mueller [Thu, 17 Jul 1997 12:44:16 +0200] rev 3522
changes neede for introducing fairness
mueller [Thu, 17 Jul 1997 12:43:32 +0200] rev 3521
changes needed for adding fairness
wenzelm [Wed, 16 Jul 1997 11:34:42 +0200] rev 3520
fixed merge of internal simprocs;
paulson [Mon, 14 Jul 1997 12:47:21 +0200] rev 3519
Changing "lost" from a parameter of protocol definitions to a constant.
Advantages: no "lost" argument everywhere; fewer Vars in subgoals;
less need for specially instantiated rules
Disadvantage: can no longer prove "Agent_not_see_encrypted_key", but this
theorem was never used, and its original proof was also broken
the introduction of the "Notes" constructor.
paulson [Mon, 14 Jul 1997 12:44:09 +0200] rev 3518
Fixed delIffs to deal correctly with the D-rule
paulson [Mon, 14 Jul 1997 12:42:28 +0200] rev 3517
Removed redundant addsimps of Un_insert_left, which is now a default simprule
paulson [Fri, 11 Jul 1997 13:32:39 +0200] rev 3516
Removal of monotonicity reasoning involving "lost" and the theorem
Agent_not_see_encrypted_key, which (a) is never used and (b) becomes harder
to prove when Notes is available.
paulson [Fri, 11 Jul 1997 13:30:01 +0200] rev 3515
Now uses the Notes constructor to distinguish the Client (who has chosen M)
from the Spy (who may have replayed her messages)
paulson [Fri, 11 Jul 1997 13:28:53 +0200] rev 3514
Moved some declarations to Message from Public and Shared
paulson [Fri, 11 Jul 1997 13:27:15 +0200] rev 3513
Now loads theory Event, which contains common declarations