paulson [Fri, 13 Sep 1996 18:46:08 +0200] rev 1998
Reordering of premises for cut theorems, and new law MPair_synth_analz
paulson [Fri, 13 Sep 1996 13:22:08 +0200] rev 1997
No longer assumes Alice is not the Enemy in NS3.
Proofs do not need it, and the assumption complicated the liveness argument
paulson [Fri, 13 Sep 1996 13:20:22 +0200] rev 1996
Uses the improved enemy_analz_tac of Shared.ML, with simpler proofs
Weak liveness
paulson [Fri, 13 Sep 1996 13:16:57 +0200] rev 1995
Addition of Yahalom protocol
paulson [Fri, 13 Sep 1996 13:15:48 +0200] rev 1994
Removal of obsolete thm Fake_parts_insert
paulson [Fri, 13 Sep 1996 13:15:00 +0200] rev 1993
Addition of enemy_analz_tac and safe_solver
Use of AddIffs for theorems about keys