paulson [Thu, 19 Jun 1997 11:24:37 +0200] rev 3449
New comments; a tidied proof
paulson [Thu, 19 Jun 1997 11:23:31 +0200] rev 3448
Two new rewrite rules--NOT included by default\!
paulson [Wed, 18 Jun 1997 15:38:35 +0200] rev 3447
Defines KeyWithNonce, which is used to prove the secrecy of NB
paulson [Wed, 18 Jun 1997 15:31:31 +0200] rev 3446
Addition of not_imp (which pushes negation into implication) as a default
simprule
paulson [Wed, 18 Jun 1997 15:30:32 +0200] rev 3445
Corrected Title in header lines
paulson [Wed, 18 Jun 1997 15:28:03 +0200] rev 3444
Streamlined proofs of the secrecy of NB and added authentication of A and B
paulson [Wed, 18 Jun 1997 15:24:21 +0200] rev 3443
Removed Says_Crypt_lost and Says_Crypt_not_lost.
Installed not_lost_tac. Deleted unused theorems initState_subset and seesD
paulson [Wed, 18 Jun 1997 15:23:29 +0200] rev 3442
Removed Says_Crypt_lost and Says_Crypt_not_lost.
Installed not_lost_tac
paulson [Wed, 18 Jun 1997 15:21:30 +0200] rev 3441
Adapted proofs to the removal of Says_Crypt_lost and Says_Crypt_not_lost
paulson [Wed, 18 Jun 1997 15:19:37 +0200] rev 3440
Deleted spurious reference to Spy_not_see_NB, which by chance was defined
in Yahalom.ML\!