1999-07-08 paulson 1999-07-08 Now if_weak_cong is a standard congruence rule
1999-03-09 paulson 1999-03-09 Added Bella's "Gets" model for Otway_Rees. Also affects some other theories. Changing "spies" to "knows Spy", etc. Retaining the constant "spies" as a translation.
1998-07-31 paulson 1998-07-31 Removal of obsolete "open" commands from heads of .ML files
1998-07-02 paulson 1998-07-02 Deleted leading parameters thanks to new Goal command
1998-06-24 paulson 1998-06-24 Ran isatool fixgoal
1998-03-07 nipkow 1998-03-07 Removed `addsplits [expand_if]'
1997-12-24 paulson 1997-12-24 New Auto_tac (by Oheimb), and new syntax (without parens), and expandshort
1997-12-16 paulson 1997-12-16 Simplified proofs using rewrites for f``A where f is injective
1997-11-03 wenzelm 1997-11-03 isatool fixclasimp;
1997-10-17 nipkow 1997-10-17 setloop split_tac -> addsplits
1997-09-29 paulson 1997-09-29 Step_tac -> Safe_tac
1997-09-18 paulson 1997-09-18 Global change: lost->bad and sees Spy->spies First change just gives a more sensible name. Second change eliminates the agent parameter of "sees" to simplify definitions and theorems
1997-09-17 paulson 1997-09-17 Removed the simprule imp_disjL from the analz_image_..._ss to boost speed
1997-09-16 paulson 1997-09-16 Having "addcongs [if_weak_cong]" in analz_image_..._ss makes simplification faster
1997-09-11 paulson 1997-09-11 Now uses the generic induct_tac
1997-07-22 paulson 1997-07-22 Now possibility_tac is an explicit function, in order to delay the evaluation of \!simpset
1997-07-14 paulson 1997-07-14 Changing "lost" from a parameter of protocol definitions to a constant. Advantages: no "lost" argument everywhere; fewer Vars in subgoals; less need for specially instantiated rules Disadvantage: can no longer prove "Agent_not_see_encrypted_key", but this theorem was never used, and its original proof was also broken the introduction of the "Notes" constructor.
1997-07-11 paulson 1997-07-11 Moving common declarations and proofs from theories "Shared" and "Public" to "Event". NB the original "Event" theory was later renamed "Shared". Addition of the Notes constructor to datatype "event".
1997-07-01 paulson 1997-07-01 New theorem priK_inj_eq, injectivity of priK
1997-07-01 paulson 1997-07-01 New and stronger lemmas; more default simp/cla rules
1997-06-26 nipkow 1997-06-26 set_of_list -> set
1997-06-18 paulson 1997-06-18 Removed Says_Crypt_lost and Says_Crypt_not_lost. Installed not_lost_tac
1997-05-15 oheimb 1997-05-15 renamed unsafe_addss to addss
1997-05-07 paulson 1997-05-07 Conversion to use blast_tac (with other improvements)
1997-02-15 oheimb 1997-02-15 reflecting my recent changes of the simplifier and classical reasoner
1997-01-23 paulson 1997-01-23 Added sees_Spy_partsEs
1997-01-17 paulson 1997-01-17 Now with Andy Gordon's treatment of freshness to replace newN/K
1997-01-09 paulson 1997-01-09 New treatment of nonce creation
1996-12-19 paulson 1996-12-19 Extensive tidying and simplification, largely stemming from changing newN and newK to take an integer argument
1996-12-05 paulson 1996-12-05 Public-key examples