paulson [Fri, 13 Sep 1996 13:22:08 +0200] rev 1997
No longer assumes Alice is not the Enemy in NS3.
Proofs do not need it, and the assumption complicated the liveness argument
paulson [Fri, 13 Sep 1996 13:20:22 +0200] rev 1996
Uses the improved enemy_analz_tac of Shared.ML, with simpler proofs
Weak liveness
paulson [Fri, 13 Sep 1996 13:16:57 +0200] rev 1995
Addition of Yahalom protocol
paulson [Fri, 13 Sep 1996 13:15:48 +0200] rev 1994
Removal of obsolete thm Fake_parts_insert
paulson [Fri, 13 Sep 1996 13:15:00 +0200] rev 1993
Addition of enemy_analz_tac and safe_solver
Use of AddIffs for theorems about keys
oheimb [Thu, 12 Sep 1996 18:12:09 +0200] rev 1992
added flat_eq,
renamed adm_disj_lemma11 to adm_lemma11,
localized adm_disj_lemma1, ..., adm_disj_lemma10, adm_disj_lemma12,
modularized proof of admI
oheimb [Thu, 12 Sep 1996 18:05:33 +0200] rev 1991
renamed adm_disj_lemma11 to adm_lemma11
oheimb [Thu, 12 Sep 1996 17:28:06 +0200] rev 1990
added comment on is_flat
oheimb [Thu, 12 Sep 1996 17:18:00 +0200] rev 1989
added stric
tI
oheimb [Thu, 12 Sep 1996 15:22:52 +0200] rev 1988
undo last revision