%------------------------------------------------------------------------------
% File : iProver---3.9.4
% Problem : SWV800-1 : TPTP v9.3.1. Released v4.1.0.
% Transfm : none
% Format : tptp:raw
% Command : run_iprover 300 /export/starexec/sandbox2/benchmark/theBenchmark.p THM
% Computer : n014.cluster.edu
% Model : x86_64 x86_64
% CPU : Intel(R) Xeon(R) CPU E5-2620 v4 2.10GHz
% Memory : 8046.5625MB
% OS : Linux 6.8.0-71-generic
% CPULimit : 300s
% WCLimit : 300s
% DateTime : Fri Sep 25 03:24:14 PM UTC 2026
% Result : Unsatisfiable 50.25s 9.34s
% Output : CNFRefutation 50.25s
% Verified :
% SZS Type : Refutation
% Derivation depth : 31
% Number of leaves : 27
% Syntax : Number of formulae : 101 ( 47 unt; 0 def)
% Number of atoms : 219 ( 42 equ)
% Maximal formula atoms : 6 ( 2 avg)
% Number of connectives : 216 ( 98 ~; 118 |; 0 &)
% ( 0 <=>; 0 =>; 0 <=; 0 <~>)
% Maximal formula depth : 13 ( 5 avg)
% Maximal term depth : 9 ( 2 avg)
% Number of types : 1 ( 0 usr)
% Number of type conns : 0 ( 0 >; 0 *; 0 +; 0 <<)
% Number of predicates : 5 ( 3 usr; 1 prp; 0-3 aty)
% Number of functors : 33 ( 33 usr; 18 con; 0-3 aty)
% Number of variables : 221 ( 0 sgn 221 !; 0 ?; 147 :)
% Comments :
%------------------------------------------------------------------------------
fof(f159,axiom,
! [X0,X1] : c_lessequals(X0,X0,tc_fun(X1,tc_bool)),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_equalityE_0) ).
fof(f206,axiom,
! [X2,X3,X0,X1] :
( ~ c_lessequals(c_Set_Oinsert(X0,X3,X2),X1,tc_fun(X2,tc_bool))
| c_in(X0,X1,X2) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__subset_0) ).
fof(f215,axiom,
! [X2,X0,X1] : c_List_Oset(c_List_Olist_OCons(X0,X1,X2),X2) = c_Set_Oinsert(X0,c_List_Oset(X1,X2),X2),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_List_Oset_Osimps_I2_J_0) ).
fof(f328,axiom,
! [X0] : c_lessequals(X0,c_Message_Oanalz(X0),tc_fun(tc_Message_Omsg,tc_bool)),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__increasing_0) ).
fof(f391,axiom,
! [X2,X3,X0,X1] : c_Event_Oknows(X0,c_List_Olist_OCons(c_Event_Oevent_OSays(X0,X1,X2),X3,tc_Event_Oevent)) = c_Set_Oinsert(X2,c_Event_Oknows(X0,X3),tc_Message_Omsg),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__Says_0) ).
fof(f405,axiom,
! [X2,X3,X0,X1] : c_Event_Oknows(c_Message_Oagent_OSpy,c_List_Olist_OCons(c_Event_Oevent_OSays(X0,X1,X2),X3,tc_Event_Oevent)) = c_Set_Oinsert(X2,c_Event_Oknows(c_Message_Oagent_OSpy,X3),tc_Message_Omsg),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__Spy__Says_0) ).
fof(f416,axiom,
! [X2,X3,X0,X1] :
( ~ c_in(X2,c_Message_Osynth(c_Message_Oanalz(X3)),tc_Message_Omsg)
| ~ c_lessequals(X3,X1,tc_fun(tc_Message_Omsg,tc_bool))
| ~ c_in(hAPP(c_Message_Omsg_OKey,X0),c_Message_Oanalz(c_Set_Oinsert(X2,X1,tc_Message_Omsg)),tc_Message_Omsg)
| c_in(hAPP(c_Message_Omsg_OKey,X0),c_Message_Oanalz(X1),tc_Message_Omsg) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth__analz__insert__eq_0) ).
fof(f430,axiom,
! [X2,X0,X1] :
( ~ c_in(X2,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(X1,c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,X2))),tc_Message_Omsg)
| c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X0,X1),X2,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ns__shared_OFake_0) ).
fof(f445,axiom,
! [X2,X3,X0,X1,X4,X5] :
( ~ c_in(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,X0),c_Message_Omsg_OMPair(X1,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(X2),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,X3),X4)))),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,X5)),tc_Message_Omsg)
| c_in(X0,c_Event_Obad,tc_Message_Oagent)
| ~ c_in(X5,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer,X0,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,X0),c_Message_Omsg_OMPair(X1,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(X2),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,X3),X4))))),c_List_Oset(X5,tc_Event_Oevent),tc_Event_Oevent) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_A__trusts__NS2_0) ).
fof(f446,axiom,
! [X2,X3,X0,X1,X4,X5] :
( c_in(X1,c_Event_Obad,tc_Message_Oagent)
| ~ c_in(X4,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| c_in(hAPP(c_Message_Omsg_OKey,X2),c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,X4)),tc_Message_Omsg)
| ~ c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer,X0,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,X0),c_Message_Omsg_OMPair(X5,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(X1),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,X2),c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,X1),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,X2),c_Message_Omsg_OAgent(X0)))))))),c_List_Oset(X4,tc_Event_Oevent),tc_Event_Oevent)
| ~ c_in(c_Message_Omsg_OCrypt(X2,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X3),c_Message_Omsg_ONonce(X3))),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,X4)),tc_Message_Omsg)
| c_in(c_Event_Oevent_OSays(X0,X1,c_Message_Omsg_OCrypt(X2,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X3),c_Message_Omsg_ONonce(X3)))),c_List_Oset(X4,tc_Event_Oevent),tc_Event_Oevent) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_B__trusts__NS5__lemma_0) ).
fof(f447,axiom,
! [X2,X3,X0,X1,X4,X5] :
( X1 = X4
| c_Event_Oevent_OSays(X0,X1,X2) != c_Event_Oevent_OSays(X3,X4,X5) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_event_Osimps_I1_J_1) ).
fof(f463,axiom,
! [X0] : c_Message_Oanalz(c_Message_Oanalz(X0)) = c_Message_Oanalz(X0),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__idem_0) ).
fof(f464,plain,
! [X0] : c_Message_Oanalz(X0) = c_Message_Oanalz(c_Message_Oanalz(X0)),
inference(reorient_equations,[],[f463]) ).
fof(f474,axiom,
! [X0,X1] :
( ~ c_in(X0,X1,tc_Message_Omsg)
| c_in(X0,c_Message_Oanalz(X1),tc_Message_Omsg) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz_OInj_0) ).
fof(f487,axiom,
! [X2,X3,X0,X1] :
( ~ c_in(X0,c_Set_Oinsert(X3,X1,X2),X2)
| X0 = X3
| c_in(X0,X1,X2) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insertE_0) ).
fof(f489,axiom,
! [X0] : c_Message_Oanalz(c_Message_Oparts(X0)) = c_Message_Oparts(X0),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__parts_0) ).
fof(f490,plain,
! [X0] : c_Message_Oparts(X0) = c_Message_Oanalz(c_Message_Oparts(X0)),
inference(reorient_equations,[],[f489]) ).
fof(f506,axiom,
! [X2,X3,X0,X1,X4,X5] :
( ~ c_in(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,X3),c_Message_Omsg_OMPair(X5,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(X1),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,X2),X0)))),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,X4)),tc_Message_Omsg)
| c_in(X3,c_Event_Obad,tc_Message_Oagent)
| ~ c_in(X4,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| X0 = c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,X1),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,X2),c_Message_Omsg_OAgent(X3))) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_cert__A__form_1) ).
fof(f507,plain,
! [X2,X3,X0,X1,X4,X5] :
( ~ c_in(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,X3),c_Message_Omsg_OMPair(X5,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(X1),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,X2),X0)))),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,X4)),tc_Message_Omsg)
| c_in(X3,c_Event_Obad,tc_Message_Oagent)
| ~ c_in(X4,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,X1),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,X2),c_Message_Omsg_OAgent(X3))) = X0 ),
inference(reorient_equations,[],[f506]) ).
fof(f536,axiom,
! [X2,X0,X1] :
( ~ hBOOL(hAPP(X1,X0))
| c_in(X0,X1,X2) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_mem__def_1) ).
fof(f537,axiom,
! [X2,X0,X1] :
( ~ c_in(X1,X0,X2)
| hBOOL(hAPP(X0,X1)) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_mem__def_0) ).
fof(f567,axiom,
! [X2,X0,X1] :
( ~ c_in(X0,X1,X2)
| c_Set_Oinsert(X0,X1,X2) = X1 ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__absorb_0) ).
fof(f585,negated_conjecture,
~ c_in(v_A,c_Event_Obad,tc_Message_Oagent),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_conjecture_0) ).
fof(f586,negated_conjecture,
~ c_in(v_B,c_Event_Obad,tc_Message_Oagent),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_conjecture_1) ).
fof(f587,negated_conjecture,
c_in(v_evsf,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_conjecture_2) ).
fof(f588,negated_conjecture,
c_in(v_Xa,c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf))),tc_Message_Omsg),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_conjecture_3) ).
fof(f589,negated_conjecture,
~ c_in(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf)),tc_Message_Omsg),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_conjecture_4) ).
fof(f590,negated_conjecture,
c_in(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_A),c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NA),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),v_X)))),c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),tc_Message_Omsg),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_conjecture_5) ).
fof(f591,negated_conjecture,
c_in(c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NB),c_Message_Omsg_ONonce(v_NB))),c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),tc_Message_Omsg),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_conjecture_6) ).
fof(f592,negated_conjecture,
~ c_in(c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NB),c_Message_Omsg_ONonce(v_NB)))),c_List_Oset(v_evsf,tc_Event_Oevent),tc_Event_Oevent),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_conjecture_7) ).
tcf(c_599,negated_conjecture,
~ c_in(v_A,c_Event_Obad,tc_Message_Oagent),
inference(cnf_transformation,[],[f585]) ).
tcf(c_600,negated_conjecture,
~ c_in(v_B,c_Event_Obad,tc_Message_Oagent),
inference(cnf_transformation,[],[f586]) ).
tcf(c_601,negated_conjecture,
c_in(v_evsf,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)),
inference(cnf_transformation,[],[f587]) ).
tcf(c_602,negated_conjecture,
c_in(v_Xa,c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf))),tc_Message_Omsg),
inference(cnf_transformation,[],[f588]) ).
tcf(c_603,negated_conjecture,
~ c_in(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf)),tc_Message_Omsg),
inference(cnf_transformation,[],[f589]) ).
tcf(c_604,negated_conjecture,
c_in(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_A),c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NA),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),v_X)))),c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),tc_Message_Omsg),
inference(cnf_transformation,[],[f590]) ).
tcf(c_605,negated_conjecture,
c_in(c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NB),c_Message_Omsg_ONonce(v_NB))),c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),tc_Message_Omsg),
inference(cnf_transformation,[],[f591]) ).
tcf(c_606,negated_conjecture,
~ c_in(c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NB),c_Message_Omsg_ONonce(v_NB)))),c_List_Oset(v_evsf,tc_Event_Oevent),tc_Event_Oevent),
inference(cnf_transformation,[],[f592]) ).
tcf(c_615,plain,
! [X0: $i,X1: $i,X2: $i,X3: $i,X4: $i,X5: $i] :
( c_in(X0,c_Event_Obad,tc_Message_Oagent)
| ( c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,X2),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,X3),c_Message_Omsg_OAgent(X0))) = X4 )
| ~ c_in(X5,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,X0),c_Message_Omsg_OMPair(X1,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(X2),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,X3),X4)))),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,X5)),tc_Message_Omsg) ),
inference(cnf_transformation,[],[f507]) ).
tcf(c_619,plain,
! [X0: $i,X1: $i,X2: $i,X3: $i,X4: $i,X5: $i] :
( c_in(X2,c_Event_Obad,tc_Message_Oagent)
| c_in(hAPP(c_Message_Omsg_OKey,X3),c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,X4)),tc_Message_Omsg)
| c_in(c_Event_Oevent_OSays(X0,X2,c_Message_Omsg_OCrypt(X3,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X5),c_Message_Omsg_ONonce(X5)))),c_List_Oset(X4,tc_Event_Oevent),tc_Event_Oevent)
| ~ c_in(X4,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(c_Message_Omsg_OCrypt(X3,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X5),c_Message_Omsg_ONonce(X5))),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,X4)),tc_Message_Omsg)
| ~ c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer,X0,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,X0),c_Message_Omsg_OMPair(X1,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(X2),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,X3),c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,X2),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,X3),c_Message_Omsg_OAgent(X0)))))))),c_List_Oset(X4,tc_Event_Oevent),tc_Event_Oevent) ),
inference(cnf_transformation,[],[f446]) ).
tcf(c_620,plain,
! [X0: $i,X1: $i,X2: $i,X3: $i,X4: $i,X5: $i] :
( c_in(X0,c_Event_Obad,tc_Message_Oagent)
| c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer,X0,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,X0),c_Message_Omsg_OMPair(X1,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(X2),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,X3),X4))))),c_List_Oset(X5,tc_Event_Oevent),tc_Event_Oevent)
| ~ c_in(X5,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,X0),c_Message_Omsg_OMPair(X1,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(X2),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,X3),X4)))),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,X5)),tc_Message_Omsg) ),
inference(cnf_transformation,[],[f445]) ).
tcf(c_635,plain,
! [X0: $i,X1: $i,X2: $i] :
( c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X2,X0),X1,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(X1,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(X0,c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,X1))),tc_Message_Omsg) ),
inference(cnf_transformation,[],[f430]) ).
tcf(c_645,plain,
! [X0: $i] : c_Message_Oanalz(c_Message_Oparts(X0)) = c_Message_Oparts(X0),
inference(cnf_transformation,[],[f490]) ).
tcf(c_646,plain,
! [X0: $i,X1: $i] :
( c_in(X0,c_Message_Oanalz(X1),tc_Message_Omsg)
| ~ c_in(X0,X1,tc_Message_Omsg) ),
inference(cnf_transformation,[],[f474]) ).
tcf(c_648,plain,
! [X0: $i] : c_Message_Oanalz(c_Message_Oanalz(X0)) = c_Message_Oanalz(X0),
inference(cnf_transformation,[],[f464]) ).
tcf(c_656,plain,
! [X0: $i] : c_lessequals(X0,c_Message_Oanalz(X0),tc_fun(tc_Message_Omsg,tc_bool)),
inference(cnf_transformation,[],[f328]) ).
tcf(c_698,plain,
! [X0: $i,X1: $i,X2: $i,X3: $i] :
( c_in(hAPP(c_Message_Omsg_OKey,X0),c_Message_Oanalz(X2),tc_Message_Omsg)
| ~ c_lessequals(X3,X2,tc_fun(tc_Message_Omsg,tc_bool))
| ~ c_in(X1,c_Message_Osynth(c_Message_Oanalz(X3)),tc_Message_Omsg)
| ~ c_in(hAPP(c_Message_Omsg_OKey,X0),c_Message_Oanalz(c_Set_Oinsert(X1,X2,tc_Message_Omsg)),tc_Message_Omsg) ),
inference(cnf_transformation,[],[f416]) ).
tcf(c_734,plain,
! [X0: $i,X1: $i,X2: $i] :
( ( c_Set_Oinsert(X0,X1,X2) = X1 )
| ~ c_in(X0,X1,X2) ),
inference(cnf_transformation,[],[f567]) ).
tcf(c_741,plain,
! [X0: $i,X1: $i,X2: $i,X3: $i] :
( c_in(X0,X2,X3)
| ( X0 = X1 )
| ~ c_in(X0,c_Set_Oinsert(X1,X2,X3),X3) ),
inference(cnf_transformation,[],[f487]) ).
tcf(c_751,plain,
! [X0: $i,X1: $i,X2: $i,X3: $i] :
( c_in(X0,X3,X2)
| ~ c_lessequals(c_Set_Oinsert(X0,X1,X2),X3,tc_fun(X2,tc_bool)) ),
inference(cnf_transformation,[],[f206]) ).
tcf(c_801,plain,
! [X0: $i,X1: $i,X2: $i] : c_Set_Oinsert(X0,c_List_Oset(X1,X2),X2) = c_List_Oset(c_List_Olist_OCons(X0,X1,X2),X2),
inference(cnf_transformation,[],[f215]) ).
tcf(c_806,plain,
! [X0: $i,X1: $i,X2: $i,X3: $i,X4: $i,X5: $i] :
( ( X1 = X4 )
| ( c_Event_Oevent_OSays(X0,X1,X2) != c_Event_Oevent_OSays(X3,X4,X5) ) ),
inference(cnf_transformation,[],[f447]) ).
tcf(c_808,plain,
! [X0: $i,X1: $i,X2: $i,X3: $i] : c_Event_Oknows(c_Message_Oagent_OSpy,c_List_Olist_OCons(c_Event_Oevent_OSays(X0,X1,X2),X3,tc_Event_Oevent)) = c_Set_Oinsert(X2,c_Event_Oknows(c_Message_Oagent_OSpy,X3),tc_Message_Omsg),
inference(cnf_transformation,[],[f405]) ).
tcf(c_809,plain,
! [X0: $i,X1: $i,X2: $i,X3: $i] : c_Event_Oknows(X0,c_List_Olist_OCons(c_Event_Oevent_OSays(X0,X1,X2),X3,tc_Event_Oevent)) = c_Set_Oinsert(X2,c_Event_Oknows(X0,X3),tc_Message_Omsg),
inference(cnf_transformation,[],[f391]) ).
tcf(c_909,plain,
! [X0: $i,X1: $i] : c_lessequals(X0,X0,tc_fun(X1,tc_bool)),
inference(cnf_transformation,[],[f159]) ).
tcf(c_989,plain,
! [X0: $i,X1: $i,X2: $i] :
( hBOOL(hAPP(X1,X0))
| ~ c_in(X0,X1,X2) ),
inference(cnf_transformation,[],[f537]) ).
tcf(c_990,plain,
! [X0: $i,X1: $i,X2: $i] :
( c_in(X1,X0,X2)
| ~ hBOOL(hAPP(X0,X1)) ),
inference(cnf_transformation,[],[f536]) ).
tcf(c_11753,plain,
hBOOL(hAPP(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf))),v_Xa)),
inference(superposition,[status(thm)],[c_602,c_989]) ).
tcf(c_11754,plain,
hBOOL(hAPP(c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_A),c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NA),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),v_X)))))),
inference(superposition,[status(thm)],[c_604,c_989]) ).
tcf(c_11755,plain,
hBOOL(hAPP(c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NB),c_Message_Omsg_ONonce(v_NB))))),
inference(superposition,[status(thm)],[c_605,c_989]) ).
tcf(c_11779,plain,
! [X0: $i] : c_in(v_Xa,c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf))),X0),
inference(superposition,[status(thm)],[c_11753,c_990]) ).
tcf(c_11780,plain,
! [X0: $i] : c_in(c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NB),c_Message_Omsg_ONonce(v_NB))),c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),X0),
inference(superposition,[status(thm)],[c_11755,c_990]) ).
tcf(c_11789,plain,
! [X0: $i,X1: $i] :
( hBOOL(hAPP(c_Message_Oanalz(X1),X0))
| ~ c_in(X0,X1,tc_Message_Omsg) ),
inference(superposition,[status(thm)],[c_646,c_989]) ).
tcf(c_11814,plain,
! [X0: $i] : c_in(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_A),c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NA),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),v_X)))),c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),X0),
inference(superposition,[status(thm)],[c_11754,c_990]) ).
tcf(c_11849,plain,
! [X0: $i,X1: $i,X2: $i] :
( c_in(X0,c_Message_Oanalz(X1),X2)
| ~ c_in(X0,X1,tc_Message_Omsg) ),
inference(superposition,[status(thm)],[c_11789,c_990]) ).
tcf(c_11890,plain,
! [X0: $i,X1: $i,X2: $i] :
( c_in(X0,c_Message_Oanalz(X1),X2)
| ~ c_in(X0,c_Message_Oanalz(X1),tc_Message_Omsg) ),
inference(superposition,[status(thm)],[c_648,c_11849]) ).
tcf(c_11891,plain,
! [X0: $i,X1: $i,X2: $i] :
( c_in(X0,c_Message_Oparts(X1),X2)
| ~ c_in(X0,c_Message_Oparts(X1),tc_Message_Omsg) ),
inference(superposition,[status(thm)],[c_645,c_11849]) ).
tcf(c_12029,plain,
! [X0: $i] : c_Set_Oinsert(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_A),c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NA),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),v_X)))),c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),X0) = c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),
inference(superposition,[status(thm)],[c_11814,c_734]) ).
tcf(c_13135,plain,
! [X0: $i,X1: $i] : c_in(X0,c_Message_Oanalz(c_Set_Oinsert(X0,X1,tc_Message_Omsg)),tc_Message_Omsg),
inference(superposition,[status(thm)],[c_656,c_751]) ).
tcf(c_13149,plain,
! [X0: $i,X1: $i] :
( c_in(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_A),c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NA),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),v_X)))),X0,X1)
| ~ c_lessequals(c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),X0,tc_fun(X1,tc_bool)) ),
inference(superposition,[status(thm)],[c_12029,c_751]) ).
tcf(c_13536,plain,
! [X0: $i,X1: $i] :
( c_in(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_A),c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NA),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),v_X)))),c_Message_Oparts(X0),X1)
| ~ c_lessequals(c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),c_Message_Oparts(X0),tc_fun(tc_Message_Omsg,tc_bool)) ),
inference(superposition,[status(thm)],[c_13149,c_11891]) ).
tcf(c_14535,plain,
! [X0: $i,X1: $i,X2: $i] : c_in(X0,c_Message_Oanalz(c_Set_Oinsert(X0,X1,tc_Message_Omsg)),X2),
inference(superposition,[status(thm)],[c_13135,c_11890]) ).
tcf(c_15360,plain,
! [X0: $i,X1: $i] :
( c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X1,X0),v_evsf,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(v_evsf,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(X0,c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf))),tc_Message_Omsg) ),
inference(instantiation,[status(thm)],[c_635]) ).
tcf(c_30654,plain,
! [X0: $i] :
( c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X0,v_Xa),v_evsf,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(v_evsf,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(v_Xa,c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf))),tc_Message_Omsg) ),
inference(instantiation,[status(thm)],[c_15360]) ).
tcf(c_49023,plain,
! [X0: $i] :
( c_in(v_A,c_Event_Obad,tc_Message_Oagent)
| ( c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Omsg_OAgent(v_A))) = v_X )
| ~ c_in(X0,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_lessequals(c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,X0)),tc_fun(tc_Message_Omsg,tc_bool)) ),
inference(superposition,[status(thm)],[c_13536,c_615]) ).
tcf(c_49027,plain,
! [X0: $i] :
( ( c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Omsg_OAgent(v_A))) = v_X )
| ~ c_in(X0,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_lessequals(c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,X0)),tc_fun(tc_Message_Omsg,tc_bool)) ),
inference(forward_subsumption_resolution,[status(thm)],[c_49023,c_599]) ).
tcf(c_49214,plain,
! [X0: $i,X1: $i,X2: $i] :
( ( c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Omsg_OAgent(v_A))) = v_X )
| ~ c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X2,X0),X1,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_lessequals(c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),c_Message_Oparts(c_Set_Oinsert(X0,c_Event_Oknows(c_Message_Oagent_OSpy,X1),tc_Message_Omsg)),tc_fun(tc_Message_Omsg,tc_bool)) ),
inference(superposition,[status(thm)],[c_809,c_49027]) ).
tcf(c_49215,plain,
! [X0: $i,X1: $i,X2: $i,X3: $i] :
( ( c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Omsg_OAgent(v_A))) = v_X )
| ~ c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(X2,X3,X0),X1,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_lessequals(c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),c_Message_Oparts(c_Set_Oinsert(X0,c_Event_Oknows(c_Message_Oagent_OSpy,X1),tc_Message_Omsg)),tc_fun(tc_Message_Omsg,tc_bool)) ),
inference(superposition,[status(thm)],[c_808,c_49027]) ).
tcf(c_50346,plain,
! [X0: $i] :
( ( c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Omsg_OAgent(v_A))) = v_X )
| ~ c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X0,v_Xa),v_evsf,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)) ),
inference(superposition,[status(thm)],[c_909,c_49214]) ).
tcf(c_50408,plain,
c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Omsg_OAgent(v_A))) = v_X,
inference(global_subsumption_just,[status(thm)],[c_49215,c_601,c_602,c_30654,c_50346]) ).
tcf(c_51105,plain,
! [X0: $i,X1: $i,X2: $i] :
( c_in(v_B,c_Event_Obad,tc_Message_Oagent)
| c_in(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,X1)),tc_Message_Omsg)
| c_in(c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X2),c_Message_Omsg_ONonce(X2)))),c_List_Oset(X1,tc_Event_Oevent),tc_Event_Oevent)
| ~ c_in(X1,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X2),c_Message_Omsg_ONonce(X2))),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,X1)),tc_Message_Omsg)
| ~ c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer,v_A,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_A),c_Message_Omsg_OMPair(X0,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),v_X))))),c_List_Oset(X1,tc_Event_Oevent),tc_Event_Oevent) ),
inference(superposition,[status(thm)],[c_50408,c_619]) ).
tcf(c_51107,plain,
! [X0: $i,X1: $i,X2: $i] :
( c_in(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,X1)),tc_Message_Omsg)
| c_in(c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X2),c_Message_Omsg_ONonce(X2)))),c_List_Oset(X1,tc_Event_Oevent),tc_Event_Oevent)
| ~ c_in(X1,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X2),c_Message_Omsg_ONonce(X2))),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,X1)),tc_Message_Omsg)
| ~ c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer,v_A,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_A),c_Message_Omsg_OMPair(X0,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),v_X))))),c_List_Oset(X1,tc_Event_Oevent),tc_Event_Oevent) ),
inference(forward_subsumption_resolution,[status(thm)],[c_51105,c_600]) ).
tcf(c_51267,plain,
! [X0: $i,X1: $i,X2: $i] :
( c_in(v_A,c_Event_Obad,tc_Message_Oagent)
| c_in(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,X1)),tc_Message_Omsg)
| c_in(c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X2),c_Message_Omsg_ONonce(X2)))),c_List_Oset(X1,tc_Event_Oevent),tc_Event_Oevent)
| ~ c_in(X1,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X2),c_Message_Omsg_ONonce(X2))),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,X1)),tc_Message_Omsg)
| ~ c_in(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_A),c_Message_Omsg_OMPair(X0,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),v_X)))),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,X1)),tc_Message_Omsg) ),
inference(superposition,[status(thm)],[c_620,c_51107]) ).
tcf(c_51269,plain,
! [X0: $i,X1: $i,X2: $i] :
( c_in(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,X1)),tc_Message_Omsg)
| c_in(c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X2),c_Message_Omsg_ONonce(X2)))),c_List_Oset(X1,tc_Event_Oevent),tc_Event_Oevent)
| ~ c_in(X1,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X2),c_Message_Omsg_ONonce(X2))),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,X1)),tc_Message_Omsg)
| ~ c_in(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_A),c_Message_Omsg_OMPair(X0,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),v_X)))),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,X1)),tc_Message_Omsg) ),
inference(forward_subsumption_resolution,[status(thm)],[c_51267,c_599]) ).
tcf(c_51297,plain,
! [X0: $i,X1: $i,X2: $i,X3: $i,X4: $i] :
( c_in(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X4,X1),X2,tc_Event_Oevent))),tc_Message_Omsg)
| c_in(c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X3),c_Message_Omsg_ONonce(X3)))),c_List_Oset(c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X4,X1),X2,tc_Event_Oevent),tc_Event_Oevent),tc_Event_Oevent)
| ~ c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X4,X1),X2,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X3),c_Message_Omsg_ONonce(X3))),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X4,X1),X2,tc_Event_Oevent))),tc_Message_Omsg)
| ~ c_in(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_A),c_Message_Omsg_OMPair(X0,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),v_X)))),c_Message_Oparts(c_Set_Oinsert(X1,c_Event_Oknows(c_Message_Oagent_OSpy,X2),tc_Message_Omsg)),tc_Message_Omsg) ),
inference(superposition,[status(thm)],[c_809,c_51269]) ).
tcf(c_51641,plain,
! [X0: $i,X1: $i,X2: $i,X3: $i,X4: $i] :
( c_in(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Oanalz(c_Set_Oinsert(X1,c_Event_Oknows(c_Message_Oagent_OSpy,X2),tc_Message_Omsg)),tc_Message_Omsg)
| c_in(c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X3),c_Message_Omsg_ONonce(X3)))),c_Set_Oinsert(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X4,X1),c_List_Oset(X2,tc_Event_Oevent),tc_Event_Oevent),tc_Event_Oevent)
| ~ c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X4,X1),X2,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X3),c_Message_Omsg_ONonce(X3))),c_Message_Oparts(c_Set_Oinsert(X1,c_Event_Oknows(c_Message_Oagent_OSpy,X2),tc_Message_Omsg)),tc_Message_Omsg)
| ~ c_in(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_A),c_Message_Omsg_OMPair(X0,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),v_X)))),c_Message_Oparts(c_Set_Oinsert(X1,c_Event_Oknows(c_Message_Oagent_OSpy,X2),tc_Message_Omsg)),tc_Message_Omsg) ),
inference(demodulation,[status(thm)],[c_51297,c_801,c_808]) ).
tcf(c_51657,plain,
! [X0: $i,X1: $i] :
( c_in(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Oanalz(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),tc_Message_Omsg)
| c_in(c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X0),c_Message_Omsg_ONonce(X0)))),c_Set_Oinsert(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X1,v_Xa),c_List_Oset(v_evsf,tc_Event_Oevent),tc_Event_Oevent),tc_Event_Oevent)
| ~ c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X1,v_Xa),v_evsf,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X0),c_Message_Omsg_ONonce(X0))),c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),tc_Message_Omsg) ),
inference(superposition,[status(thm)],[c_11814,c_51641]) ).
tcf(c_57910,plain,
! [X0: $i,X1: $i] :
( c_in(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Oanalz(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),tc_Message_Omsg)
| c_in(c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X0),c_Message_Omsg_ONonce(X0)))),c_List_Oset(v_evsf,tc_Event_Oevent),tc_Event_Oevent)
| ( c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X0),c_Message_Omsg_ONonce(X0)))) = c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X1,v_Xa) )
| ~ c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X1,v_Xa),v_evsf,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))
| ~ c_in(c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(X0),c_Message_Omsg_ONonce(X0))),c_Message_Oparts(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),tc_Message_Omsg) ),
inference(superposition,[status(thm)],[c_51657,c_741]) ).
tcf(c_90409,plain,
! [X0: $i] :
( c_in(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Oanalz(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),tc_Message_Omsg)
| c_in(c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NB),c_Message_Omsg_ONonce(v_NB)))),c_List_Oset(v_evsf,tc_Event_Oevent),tc_Event_Oevent)
| ( c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NB),c_Message_Omsg_ONonce(v_NB)))) = c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X0,v_Xa) )
| ~ c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X0,v_Xa),v_evsf,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)) ),
inference(superposition,[status(thm)],[c_11780,c_57910]) ).
tcf(c_90412,plain,
! [X0: $i] :
( c_in(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Oanalz(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),tc_Message_Omsg)
| ( c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NB),c_Message_Omsg_ONonce(v_NB)))) = c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X0,v_Xa) )
| ~ c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X0,v_Xa),v_evsf,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)) ),
inference(forward_subsumption_resolution,[status(thm)],[c_90409,c_606]) ).
tcf(c_90429,plain,
! [X0: $i] :
( c_in(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Oanalz(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),tc_Message_Omsg)
| ( c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NB),c_Message_Omsg_ONonce(v_NB)))) = c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X0,v_Xa) ) ),
inference(global_subsumption_just,[status(thm)],[c_90412,c_601,c_602,c_30654,c_90412]) ).
tcf(c_90441,plain,
! [X0: $i,X1: $i] :
( c_in(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Oanalz(c_Set_Oinsert(v_Xa,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_Message_Omsg)),X1)
| ( c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NB),c_Message_Omsg_ONonce(v_NB)))) = c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X0,v_Xa) ) ),
inference(superposition,[status(thm)],[c_90429,c_11890]) ).
tcf(c_90466,plain,
! [X0: $i,X1: $i] :
( c_in(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf)),tc_Message_Omsg)
| ( c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NB),c_Message_Omsg_ONonce(v_NB)))) = c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X1,v_Xa) )
| ~ c_in(v_Xa,c_Message_Osynth(c_Message_Oanalz(X0)),tc_Message_Omsg)
| ~ c_lessequals(X0,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_fun(tc_Message_Omsg,tc_bool)) ),
inference(superposition,[status(thm)],[c_90441,c_698]) ).
tcf(c_90483,plain,
! [X0: $i,X1: $i] :
( ( c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NB),c_Message_Omsg_ONonce(v_NB)))) = c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X1,v_Xa) )
| ~ c_in(v_Xa,c_Message_Osynth(c_Message_Oanalz(X0)),tc_Message_Omsg)
| ~ c_lessequals(X0,c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf),tc_fun(tc_Message_Omsg,tc_bool)) ),
inference(forward_subsumption_resolution,[status(thm)],[c_90466,c_603]) ).
tcf(c_90802,plain,
! [X0: $i] :
( ( c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NB),c_Message_Omsg_ONonce(v_NB)))) = c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X0,v_Xa) )
| ~ c_in(v_Xa,c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,v_evsf))),tc_Message_Omsg) ),
inference(superposition,[status(thm)],[c_909,c_90483]) ).
tcf(c_90805,plain,
! [X0: $i] : c_Event_Oevent_OSays(v_A,v_B,c_Message_Omsg_OCrypt(v_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(v_NB),c_Message_Omsg_ONonce(v_NB)))) = c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X0,v_Xa),
inference(forward_subsumption_resolution,[status(thm)],[c_90802,c_11779]) ).
tcf(c_90823,plain,
! [X0: $i,X1: $i,X2: $i,X3: $i] :
( ( X1 = v_B )
| ( c_Event_Oevent_OSays(X0,X1,X2) != c_Event_Oevent_OSays(c_Message_Oagent_OSpy,X3,v_Xa) ) ),
inference(superposition,[status(thm)],[c_90805,c_806]) ).
tcf(c_91742,plain,
! [X0: $i] : X0 = v_B,
inference(equality_resolution,[status(thm)],[c_90823]) ).
tcf(c_92373,plain,
! [X0: $i,X1: $i] : c_in(X0,c_Message_Oanalz(v_B),X1),
inference(demodulation,[status(thm)],[c_14535,c_91742]) ).
tcf(c_92523,plain,
~ c_in(hAPP(c_Message_Omsg_OKey,v_K),c_Message_Oanalz(v_B),tc_Message_Omsg),
inference(demodulation,[status(thm)],[c_603,c_91742]) ).
tcf(c_92835,plain,
$false,
inference(backward_subsumption_resolution,[status(thm)],[c_92523,c_92373]) ).
%------------------------------------------------------------------------------
%----ORIGINAL SYSTEM OUTPUT
% 0.00/0.02 % Problem : SWV800-1 : TPTP v9.3.1. Released v4.1.0.
% 0.00/0.04 % Command : run_iprover 300 /export/starexec/sandbox2/benchmark/theBenchmark.p THM
% 0.09/0.35 % Computer : n014.cluster.edu
% 0.09/0.35 % Model : x86_64 x86_64
% 0.09/0.35 % CPU : Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz
% 0.09/0.35 % Memory : 8046.5625MB
% 0.09/0.35 % OS : Linux 6.8.0-71-generic
% 0.09/0.35 % CPULimit : 300
% 0.09/0.35 % WCLimit : 300
% 0.09/0.35 % DateTime : Thu Sep 24 21:05:47 UTC 2026
% 0.09/0.35 % CPUTime :
% 0.09/0.35 Running run_iprover 300 /export/starexec/sandbox2/benchmark/theBenchmark.p THM
% 0.12/0.39 Running first-order theorem proving
% 0.12/0.39 Running: /export/starexec/sandbox2/solver/bin/iproveropt-multi-core.sh -d -n -l tptp -s fof_schedule -t 300 /export/starexec/sandbox2/benchmark/theBenchmark.p
% 0.12/0.40
% 0.12/0.40 % ======== iProver multi-core TPTP/SMT =========
% 0.12/0.40
% 0.12/0.40 % Detected problem language: tptp
% 0.12/0.42 % Proving...
% 50.25/9.34 % SZS status Started for theBenchmark.p
% 50.25/9.34 % SZS status Unsatisfiable for theBenchmark.p
% 50.25/9.34
% 50.25/9.34 %---------------- iProver v3.9.4 (pre CASC 2026/SMT-COMP 2026) ----------------%
% 50.25/9.34
% 50.25/9.34 % ------ iProver source info
% 50.25/9.34
% 50.25/9.34 % git: date: 2026-07-19 20:42:38 +0200
% 50.25/9.34 % git: sha1: 804e7d636a263075307957e923b7a22a4035de61
% 50.25/9.34 % git: non_committed_changes: false
% 50.25/9.34
% 50.25/9.34 % ------ Parsing...% successful
% 50.25/9.34
% 50.25/9.34
% 50.25/9.34 % ------ Clausification by vclausify_rel & Parsing by iProver...%
% 50.25/9.34
% 50.25/9.34 % ------ Preprocessing... sup_sim: 21 sf_s rm: 1 0s sf_e pe_s pe_e sup_sim: 0 sf_s rm: 1 0s sf_e pe_s pe_e %
% 50.25/9.34
% 50.25/9.34 % ------ Preprocessing... gs_s sp: 0 0s gs_e snvd_s sp: 0 0s snvd_e %
% 50.25/9.34
% 50.25/9.34 % ------ Preprocessing... sf_s rm: 1 0s sf_e sf_s rm: 0 0s sf_e
% 50.25/9.34 % ------ Proving...
% 50.25/9.34 % ------ Problem Properties
% 50.25/9.34
% 50.25/9.34 %
% 50.25/9.34 % clauses 299
% 50.25/9.34 % conjectures 9
% 50.25/9.34 % EPR 5
% 50.25/9.34 % Horn 270
% 50.25/9.34 % unary 120
% 50.25/9.34 % binary 109
% 50.25/9.34 % lits 570
% 50.25/9.34 % lits eq 170
% 50.25/9.34 % fd_pure 0
% 50.25/9.34 % fd_pseudo 0
% 50.25/9.34 % fd_cond 1
% 50.25/9.34 % fd_pseudo_cond 44
% 50.25/9.34 % AC symbols 0
% 50.25/9.34
% 50.25/9.34 % ------ Schedule dynamic 5 is on
% 50.25/9.34
% 50.25/9.34 % ------ Input Options "--resolution_flag false --inst_lit_sel_side none" Time Limit: 10.
% 50.25/9.34
% 50.25/9.34
% 50.25/9.34 % ------
% 50.25/9.34 % Current options:
% 50.25/9.34 % ------
% 50.25/9.34
% 50.25/9.34
% 50.25/9.34 %
% 50.25/9.34
% 50.25/9.34 % ------ Proving...
% 50.25/9.34 %
% 50.25/9.34
% 50.25/9.34 % SZS status Unsatisfiable for theBenchmark.p
% 50.25/9.34
% 50.25/9.34 % SZS output start CNFRefutation for theBenchmark.p
% See solution above
% 50.25/9.34
% 50.25/9.34
%------------------------------------------------------------------------------