paulson [Mon, 23 Sep 1996 17:41:57 +0200] rev 2002
Bad version of Otway-Rees and the new attack on it
paulson [Fri, 13 Sep 1996 18:49:43 +0200] rev 2001
Reformatting; proved B_gets_secure_key
paulson [Fri, 13 Sep 1996 18:48:25 +0200] rev 2000
Abstraction of enemy_analz_tac over its argument
paulson [Fri, 13 Sep 1996 18:47:01 +0200] rev 1999
Reformatting
paulson [Fri, 13 Sep 1996 18:46:08 +0200] rev 1998
Reordering of premises for cut theorems, and new law MPair_synth_analz
paulson [Fri, 13 Sep 1996 13:22:08 +0200] rev 1997
No longer assumes Alice is not the Enemy in NS3.
Proofs do not need it, and the assumption complicated the liveness argument
paulson [Fri, 13 Sep 1996 13:20:22 +0200] rev 1996
Uses the improved enemy_analz_tac of Shared.ML, with simpler proofs
Weak liveness
paulson [Fri, 13 Sep 1996 13:16:57 +0200] rev 1995
Addition of Yahalom protocol
paulson [Fri, 13 Sep 1996 13:15:48 +0200] rev 1994
Removal of obsolete thm Fake_parts_insert
paulson [Fri, 13 Sep 1996 13:15:00 +0200] rev 1993
Addition of enemy_analz_tac and safe_solver
Use of AddIffs for theorems about keys