%------------------------------------------------------------------------------
% File : Vampire-SAT---5.0.1
% Problem : SWV016-1 : TPTP v9.3.1. Released v2.4.0.
% Transfm : none
% Format : tptp:raw
% Command : run_vampire /export/starexec/sandbox2/benchmark/theBenchmark.p 300 SAT
% Computer : n013.cluster.edu
% Model : x86_64 x86_64
% CPU : Intel(R) Xeon(R) CPU E5-2620 v4 2.10GHz
% Memory : 8046.5625MB
% OS : Linux 6.8.0-71-generic
% CPULimit : 300s
% WCLimit : 300s
% DateTime : Tue Sep 29 01:19:59 PM UTC 2026
% Result : Satisfiable 0.20s 0.28s
% Output : Saturation 0.20s
% Verified :
% SZS Type : ERROR: Analysing output (MakeTreeStats fails)
% Comments :
%------------------------------------------------------------------------------
cnf(u127,negated_conjecture,
( ~ b_holds(key(X0,X2))
| ~ intruder_message(X0) ) ).
cnf(u168,axiom,
b_stored(pair(X0,X1)) ).
cnf(u241,axiom,
( intruder_message(encrypt(X0,X1))
| ~ intruder_message(X1)
| ~ intruder_message(X0) ) ).
cnf(u285,axiom,
intruder_message(generate_b_nonce(X1)) ).
cnf(u300,negated_conjecture,
( ~ intruder_message(X1)
| ~ a_key(X1) ) ).
cnf(u319,negated_conjecture,
~ a_key(pair(X0,X1)) ).
cnf(u322,negated_conjecture,
~ a_key(encrypt(X0,X1)) ).
cnf(u325,negated_conjecture,
~ a_key(triple(X0,X1,X2)) ).
cnf(u328,negated_conjecture,
~ a_key(quadruple(X0,X1,X2,X3)) ).
cnf(u338,axiom,
( ~ fresh_to_b(X1)
| ~ intruder_message(X1)
| intruder_message(generate_b_nonce(X1)) ) ).
cnf(u348,axiom,
intruder_message(encrypt(triple(X0,X1,generate_expiration_time(X1)),bt)) ).
cnf(u381,axiom,
~ intruder_message(at) ).
cnf(u434,axiom,
message(sent(t,a,triple(encrypt(quadruple(b,an_a_nonce,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),X0),encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt),generate_b_nonce(an_a_nonce)))) ).
cnf(u509,axiom,
intruder_message(encrypt(X0,generate_key(an_a_nonce))) ).
cnf(u512,axiom,
( ~ intruder_message(X0)
| intruder_message(encrypt(X0,generate_key(an_a_nonce))) ) ).
cnf(u519,axiom,
b_holds(key(generate_key(an_a_nonce),X0)) ).
cnf(u524,axiom,
~ fresh_to_b(encrypt(X0,generate_key(an_a_nonce))) ).
cnf(u527,axiom,
message(sent(b,t,triple(b,generate_b_nonce(encrypt(X0,generate_key(an_a_nonce))),encrypt(triple(a,encrypt(X0,generate_key(an_a_nonce)),generate_expiration_time(encrypt(X0,generate_key(an_a_nonce)))),bt)))) ).
cnf(u540,axiom,
message(sent(t,X1,triple(encrypt(quadruple(b,X0,generate_key(X0),generate_expiration_time(X0)),X2),encrypt(triple(X1,generate_key(X0),generate_expiration_time(X0)),bt),generate_b_nonce(X0)))) ).
cnf(u562,axiom,
b_holds(key(generate_key(X0),X1)) ).
cnf(u570,negated_conjecture,
~ intruder_message(generate_key(X1)) ).
cnf(u617,axiom,
intruder_message(encrypt(X2,generate_key(X1))) ).
cnf(u620,axiom,
( ~ a_stored(pair(b,X1))
| ~ intruder_message(X2)
| intruder_message(encrypt(X2,generate_key(X1))) ) ).
cnf(u627,axiom,
message(sent(a,b,pair(encrypt(triple(a,generate_key(X0),generate_expiration_time(X0)),bt),encrypt(generate_b_nonce(X0),generate_key(X0))))) ).
cnf(u639,axiom,
message(sent(a,b,pair(encrypt(triple(X0,generate_key(X1),generate_expiration_time(X1)),bt),encrypt(generate_b_nonce(X1),generate_key(X1))))) ).
cnf(u651,axiom,
~ fresh_to_b(encrypt(X0,generate_key(X1))) ).
cnf(u654,axiom,
message(sent(b,t,triple(b,generate_b_nonce(encrypt(X0,generate_key(X1))),encrypt(triple(a,encrypt(X0,generate_key(X1)),generate_expiration_time(encrypt(X0,generate_key(X1)))),bt)))) ).
cnf(u682,axiom,
message(sent(a,X2,pair(encrypt(triple(a,generate_key(X0),X4),X1),encrypt(X3,generate_key(X0))))) ).
cnf(u719,axiom,
intruder_message(encrypt(triple(X1,generate_key(X5),X6),X2)) ).
cnf(u730,axiom,
intruder_message(encrypt(quadruple(X3,X5,generate_key(X5),X6),X0)) ).
cnf(u757,axiom,
message(sent(a,X2,pair(encrypt(triple(X0,generate_key(X4),X5),X1),encrypt(X3,generate_key(X4))))) ).
cnf(b_creates_freash_nonces_in_time_11,axiom,
( ~ message(sent(X0,b,pair(X0,X1)))
| ~ fresh_to_b(X1)
| b_stored(pair(X0,X1)) ) ).
cnf(intruder_decomposes_triples_21,axiom,
( ~ intruder_message(triple(X1,X0,X2))
| intruder_message(X0) ) ).
cnf(co1_40,negated_conjecture,
( ~ intruder_holds(key(X0,X2))
| ~ b_holds(key(X0,X1)) ) ).
cnf(u547,axiom,
( message(sent(a,b,pair(encrypt(triple(X0,generate_key(X1),generate_expiration_time(X1)),bt),encrypt(generate_b_nonce(X1),generate_key(X1)))))
| ~ a_stored(pair(b,X1)) ) ).
cnf(u451,axiom,
intruder_message(encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt)) ).
cnf(u694,axiom,
intruder_message(pair(encrypt(triple(a,generate_key(X0),X1),X2),encrypt(X3,generate_key(X0)))) ).
cnf(u352,axiom,
( ~ intruder_message(encrypt(generate_b_nonce(X0),X0))
| ~ party_of_protocol(X1)
| ~ a_key(X0)
| b_holds(key(X0,X1)) ) ).
cnf(u532,axiom,
intruder_message(triple(b,generate_b_nonce(encrypt(X0,generate_key(an_a_nonce))),encrypt(triple(a,encrypt(X0,generate_key(an_a_nonce)),generate_expiration_time(encrypt(X0,generate_key(an_a_nonce)))),bt))) ).
cnf(u762,axiom,
intruder_message(pair(encrypt(triple(X0,generate_key(X1),X2),X3),encrypt(X4,generate_key(X1)))) ).
cnf(u550,axiom,
intruder_message(encrypt(quadruple(b,X0,generate_key(X0),generate_expiration_time(X0)),X1)) ).
cnf(intruder_decomposes_quadruples_24,axiom,
( ~ intruder_message(quadruple(X1,X0,X2,X3))
| intruder_message(X0) ) ).
cnf(u408,axiom,
( message(sent(t,a,triple(encrypt(quadruple(b,an_a_nonce,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),X0),encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt),generate_b_nonce(an_a_nonce))))
| ~ t_holds(key(X0,a)) ) ).
cnf(u205,axiom,
message(sent(b,t,triple(b,generate_b_nonce(an_a_nonce),encrypt(triple(a,an_a_nonce,generate_expiration_time(an_a_nonce)),bt)))) ).
cnf(u462,axiom,
intruder_message(encrypt(quadruple(b,an_a_nonce,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),X0)) ).
cnf(intruder_composes_quadruples_29,axiom,
( intruder_message(quadruple(X0,X1,X2,X3))
| ~ intruder_message(X3)
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ intruder_message(X0) ) ).
cnf(u302,negated_conjecture,
~ a_key(a) ).
cnf(t_holds_key_bt_for_b_14,axiom,
t_holds(key(bt,b)) ).
cnf(u477,axiom,
( intruder_message(pair(X0,encrypt(X1,generate_key(an_a_nonce))))
| ~ intruder_message(X1)
| ~ intruder_message(X0) ) ).
cnf(u129,negated_conjecture,
~ intruder_message(bt) ).
cnf(intruder_decomposes_quadruples_26,axiom,
( ~ intruder_message(quadruple(X1,X2,X3,X0))
| intruder_message(X0) ) ).
cnf(u709,axiom,
( ~ intruder_message(triple(X3,X4,encrypt(triple(X1,X5,X6),X2)))
| ~ t_holds(key(X2,X3))
| ~ t_holds(key(X0,X1))
| ~ party_of_protocol(X3)
| ~ a_nonce(X5)
| intruder_message(encrypt(quadruple(X3,X5,generate_key(X5),X6),X0)) ) ).
cnf(generated_times_and_nonces_are_nonces_37,axiom,
a_nonce(generate_b_nonce(X0)) ).
cnf(u667,axiom,
( intruder_message(triple(encrypt(quadruple(X4,X0,generate_key(X0),X6),X1),encrypt(triple(X2,generate_key(X0),X6),X3),X5))
| ~ t_holds(key(X1,X2))
| ~ t_holds(key(X3,X4))
| ~ intruder_message(triple(X4,X5,encrypt(triple(X2,X0,X6),X3)))
| ~ party_of_protocol(X4)
| ~ a_nonce(X0) ) ).
cnf(u470,axiom,
( message(sent(a,b,pair(X1,encrypt(X0,generate_key(an_a_nonce)))))
| ~ intruder_message(X1)
| ~ intruder_message(X0) ) ).
cnf(u549,axiom,
intruder_message(encrypt(triple(X0,generate_key(X1),generate_expiration_time(X1)),bt)) ).
cnf(u253,axiom,
intruder_message(b) ).
cnf(u310,negated_conjecture,
( ~ a_key(quadruple(X0,X1,X2,X3))
| ~ intruder_message(X3)
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ intruder_message(X0) ) ).
cnf(intruder_decomposes_triples_22,axiom,
( ~ intruder_message(triple(X1,X2,X0))
| intruder_message(X0) ) ).
cnf(u109,axiom,
intruder_message(a) ).
cnf(intruder_holds_key_32,axiom,
( intruder_holds(key(X0,X1))
| ~ intruder_message(X0)
| ~ party_of_protocol(X1) ) ).
cnf(u366,axiom,
( ~ intruder_message(triple(encrypt(quadruple(X0,X1,X4,X5),at),X2,X3))
| message(sent(a,X0,pair(X2,encrypt(X3,X4))))
| ~ a_stored(pair(X0,X1)) ) ).
cnf(an_a_nonce_is_a_nonce_34,axiom,
a_nonce(an_a_nonce) ).
cnf(u516,axiom,
( b_holds(key(generate_key(an_a_nonce),X0))
| ~ party_of_protocol(X0) ) ).
cnf(a_stored_message_i_4,axiom,
a_stored(pair(b,an_a_nonce)) ).
cnf(u658,axiom,
intruder_message(triple(b,generate_b_nonce(encrypt(X0,generate_key(X1))),encrypt(triple(a,encrypt(X0,generate_key(X1)),generate_expiration_time(encrypt(X0,generate_key(X1)))),bt))) ).
cnf(intruder_decomposes_quadruples_23,axiom,
( ~ intruder_message(quadruple(X0,X1,X2,X3))
| intruder_message(X0) ) ).
cnf(intruder_key_encrypts_33,axiom,
( ~ intruder_holds(key(X1,X2))
| intruder_message(encrypt(X0,X1))
| ~ intruder_message(X0)
| ~ party_of_protocol(X2) ) ).
cnf(u587,axiom,
( intruder_message(pair(X1,encrypt(X0,generate_key(X2))))
| ~ intruder_message(X1)
| ~ a_stored(pair(b,X2))
| ~ intruder_message(X0) ) ).
cnf(u446,axiom,
b_holds(key(generate_key(an_a_nonce),a)) ).
cnf(u273,axiom,
( intruder_message(triple(b,generate_b_nonce(X0),encrypt(triple(X1,X0,generate_expiration_time(X0)),bt)))
| ~ intruder_message(pair(X1,X0))
| ~ party_of_protocol(X1)
| ~ fresh_to_b(X0) ) ).
cnf(u546,axiom,
intruder_message(triple(encrypt(quadruple(b,X0,generate_key(X0),generate_expiration_time(X0)),X1),encrypt(triple(X2,generate_key(X0),generate_expiration_time(X0)),bt),generate_b_nonce(X0))) ).
cnf(t_holds_key_at_for_a_13,axiom,
t_holds(key(at,a)) ).
cnf(u250,axiom,
intruder_message(triple(b,generate_b_nonce(an_a_nonce),encrypt(triple(a,an_a_nonce,generate_expiration_time(an_a_nonce)),bt))) ).
cnf(intruder_message_sent_31,axiom,
( message(sent(X0,X1,X2))
| ~ intruder_message(X2)
| ~ party_of_protocol(X1)
| ~ party_of_protocol(X0) ) ).
cnf(b_is_party_of_protocol_8,axiom,
party_of_protocol(b) ).
cnf(u555,axiom,
( message(sent(a,b,pair(X2,encrypt(X1,generate_key(X0)))))
| ~ intruder_message(X1)
| ~ intruder_message(X2)
| ~ a_stored(pair(b,X0)) ) ).
cnf(server_t_generates_key_16,axiom,
( ~ message(sent(X1,t,triple(X1,X6,encrypt(triple(X0,X2,X3),X5))))
| ~ a_nonce(X2)
| message(sent(t,X0,triple(encrypt(quadruple(X1,X2,generate_key(X2),X3),X4),encrypt(triple(X0,generate_key(X2),X3),X5),X6)))
| ~ t_holds(key(X4,X0))
| ~ t_holds(key(X5,X1)) ) ).
cnf(u95,axiom,
intruder_message(pair(a,an_a_nonce)) ).
cnf(b_creates_freash_nonces_in_time_10,axiom,
( ~ message(sent(X1,b,pair(X1,X0)))
| ~ fresh_to_b(X0)
| message(sent(b,t,triple(b,generate_b_nonce(X0),encrypt(triple(X1,X0,generate_expiration_time(X0)),bt)))) ) ).
cnf(u445,axiom,
intruder_message(pair(encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt),encrypt(generate_b_nonce(an_a_nonce),generate_key(an_a_nonce)))) ).
cnf(intruder_decomposes_triples_20,axiom,
( ~ intruder_message(triple(X0,X1,X2))
| intruder_message(X0) ) ).
cnf(u311,negated_conjecture,
( ~ a_key(triple(X0,X1,X2))
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ intruder_message(X0) ) ).
cnf(u545,axiom,
( message(sent(a,b,pair(encrypt(triple(a,generate_key(X0),generate_expiration_time(X0)),bt),encrypt(generate_b_nonce(X0),generate_key(X0)))))
| ~ a_stored(pair(b,X0)) ) ).
cnf(a_forwards_secure_5,axiom,
( ~ message(sent(t,a,triple(encrypt(quadruple(X0,X4,X3,X5),at),X1,X2)))
| ~ a_stored(pair(X0,X4))
| message(sent(a,X0,pair(X1,encrypt(X2,X3)))) ) ).
cnf(u204,axiom,
( message(sent(b,t,triple(b,generate_b_nonce(X0),encrypt(triple(X1,X0,generate_expiration_time(X0)),bt))))
| ~ fresh_to_b(X0)
| ~ intruder_message(pair(X1,X0))
| ~ party_of_protocol(X1) ) ).
cnf(intruder_decomposes_pairs_19,axiom,
( ~ intruder_message(pair(X1,X0))
| intruder_message(X0) ) ).
cnf(u306,negated_conjecture,
( ~ a_key(pair(X0,X1))
| ~ intruder_message(X1)
| ~ intruder_message(X0) ) ).
cnf(intruder_decomposes_pairs_18,axiom,
( ~ intruder_message(pair(X0,X1))
| intruder_message(X0) ) ).
cnf(u631,axiom,
intruder_message(pair(encrypt(triple(a,generate_key(X0),generate_expiration_time(X0)),bt),encrypt(generate_b_nonce(X0),generate_key(X0)))) ).
cnf(intruder_composes_triples_28,axiom,
( intruder_message(triple(X0,X1,X2))
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| ~ intruder_message(X0) ) ).
cnf(u588,axiom,
( message(sent(b,t,triple(b,generate_b_nonce(encrypt(X0,generate_key(X1))),encrypt(triple(a,encrypt(X0,generate_key(X1)),generate_expiration_time(encrypt(X0,generate_key(X1)))),bt))))
| ~ a_stored(pair(b,X1))
| ~ fresh_to_b(encrypt(X0,generate_key(X1)))
| ~ intruder_message(X0) ) ).
cnf(b_hold_key_bt_for_t_7,axiom,
b_holds(key(bt,t)) ).
cnf(u54,axiom,
~ a_key(generate_b_nonce(X0)) ).
cnf(intruder_can_record_17,axiom,
( ~ message(sent(X1,X2,X0))
| intruder_message(X0) ) ).
cnf(intruder_decomposes_quadruples_25,axiom,
( ~ intruder_message(quadruple(X1,X2,X0,X3))
| intruder_message(X0) ) ).
cnf(t_is_party_of_protocol_15,axiom,
party_of_protocol(t) ).
cnf(u277,axiom,
( intruder_message(encrypt(triple(X0,X1,generate_expiration_time(X1)),bt))
| ~ party_of_protocol(X0)
| ~ fresh_to_b(X1)
| ~ intruder_message(pair(X0,X1)) ) ).
cnf(u52,axiom,
~ a_key(an_a_nonce) ).
cnf(u430,axiom,
( ~ intruder_message(encrypt(quadruple(X0,X4,X3,X5),at))
| ~ a_stored(pair(X0,X4))
| ~ intruder_message(X2)
| ~ intruder_message(X1)
| message(sent(a,X0,pair(X1,encrypt(X2,X3)))) ) ).
cnf(u252,axiom,
intruder_message(generate_b_nonce(an_a_nonce)) ).
cnf(u407,axiom,
( message(sent(t,X1,triple(encrypt(quadruple(X2,X0,generate_key(X0),X3),X4),encrypt(triple(X1,generate_key(X0),X3),X5),X6)))
| ~ a_nonce(X0)
| ~ t_holds(key(X4,X1))
| ~ t_holds(key(X5,X2))
| ~ intruder_message(triple(X2,X6,encrypt(triple(X1,X0,X3),X5)))
| ~ party_of_protocol(X2) ) ).
cnf(u270,axiom,
( ~ intruder_message(encrypt(triple(X1,X0,generate_expiration_time(X2)),bt))
| ~ a_key(X0)
| ~ party_of_protocol(X1)
| ~ intruder_message(encrypt(generate_b_nonce(X2),X0))
| b_holds(key(X0,X1)) ) ).
cnf(u706,axiom,
( message(sent(a,X2,pair(encrypt(triple(X0,generate_key(X4),X5),X1),encrypt(X3,generate_key(X4)))))
| ~ t_holds(key(X1,X2))
| ~ intruder_message(triple(X2,X3,encrypt(triple(X0,X4,X5),X1)))
| ~ party_of_protocol(X2)
| ~ a_nonce(X4)
| ~ t_holds(key(at,X0))
| ~ a_stored(pair(X2,X4)) ) ).
cnf(u108,axiom,
intruder_message(an_a_nonce) ).
cnf(intruder_composes_pairs_27,axiom,
( intruder_message(pair(X0,X1))
| ~ intruder_message(X1)
| ~ intruder_message(X0) ) ).
cnf(nothing_is_a_nonce_and_a_key_38,axiom,
( ~ a_nonce(X0)
| ~ a_key(X0) ) ).
cnf(u643,axiom,
intruder_message(pair(encrypt(triple(X0,generate_key(X1),generate_expiration_time(X1)),bt),encrypt(generate_b_nonce(X1),generate_key(X1)))) ).
cnf(u708,axiom,
( ~ intruder_message(triple(X3,X4,encrypt(triple(X1,X5,X6),X2)))
| ~ t_holds(key(X2,X3))
| ~ t_holds(key(X0,X1))
| ~ party_of_protocol(X3)
| ~ a_nonce(X5)
| intruder_message(encrypt(triple(X1,generate_key(X5),X6),X2)) ) ).
cnf(u53,axiom,
~ a_key(generate_expiration_time(X0)) ).
cnf(u457,axiom,
intruder_message(triple(encrypt(quadruple(b,an_a_nonce,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),X0),encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt),generate_b_nonce(an_a_nonce))) ).
cnf(a_sent_message_i_to_b_3,axiom,
message(sent(a,b,pair(a,an_a_nonce))) ).
cnf(u441,axiom,
message(sent(a,b,pair(encrypt(triple(a,generate_key(an_a_nonce),generate_expiration_time(an_a_nonce)),bt),encrypt(generate_b_nonce(an_a_nonce),generate_key(an_a_nonce))))) ).
cnf(u742,axiom,
( ~ a_stored(pair(X2,X3))
| ~ intruder_message(X1)
| ~ intruder_message(X0)
| intruder_message(pair(X1,encrypt(X0,generate_key(X3)))) ) ).
cnf(u554,axiom,
( ~ intruder_message(encrypt(generate_b_nonce(X0),generate_key(X0)))
| ~ party_of_protocol(X1)
| b_holds(key(generate_key(X0),X1)) ) ).
cnf(u450,axiom,
intruder_message(encrypt(generate_b_nonce(an_a_nonce),generate_key(an_a_nonce))) ).
cnf(u307,negated_conjecture,
( ~ a_key(encrypt(X0,X1))
| ~ intruder_message(X1)
| ~ intruder_message(X0) ) ).
cnf(u278,axiom,
( ~ intruder_message(pair(X0,X1))
| ~ party_of_protocol(X0)
| ~ fresh_to_b(X1)
| intruder_message(generate_b_nonce(X1)) ) ).
cnf(u478,axiom,
( message(sent(b,t,triple(b,generate_b_nonce(encrypt(X0,generate_key(an_a_nonce))),encrypt(triple(a,encrypt(X0,generate_key(an_a_nonce)),generate_expiration_time(encrypt(X0,generate_key(an_a_nonce)))),bt))))
| ~ fresh_to_b(encrypt(X0,generate_key(an_a_nonce)))
| ~ intruder_message(X0) ) ).
cnf(generated_times_and_nonces_are_nonces_36,axiom,
a_nonce(generate_expiration_time(X0)) ).
cnf(u699,axiom,
intruder_message(encrypt(triple(a,generate_key(X0),X1),X2)) ).
cnf(u447,negated_conjecture,
~ intruder_message(generate_key(an_a_nonce)) ).
cnf(u210,axiom,
( ~ message(sent(X1,b,pair(encrypt(triple(X1,X0,generate_expiration_time(X2)),bt),encrypt(generate_b_nonce(X2),X0))))
| ~ a_key(X0)
| b_holds(key(X0,X1)) ) ).
cnf(intruder_interception_30,axiom,
( ~ intruder_holds(key(X0,X1))
| intruder_message(X0)
| ~ intruder_message(encrypt(X2,X0))
| ~ party_of_protocol(X1) ) ).
cnf(u303,negated_conjecture,
~ a_key(b) ).
cnf(u305,negated_conjecture,
~ a_key(pair(a,an_a_nonce)) ).
cnf(a_is_party_of_protocol_2,axiom,
party_of_protocol(a) ).
cnf(u737,axiom,
( message(sent(a,X0,pair(X3,encrypt(X2,generate_key(X1)))))
| ~ intruder_message(X2)
| ~ intruder_message(X3)
| ~ a_stored(pair(X0,X1)) ) ).
cnf(u405,axiom,
( message(sent(t,X1,triple(encrypt(quadruple(b,X0,generate_key(X0),generate_expiration_time(X0)),X2),encrypt(triple(X1,generate_key(X0),generate_expiration_time(X0)),bt),generate_b_nonce(X0))))
| ~ a_nonce(X0)
| ~ t_holds(key(X2,X1))
| ~ fresh_to_b(X0)
| ~ intruder_message(pair(X1,X0))
| ~ party_of_protocol(X1) ) ).
cnf(u668,axiom,
( message(sent(a,X2,pair(encrypt(triple(a,generate_key(X0),X4),X1),encrypt(X3,generate_key(X0)))))
| ~ t_holds(key(X1,X2))
| ~ intruder_message(triple(X2,X3,encrypt(triple(a,X0,X4),X1)))
| ~ party_of_protocol(X2)
| ~ a_stored(pair(X2,X0))
| ~ a_nonce(X0) ) ).
cnf(u251,axiom,
intruder_message(encrypt(triple(a,an_a_nonce,generate_expiration_time(an_a_nonce)),bt)) ).
cnf(u218,axiom,
( ~ intruder_message(pair(encrypt(triple(X1,X0,generate_expiration_time(X2)),bt),encrypt(generate_b_nonce(X2),X0)))
| b_holds(key(X0,X1))
| ~ a_key(X0)
| ~ party_of_protocol(X1) ) ).
cnf(generated_keys_are_keys_39,axiom,
a_key(generate_key(X0)) ).
cnf(nonce_a_is_fresh_to_b_9,axiom,
fresh_to_b(an_a_nonce) ).
%------------------------------------------------------------------------------
%----ORIGINAL SYSTEM OUTPUT
% 0.00/0.03 % Problem : SWV016-1 : TPTP v9.3.1. Released v2.4.0.
% 0.00/0.05 % Command : run_vampire /export/starexec/sandbox2/benchmark/theBenchmark.p 300 SAT
% 0.08/0.19 % Computer : n013.cluster.edu
% 0.08/0.19 % Model : x86_64 x86_64
% 0.08/0.19 % CPU : Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz
% 0.08/0.19 % Memory : 8046.5625MB
% 0.08/0.19 % OS : Linux 6.8.0-71-generic
% 0.08/0.19 % CPULimit : 300
% 0.08/0.19 % WCLimit : 300
% 0.08/0.19 % DateTime : Mon Sep 28 09:41:57 UTC 2026
% 0.08/0.19 % CPUTime :
% 0.08/0.19 Running run_vampire /export/starexec/sandbox2/benchmark/theBenchmark.p 300 SAT
% 0.08/0.22 Running first-order model finding
% 0.08/0.22 Running: /export/starexec/sandbox2/solver/bin/vampire-ho --input_syntax tptp --output_axiom_names on --mode casc --intent sat -m 16384 --cores 7 -t 300 /export/starexec/sandbox2/benchmark/theBenchmark.p
% 0.20/0.28 % (1058649)Will run a generic schedule for satisfiability detection.
% 0.20/0.28 % (1058656)dis+10_161_sil=256000:plsq=on:plsqr=61199697,1048576:gs=on:alpa=true:sac=on:slsq=on:cn=on:random_seed=1060659222:i=88024:add=on:rawr=on_2999 on theBenchmark for (2999ds/88024Mi)
% 0.20/0.28 % (1058655)% WARNING: option uhcvi not known.
% 0.20/0.28 % (1058654)fmb+10_1_sas=cadical:bce=on:rp=on:random_seed=690183416_2999 on theBenchmark for (2999ds/0Mi)
% 0.20/0.28 % (1058655)dis+11_61:31_drc=ordering:lsd=5:bsr=unit_only:rp=on:newcnf=on:random_seed=3376179429:i=135531:add=off:rawr=on_2999 on theBenchmark for (2999ds/135531Mi)
% 0.20/0.28 % (1058659)ott+1_1_to=lpo:sil=16000:sp=reverse_arity:erd=off:random_seed=1236514170:i=131_2999 on theBenchmark for (2999ds/131Mi)
% 0.20/0.28 % (1058657)dis+10_1_sil=32000:sp=arity:random_seed=3071347092:i=103:fgj=on_2999 on theBenchmark for (2999ds/103Mi)
% 0.20/0.28 % (1058658)ott+31_1_sil=16000:lcm=predicate:bce=on:newcnf=on:random_seed=633539449:i=116_2999 on theBenchmark for (2999ds/116Mi)
% 0.20/0.28 % (1058660)ott-3_16_to=lpo:sil=16000:sp=arity:fd=off:rp=on:random_seed=3424616744:i=159:bs=unit_only:nicw=on:fsr=off:amm=off_2999 on theBenchmark for (2999ds/159Mi)
% 0.20/0.28 % (1058656) found proof, printing to "/export/starexec/sandbox2/tmp/vampire-proof-1058649-1058656"...
% 0.20/0.28 % (1058656)...printing done.
% 0.20/0.28 % SZS status Satisfiable for theBenchmark
% 0.20/0.28 % SZS output start Saturation.
% See solution above
% 0.20/0.28 % SZS output start Definitions and Model Updates.
% 0.20/0.28 % SZS output end Definitions and Model Updates.
% 0.20/0.28 % (1058656)------------------------------
% 0.20/0.28 % (1058656)Version: Vampire 5.0.1 (Release build, commit 5ef7c2677 on 2026-07-16 16:54:09 +0200)
% 0.20/0.28 % (1058656)Linked with Z3 4.14.0.0 3c47fd96cf5645d0c42b2c819d9e9a84380aa721 z3-4.8.4-9178-g3c47fd96c
% 0.20/0.28 % (1058656)CaDiCaL version: 2.1.3
% 0.20/0.28 % (1058656)Termination reason: Satisfiable
% 0.20/0.28 % (1058656)Time elapsed: 0.010 s
% 0.20/0.28 % (1058656)Peak memory usage: 12 MB
% 0.20/0.28 % (1058656)Instructions burned: 24 (million)
% 0.20/0.28 % (1058649)Success in time 0.05 s
% 0.20/0.28 % Vampire exiting
%------------------------------------------------------------------------------