_nonce),X1))) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_88,c_0_37]),c_0_38]),c_0_64])]),
[final] ).
cnf(c_0_98,plain,
( a_holds(key(X1,X2))
| ~ message(sent(t,a,triple(encrypt(quadruple(X2,X3,X1,X4),at),X5,X6)))
| ~ a_stored(pair(X2,X3)) ),
inference(split_conjunct,[status(thm)],[c_0_41]),
[final] ).
cnf(c_0_99,plain,
( message(sent(a,b,pair(X1,encrypt(X2,generate_key(an_a_nonce)))))
| ~ intruder_message(X2)
| ~ intruder_message(X1) ),
inference(spm,[status(thm)],[c_0_89,c_0_90]),
[final] ).
cnf(c_0_100,plain,
( intruder_message(X1)
| ~ intruder_message(triple(X2,X1,X3)) ),
inference(split_conjunct,[status(thm)],[c_0_44]),
[final] ).
cnf(c_0_101,plain,
( message(sent(t,a,triple(encrypt(quadruple(b,an_a_nonce,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),at),encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt),X1)))
| ~ intruder_message(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_84,c_0_91]),c_0_53])]),
[final] ).
cnf(c_0_102,plain,
( b_holds(key(X1,X2))
| ~ intruder_message(encrypt(triple(X2,X1,generate_expiration_time(X3)),bt))
| ~ intruder_message(encrypt(generate_b_nonce(X3),X1))
| ~ intruder_message(X3)
| ~ intruder_message(X2)
| ~ fresh_to_b(X3)
| ~ party_of_protocol(X2) ),
inference(spm,[status(thm)],[c_0_92,c_0_48]),
[final] ).
cnf(c_0_103,plain,
( intruder_message(encrypt(X1,X2))
| ~ intruder_message(X1)
| ~ intruder_message(X2) ),
inference(spm,[status(thm)],[c_0_93,c_0_38]),
[final] ).
cnf(c_0_104,plain,
( intruder_message(triple(encrypt(quadruple(b,X1,generate_key(X1),generate_expiration_time(X1)),bt),encrypt(triple(b,generate_key(X1),generate_expiration_time(X1)),bt),generate_b_nonce(X1)))
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(spm,[status(thm)],[c_0_45,c_0_94]),
[final] ).
cnf(c_0_105,plain,
( intruder_message(triple(encrypt(quadruple(b,X1,generate_key(X1),generate_expiration_time(X1)),at),encrypt(triple(a,generate_key(X1),generate_expiration_time(X1)),bt),X2))
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(spm,[status(thm)],[c_0_45,c_0_95]),
[final] ).
cnf(c_0_106,plain,
( intruder_message(triple(encrypt(quadruple(b,X1,generate_key(X1),generate_expiration_time(X1)),bt),encrypt(triple(b,generate_key(X1),generate_expiration_time(X1)),bt),X2))
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(spm,[status(thm)],[c_0_45,c_0_96]),
[final] ).
cnf(c_0_107,plain,
( message(sent(t,a,triple(encrypt(quadruple(a,X1,generate_key(X1),X2),at),encrypt(triple(a,generate_key(X1),X2),at),X3)))
| ~ a_nonce(X1)
| ~ message(sent(a,t,triple(a,X3,encrypt(triple(a,X1,X2),at)))) ),
inference(spm,[status(thm)],[c_0_42,c_0_32]),
[final] ).
cnf(c_0_108,plain,
message(sent(a,b,pair(encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt),encrypt(generate_b_nonce(an_a_nonce),generate_key(an_a_nonce))))),
inference(spm,[status(thm)],[c_0_63,c_0_65]),
[final] ).
cnf(c_0_109,plain,
( message(sent(t,b,triple(encrypt(quadruple(a,X1,generate_key(X1),X2),bt),encrypt(triple(b,generate_key(X1),X2),at),X3)))
| ~ a_nonce(X1)
| ~ message(sent(a,t,triple(a,X3,encrypt(triple(b,X1,X2),at)))) ),
inference(spm,[status(thm)],[c_0_49,c_0_32]),
[final] ).
cnf(c_0_110,plain,
( intruder_message(X1)
| ~ intruder_message(pair(X2,X1)) ),
inference(split_conjunct,[status(thm)],[c_0_61]),
[final] ).
cnf(c_0_111,plain,
( b_holds(key(X1,a))
| ~ intruder_message(encrypt(triple(a,X1,generate_expiration_time(an_a_nonce)),bt))
| ~ intruder_message(encrypt(generate_b_nonce(an_a_nonce),X1)) ),
inference(spm,[status(thm)],[c_0_97,c_0_48]),
[final] ).
cnf(c_0_112,plain,
( a_holds(key(X1,b))
| ~ message(sent(t,a,triple(encrypt(quadruple(b,an_a_nonce,X1,X2),at),X3,X4))) ),
inference(spm,[status(thm)],[c_0_98,c_0_51]),
[final] ).
cnf(c_0_113,plain,
( intruder_message(pair(X1,encrypt(X2,generate_key(an_a_nonce))))
| ~ intruder_message(X2)
| ~ intruder_message(X1) ),
inference(spm,[status(thm)],[c_0_45,c_0_99]),
[final] ).
cnf(c_0_114,plain,
( intruder_message(generate_b_nonce(X1))
| ~ intruder_message(X1)
| ~ intruder_message(X2)
| ~ fresh_to_b(X1)
| ~ party_of_protocol(X2) ),
inference(spm,[status(thm)],[c_0_100,c_0_74]),
[final] ).
cnf(c_0_115,plain,
( message(sent(a,b,pair(encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt),encrypt(X1,generate_key(an_a_nonce)))))
| ~ intruder_message(X1) ),
inference(spm,[status(thm)],[c_0_63,c_0_101]),
[final] ).
cnf(c_0_116,plain,
( b_holds(key(X1,X2))
| ~ intruder_message(encrypt(triple(X2,X1,generate_expiration_time(X3)),bt))
| ~ intruder_message(generate_b_nonce(X3))
| ~ intruder_message(X3)
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ fresh_to_b(X3)
| ~ party_of_protocol(X2) ),
inference(spm,[status(thm)],[c_0_102,c_0_103]),
[final] ).
cnf(c_0_117,plain,
( intruder_message(generate_b_nonce(X1))
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(spm,[status(thm)],[c_0_73,c_0_104]),
[final] ).
cnf(c_0_118,plain,
( intruder_message(encrypt(triple(a,generate_key(X1),generate_expiration_time(X1)),bt))
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(spm,[status(thm)],[c_0_100,c_0_105]) ).
cnf(c_0_119,plain,
( intruder_message(encrypt(triple(b,generate_key(X1),generate_expiration_time(X1)),bt))
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(spm,[status(thm)],[c_0_100,c_0_106]) ).
cnf(c_0_120,plain,
( message(sent(t,a,triple(encrypt(quadruple(a,X1,generate_key(X1),X2),at),encrypt(triple(a,generate_key(X1),X2),at),X3)))
| ~ intruder_message(triple(a,X3,encrypt(triple(a,X1,X2),at)))
| ~ a_nonce(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_107,c_0_37]),c_0_56]),c_0_64])]),
[final] ).
cnf(c_0_121,plain,
intruder_message(pair(encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt),encrypt(generate_b_nonce(an_a_nonce),generate_key(an_a_nonce)))),
inference(spm,[status(thm)],[c_0_45,c_0_108]),
[final] ).
cnf(c_0_122,plain,
( message(sent(t,b,triple(encrypt(quadruple(a,X1,generate_key(X1),X2),bt),encrypt(triple(b,generate_key(X1),X2),at),X3)))
| ~ intruder_message(triple(a,X3,encrypt(triple(b,X1,X2),at)))
| ~ a_nonce(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_109,c_0_37]),c_0_56]),c_0_64])]),
[final] ).
cnf(c_0_123,plain,
intruder_message(generate_b_nonce(an_a_nonce)),
inference(spm,[status(thm)],[c_0_100,c_0_59]),
[final] ).
cnf(c_0_124,plain,
intruder_message(an_a_nonce),
inference(spm,[status(thm)],[c_0_110,c_0_76]),
[final] ).
cnf(c_0_125,plain,
( b_holds(key(X1,a))
| ~ intruder_message(encrypt(triple(a,X1,generate_expiration_time(an_a_nonce)),bt))
| ~ intruder_message(generate_b_nonce(an_a_nonce))
| ~ intruder_message(X1) ),
inference(spm,[status(thm)],[c_0_111,c_0_103]) ).
cnf(c_0_126,plain,
( a_holds(key(X1,b))
| ~ intruder_message(triple(encrypt(quadruple(b,an_a_nonce,X1,X2),at),X3,X4)) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_112,c_0_37]),c_0_64]),c_0_56])]),
[final] ).
fof(c_0_127,plain,
! [X1] : ~ a_nonce(generate_key(X1)),
inference(fof_simplification,[status(thm)],[generated_keys_are_not_nonces]) ).
cnf(c_0_128,plain,
( b_holds(key(generate_key(an_a_nonce),X1))
| ~ intruder_message(encrypt(triple(X1,generate_key(an_a_nonce),generate_expiration_time(X2)),bt))
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ fresh_to_b(X2)
| ~ party_of_protocol(X1) ),
inference(csr,[status(thm)],[inference(spm,[status(thm)],[c_0_92,c_0_113]),c_0_114]),
[final] ).
cnf(c_0_129,plain,
( intruder_message(pair(encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt),encrypt(X1,generate_key(an_a_nonce))))
| ~ intruder_message(X1) ),
inference(spm,[status(thm)],[c_0_45,c_0_115]),
[final] ).
cnf(c_0_130,plain,
( message(sent(t,a,triple(encrypt(quadruple(b,X1,generate_key(X1),generate_expiration_time(X1)),at),encrypt(triple(a,generate_key(X1),generate_expiration_time(X1)),bt),generate_b_nonce(X1))))
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_52,c_0_60]),c_0_86]),c_0_64])]),
[final] ).
cnf(c_0_131,plain,
( intruder_message(encrypt(quadruple(b,X1,generate_key(X1),generate_expiration_time(X1)),at))
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(spm,[status(thm)],[c_0_58,c_0_105]) ).
cnf(c_0_132,plain,
( b_holds(key(X1,X2))
| ~ intruder_message(encrypt(triple(X2,X1,generate_expiration_time(X3)),bt))
| ~ intruder_message(X3)
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ a_nonce(X3)
| ~ fresh_to_b(X3)
| ~ party_of_protocol(X2) ),
inference(spm,[status(thm)],[c_0_116,c_0_117]),
[final] ).
cnf(c_0_133,plain,
( intruder_message(encrypt(triple(a,generate_key(X1),generate_expiration_time(X1)),bt))
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(spm,[status(thm)],[c_0_118,c_0_80]),
[final] ).
cnf(c_0_134,plain,
( intruder_message(encrypt(triple(b,generate_key(X1),generate_expiration_time(X1)),bt))
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(spm,[status(thm)],[c_0_119,c_0_80]),
[final] ).
cnf(c_0_135,plain,
( intruder_message(encrypt(quadruple(b,X1,generate_key(X1),generate_expiration_time(X1)),bt))
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(spm,[status(thm)],[c_0_58,c_0_106]) ).
cnf(c_0_136,plain,
( message(sent(t,a,triple(encrypt(quadruple(a,X1,generate_key(X1),X2),at),encrypt(triple(a,generate_key(X1),X2),at),X3)))
| ~ intruder_message(encrypt(triple(a,X1,X2),at))
| ~ intruder_message(X3)
| ~ a_nonce(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_120,c_0_71]),c_0_86])]),
[final] ).
cnf(c_0_137,plain,
( intruder_message(encrypt(X1,generate_key(an_a_nonce)))
| ~ intruder_message(X1)
| ~ intruder_message(X2) ),
inference(spm,[status(thm)],[c_0_110,c_0_113]) ).
cnf(c_0_138,plain,
intruder_message(encrypt(generate_b_nonce(an_a_nonce),generate_key(an_a_nonce))),
inference(spm,[status(thm)],[c_0_110,c_0_121]),
[final] ).
cnf(c_0_139,plain,
( message(sent(t,b,triple(encrypt(quadruple(a,X1,generate_key(X1),X2),bt),encrypt(triple(b,generate_key(X1),X2),at),X3)))
| ~ intruder_message(encrypt(triple(b,X1,X2),at))
| ~ intruder_message(X3)
| ~ a_nonce(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_122,c_0_71]),c_0_86])]),
[final] ).
cnf(c_0_140,plain,
( b_holds(key(X1,X2))
| ~ intruder_message(encrypt(triple(X2,X1,generate_expiration_time(X3)),bt))
| ~ intruder_message(X3)
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ intruder_message(X4)
| ~ fresh_to_b(X3)
| ~ party_of_protocol(X2)
| ~ party_of_protocol(X4) ),
inference(spm,[status(thm)],[c_0_116,c_0_114]),
[final] ).
cnf(c_0_141,plain,
( b_holds(key(X1,X2))
| ~ intruder_message(encrypt(triple(X2,X1,generate_expiration_time(an_a_nonce)),bt))
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ party_of_protocol(X2) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_116,c_0_123]),c_0_124]),c_0_36])]),
[final] ).
cnf(c_0_142,plain,
( b_holds(key(X1,a))
| ~ intruder_message(encrypt(triple(a,X1,generate_expiration_time(an_a_nonce)),bt))
| ~ intruder_message(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[c_0_125,c_0_123])]),
[final] ).
cnf(c_0_143,plain,
( a_holds(key(X1,b))
| ~ intruder_message(encrypt(quadruple(b,an_a_nonce,X1,X2),at))
| ~ intruder_message(X3)
| ~ intruder_message(X4) ),
inference(spm,[status(thm)],[c_0_126,c_0_71]),
[final] ).
fof(c_0_144,plain,
! [X95,X96,X97,X98] :
( ~ intruder_message(X95)
| ~ intruder_message(X96)
| ~ intruder_message(X97)
| ~ intruder_message(X98)
| intruder_message(quadruple(X95,X96,X97,X98)) ),
inference(variable_rename,[status(thm)],[inference(fof_nnf,[status(thm)],[intruder_composes_quadruples])]) ).
fof(c_0_145,plain,
! [X99,X100,X101] :
( ~ intruder_message(encrypt(X99,X100))
| ~ intruder_holds(key(X100,X101))
| ~ party_of_protocol(X101)
| intruder_message(X100) ),
inference(variable_rename,[status(thm)],[inference(fof_nnf,[status(thm)],[intruder_interception])]) ).
fof(c_0_146,plain,
! [X86,X87,X88,X89] :
( ( intruder_message(X86)
| ~ intruder_message(quadruple(X86,X87,X88,X89)) )
& ( intruder_message(X87)
| ~ intruder_message(quadruple(X86,X87,X88,X89)) )
& ( intruder_message(X88)
| ~ intruder_message(quadruple(X86,X87,X88,X89)) )
& ( intruder_message(X89)
| ~ intruder_message(quadruple(X86,X87,X88,X89)) ) ),
inference(distribute,[status(thm)],[inference(variable_rename,[status(thm)],[inference(fof_nnf,[status(thm)],[intruder_decomposes_quadruples])])]) ).
fof(c_0_147,plain,
! [X110] : ~ a_nonce(generate_key(X110)),
inference(variable_rename,[status(thm)],[c_0_127]) ).
cnf(c_0_148,plain,
( b_holds(key(generate_key(an_a_nonce),b))
| ~ intruder_message(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_128,c_0_119]),c_0_124]),c_0_72]),c_0_36]),c_0_38]),c_0_53])]) ).
fof(c_0_149,plain,
! [X111] :
( a_nonce(generate_expiration_time(X111))
& a_nonce(generate_b_nonce(X111)) ),
inference(variable_rename,[status(thm)],[generated_times_and_nonces_are_nonces]) ).
cnf(c_0_150,plain,
( message(sent(b,t,triple(b,generate_b_nonce(encrypt(X1,generate_key(an_a_nonce))),encrypt(triple(encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt),encrypt(X1,generate_key(an_a_nonce)),generate_expiration_time(encrypt(X1,generate_key(an_a_nonce)))),bt))))
| ~ intruder_message(X1)
| ~ fresh_to_b(encrypt(X1,generate_key(an_a_nonce)))
| ~ party_of_protocol(encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt)) ),
inference(spm,[status(thm)],[c_0_47,c_0_129]),
[final] ).
cnf(c_0_151,plain,
( intruder_message(triple(encrypt(quadruple(b,X1,generate_key(X1),generate_expiration_time(X1)),at),encrypt(triple(a,generate_key(X1),generate_expiration_time(X1)),bt),generate_b_nonce(X1)))
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(spm,[status(thm)],[c_0_45,c_0_130]),
[final] ).
cnf(c_0_152,plain,
( message(sent(b,t,triple(b,generate_b_nonce(encrypt(generate_b_nonce(an_a_nonce),generate_key(an_a_nonce))),encrypt(triple(encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt),encrypt(generate_b_nonce(an_a_nonce),generate_key(an_a_nonce)),generate_expiration_time(encrypt(generate_b_nonce(an_a_nonce),generate_key(an_a_nonce)))),bt))))
| ~ fresh_to_b(encrypt(generate_b_nonce(an_a_nonce),generate_key(an_a_nonce)))
| ~ party_of_protocol(encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt)) ),
inference(spm,[status(thm)],[c_0_47,c_0_121]),
[final] ).
cnf(c_0_153,plain,
( intruder_message(encrypt(quadruple(b,X1,generate_key(X1),generate_expiration_time(X1)),at))
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(spm,[status(thm)],[c_0_131,c_0_80]),
[final] ).
cnf(c_0_154,plain,
( b_holds(key(generate_key(X1),a))
| ~ intruder_message(generate_key(X1))
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_132,c_0_133]),c_0_86]),c_0_64])]),
[final] ).
cnf(c_0_155,plain,
( b_holds(key(X1,X2))
| ~ intruder_message(triple(X2,X1,generate_expiration_time(X3)))
| ~ intruder_message(bt)
| ~ intruder_message(X3)
| ~ a_nonce(X3)
| ~ fresh_to_b(X3)
| ~ party_of_protocol(X2) ),
inference(csr,[status(thm)],[inference(csr,[status(thm)],[inference(spm,[status(thm)],[c_0_132,c_0_103]),c_0_100]),c_0_58]),
[final] ).
cnf(c_0_156,plain,
( b_holds(key(X1,X2))
| ~ intruder_message(X1)
| ~ intruder_message(X2)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1)
| ~ party_of_protocol(X2) ),
inference(spm,[status(thm)],[c_0_132,c_0_85]),
[final] ).
cnf(c_0_157,plain,
( b_holds(key(generate_key(X1),b))
| ~ intruder_message(generate_key(X1))
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_132,c_0_134]),c_0_72]),c_0_38])]),
[final] ).
cnf(c_0_158,plain,
( intruder_message(encrypt(quadruple(b,X1,generate_key(X1),generate_expiration_time(X1)),bt))
| ~ intruder_message(X1)
| ~ a_nonce(X1)
| ~ fresh_to_b(X1) ),
inference(spm,[status(thm)],[c_0_135,c_0_80]),
[final] ).
cnf(c_0_159,plain,
( intruder_message(triple(encrypt(quadruple(b,an_a_nonce,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),at),encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt),X1))
| ~ intruder_message(X1) ),
inference(spm,[status(thm)],[c_0_45,c_0_101]),
[final] ).
cnf(c_0_160,plain,
( b_stored(pair(encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt),encrypt(X1,generate_key(an_a_nonce))))
| ~ intruder_message(X1)
| ~ fresh_to_b(encrypt(X1,generate_key(an_a_nonce)))
| ~ party_of_protocol(encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt)) ),
inference(spm,[status(thm)],[c_0_55,c_0_129]),
[final] ).
cnf(c_0_161,plain,
( message(sent(b,t,triple(b,generate_b_nonce(encrypt(X1,generate_key(an_a_nonce))),encrypt(triple(X2,encrypt(X1,generate_key(an_a_nonce)),generate_expiration_time(encrypt(X1,generate_key(an_a_nonce)))),bt))))
| ~ intruder_message(X1)
| ~ intruder_message(X2)
| ~ fresh_to_b(encrypt(X1,generate_key(an_a_nonce)))
| ~ party_of_protocol(X2) ),
inference(spm,[status(thm)],[c_0_47,c_0_113]),
[final] ).
cnf(c_0_162,plain,
( message(sent(t,a,triple(encrypt(quadruple(a,X1,generate_key(X1),X2),at),encrypt(triple(a,generate_key(X1),X2),at),X3)))
| ~ intruder_message(triple(a,X1,X2))
| ~ intruder_message(at)
| ~ intruder_message(X3)
| ~ a_nonce(X1) ),
inference(spm,[status(thm)],[c_0_136,c_0_103]),
[final] ).
cnf(c_0_163,plain,
( message(sent(b,t,triple(b,generate_b_nonce(encrypt(X1,generate_key(an_a_nonce))),encrypt(triple(a,encrypt(X1,generate_key(an_a_nonce)),generate_expiration_time(encrypt(X1,generate_key(an_a_nonce)))),bt))))
| ~ intruder_message(X1)
| ~ fresh_to_b(encrypt(X1,generate_key(an_a_nonce))) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_34,c_0_99]),c_0_86])]),
[final] ).
cnf(c_0_164,plain,
( b_stored(pair(encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt),encrypt(generate_b_nonce(an_a_nonce),generate_key(an_a_nonce))))
| ~ fresh_to_b(encrypt(generate_b_nonce(an_a_nonce),generate_key(an_a_nonce)))
| ~ party_of_protocol(encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt)) ),
inference(spm,[status(thm)],[c_0_55,c_0_121]),
[final] ).
cnf(c_0_165,plain,
( b_holds(key(generate_key(an_a_nonce),X1))
| ~ intruder_message(triple(X1,generate_key(an_a_nonce),generate_expiration_time(X2)))
| ~ intruder_message(bt)
| ~ intruder_message(X2)
| ~ fresh_to_b(X2)
| ~ party_of_protocol(X1) ),
inference(csr,[status(thm)],[inference(spm,[status(thm)],[c_0_128,c_0_103]),c_0_58]),
[final] ).
cnf(c_0_166,plain,
( b_holds(key(generate_key(an_a_nonce),X1))
| ~ intruder_message(generate_key(an_a_nonce))
| ~ intruder_message(X1)
| ~ fresh_to_b(generate_key(an_a_nonce))
| ~ party_of_protocol(X1) ),
inference(spm,[status(thm)],[c_0_128,c_0_85]),
[final] ).
cnf(c_0_167,plain,
( b_stored(pair(X1,encrypt(X2,generate_key(an_a_nonce))))
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ fresh_to_b(encrypt(X2,generate_key(an_a_nonce)))
| ~ party_of_protocol(X1) ),
inference(spm,[status(thm)],[c_0_55,c_0_113]),
[final] ).
cnf(c_0_168,plain,
( b_stored(pair(a,encrypt(X1,generate_key(an_a_nonce))))
| ~ intruder_message(X1)
| ~ fresh_to_b(encrypt(X1,generate_key(an_a_nonce))) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_43,c_0_99]),c_0_86])]),
[final] ).
cnf(c_0_169,plain,
( intruder_message(encrypt(X1,generate_key(an_a_nonce)))
| ~ intruder_message(X1) ),
inference(spm,[status(thm)],[c_0_137,c_0_80]),
[final] ).
cnf(c_0_170,plain,
( b_holds(key(generate_key(an_a_nonce),X1))
| ~ intruder_message(encrypt(triple(X1,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt))
| ~ intruder_message(X1)
| ~ party_of_protocol(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_102,c_0_138]),c_0_124]),c_0_36])]),
[final] ).
cnf(c_0_171,plain,
( message(sent(t,a,triple(encrypt(quadruple(b,X1,generate_key(X1),X2),at),encrypt(triple(a,generate_key(X1),X2),bt),X3)))
| ~ intruder_message(triple(a,X1,X2))
| ~ intruder_message(bt)
| ~ intruder_message(X3)
| ~ a_nonce(X1) ),
inference(spm,[status(thm)],[c_0_84,c_0_103]),
[final] ).
cnf(c_0_172,plain,
( message(sent(t,b,triple(encrypt(quadruple(a,X1,generate_key(X1),X2),bt),encrypt(triple(b,generate_key(X1),X2),at),X3)))
| ~ intruder_message(triple(b,X1,X2))
| ~ intruder_message(at)
| ~ intruder_message(X3)
| ~ a_nonce(X1) ),
inference(spm,[status(thm)],[c_0_139,c_0_103]),
[final] ).
cnf(c_0_173,plain,
( message(sent(t,b,triple(encrypt(quadruple(b,X1,generate_key(X1),X2),bt),encrypt(triple(b,generate_key(X1),X2),bt),X3)))
| ~ intruder_message(triple(b,X1,X2))
| ~ intruder_message(bt)
| ~ intruder_message(X3)
| ~ a_nonce(X1) ),
inference(spm,[status(thm)],[c_0_87,c_0_103]),
[final] ).
cnf(c_0_174,plain,
( b_holds(key(X1,X2))
| ~ intruder_message(triple(X2,X1,generate_expiration_time(X3)))
| ~ intruder_message(bt)
| ~ intruder_message(X3)
| ~ intruder_message(X4)
| ~ fresh_to_b(X3)
| ~ party_of_protocol(X2)
| ~ party_of_protocol(X4) ),
inference(csr,[status(thm)],[inference(csr,[status(thm)],[inference(spm,[status(thm)],[c_0_140,c_0_103]),c_0_100]),c_0_58]),
[final] ).
cnf(c_0_175,plain,
( b_holds(key(X1,X2))
| ~ intruder_message(X1)
| ~ intruder_message(X2)
| ~ intruder_message(X3)
| ~ fresh_to_b(X1)
| ~ party_of_protocol(X2)
| ~ party_of_protocol(X3) ),
inference(spm,[status(thm)],[c_0_140,c_0_85]),
[final] ).
cnf(c_0_176,plain,
( b_holds(key(an_a_nonce,X1))
| ~ intruder_message(X1)
| ~ party_of_protocol(X1) ),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_141,c_0_85]),c_0_124]),c_0_36])]),
[final] ).
cnf(c_0_177,plain,
( b_holds(key(X1,X2))
| ~ intruder_message(triple(X2,X1,generate_expiration_time(an_a_nonce)))
| ~ intruder_message(bt)
| ~ party_of_protocol(X2) ),
inference(csr,[status(thm)],[inference(csr,[status(thm)],[inference(spm,[status(thm)],[c_0_141,c_0_103]),c_0_100]),c_0_58]),
[final] ).
cnf(c_0_178,plain,
( message(sent(a,b,pair(X1,encrypt(X2,X3))))
| ~ intruder_message(quadruple(b,an_a_nonce,X3,X4))
| ~ intruder_message(at)
| ~ intruder_message(X2)
| ~ intruder_message(X1) ),
inference(spm,[status(thm)],[c_0_89,c_0_103]),
[final] ).
cnf(c_0_179,plain,
( b_holds(key(X1,a))
| ~ intruder_message(triple(a,X1,generate_expiration_time(an_a_nonce)))
| ~ intruder_message(bt) ),
inference(csr,[status(thm)],[inference(spm,[status(thm)],[c_0_142,c_0_103]),c_0_100]),
[final] ).
cnf(c_0_180,plain,
( a_holds(key(X1,b))
| ~ intruder_message(quadruple(b,an_a_nonce,X1,X2))
| ~ intruder_message(at)
| ~ intruder_message(X3)
| ~ intruder_message(X4) ),
inference(spm,[status(thm)],[c_0_143,c_0_103]),
[final] ).
cnf(c_0_181,plain,
( intruder_message(quadruple(X1,X2,X3,X4))
| ~ intruder_message(X1)
| ~ intruder_message(X2)
| ~ intruder_message(X3)
| ~ intruder_message(X4) ),
inference(split_conjunct,[status(thm)],[c_0_144]),
[final] ).
cnf(c_0_182,plain,
( intruder_message(X2)
| ~ intruder_message(encrypt(X1,X2))
| ~ intruder_holds(key(X2,X3))
| ~ party_of_protocol(X3) ),
inference(split_conjunct,[status(thm)],[c_0_145]),
[final] ).
cnf(c_0_183,plain,
( intruder_message(X1)
| ~ intruder_message(quadruple(X1,X2,X3,X4)) ),
inference(split_conjunct,[status(thm)],[c_0_146]),
[final] ).
cnf(c_0_184,plain,
( intruder_message(X1)
| ~ intruder_message(quadruple(X2,X1,X3,X4)) ),
inference(split_conjunct,[status(thm)],[c_0_146]),
[final] ).
cnf(c_0_185,plain,
( intruder_message(X1)
| ~ intruder_message(quadruple(X2,X3,X1,X4)) ),
inference(split_conjunct,[status(thm)],[c_0_146]),
[final] ).
cnf(c_0_186,plain,
( intruder_message(X1)
| ~ intruder_message(quadruple(X2,X3,X4,X1)) ),
inference(split_conjunct,[status(thm)],[c_0_146]),
[final] ).
cnf(c_0_187,plain,
~ a_nonce(generate_key(X1)),
inference(split_conjunct,[status(thm)],[c_0_147]),
[final] ).
cnf(c_0_188,plain,
b_holds(key(generate_key(an_a_nonce),b)),
inference(spm,[status(thm)],[c_0_148,c_0_80]),
[final] ).
cnf(c_0_189,plain,
intruder_message(encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt)),
inference(spm,[status(thm)],[c_0_75,c_0_121]),
[final] ).
cnf(c_0_190,plain,
b_holds(key(generate_key(an_a_nonce),a)),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_81,c_0_108]),c_0_124]),c_0_86]),c_0_36]),c_0_64])]),
[final] ).
cnf(c_0_191,plain,
a_holds(key(generate_key(an_a_nonce),b)),
inference(spm,[status(thm)],[c_0_112,c_0_65]),
[final] ).
cnf(c_0_192,plain,
b_holds(key(an_a_nonce,a)),
inference(cn,[status(thm)],[inference(rw,[status(thm)],[inference(spm,[status(thm)],[c_0_142,c_0_91]),c_0_124])]),
[final] ).
cnf(c_0_193,plain,
b_holds(key(bt,t)),
inference(split_conjunct,[status(thm)],[b_hold_key_bt_for_t]),
[final] ).
cnf(c_0_194,plain,
a_holds(key(at,t)),
inference(split_conjunct,[status(thm)],[a_holds_key_at_for_t]),
[final] ).
cnf(c_0_195,plain,
a_nonce(generate_expiration_time(X1)),
inference(split_conjunct,[status(thm)],[c_0_149]),
[final] ).
cnf(c_0_196,plain,
a_nonce(generate_b_nonce(X1)),
inference(split_conjunct,[status(thm)],[c_0_149]),
[final] ).
%------------------------------------------------------------------------------
%----ORIGINAL SYSTEM OUTPUT
% 0.00/0.12 % Problem : SWV013+1 : TPTP v9.2.1. Released v2.4.0.
% 0.00/0.12 % Command : /export/starexec/sandbox2/solver/bin/lemma_parallel_prover %s --lemma-prover /export/starexec/sandbox2/solver/bin/cse --final-prover /export/starexec/sandbox2/solver/bin/eprover --proof-time %d --global-time-limit %d
% 0.15/0.33 % Computer : n018.cluster.edu
% 0.15/0.33 % Model : x86_64 x86_64
% 0.15/0.33 % CPU : Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz
% 0.15/0.33 % Memory : 8042.1875MB
% 0.15/0.33 % OS : Linux 3.10.0-693.el7.x86_64
% 0.15/0.33 % CPULimit : 300
% 0.15/0.33 % WCLimit : 300
% 0.15/0.33 % DateTime : Tue May 5 04:53:17 EDT 2026
% 0.15/0.33 % CPUTime :
% 0.15/0.34 % start to proof: theBenchmark
% 1.31/1.74 % Version : CSE_E---1.7
% 1.31/1.74 % Problem : theBenchmark.p
% 1.31/1.74 % SZS status Satisfiable for theBenchmark.p
% 1.31/1.74 % SZS output start Saturation
% See solution above
% 1.31/1.74 % Total time : 1.369s
%------------------------------------------------------------------------------