# HG changeset patch # User paulson # Date 1084265344 -7200 # Node ID 41d9efe3b5b12a5965236b2e3a357dfa84cade43 # Parent c5cc02b56e0f31aa6ebdcf9fb1992ab7ddba6293 removal of prime characters diff -r c5cc02b56e0f -r 41d9efe3b5b1 src/HOL/Auth/CertifiedEmail.thy --- a/src/HOL/Auth/CertifiedEmail.thy Tue May 11 10:48:30 2004 +0200 +++ b/src/HOL/Auth/CertifiedEmail.thy Tue May 11 10:49:04 2004 +0200 @@ -58,31 +58,31 @@ Number cleartext, Nonce q, S2TTP|} # evs1 \ certified_mail" -CM2: --{*The recipient records @{term S2TTP'} while transmitting it and her +CM2: --{*The recipient records @{term S2TTP} while transmitting it and her password to @{term TTP} over an SSL channel.*} "[|evs2 \ certified_mail; - Gets R {|Agent S, Agent TTP, em', Number BothAuth, Number cleartext', - Nonce q', S2TTP'|} \ set evs2; + Gets R {|Agent S, Agent TTP, em, Number BothAuth, Number cleartext, + Nonce q, S2TTP|} \ set evs2; TTP \ R; - hr = Hash {|Number cleartext', Nonce q', response S R q', em'|} |] + hr = Hash {|Number cleartext, Nonce q, response S R q, em|} |] ==> - Notes TTP {|Agent R, Agent TTP, S2TTP', Key(RPwd R), hr|} # evs2 + Notes TTP {|Agent R, Agent TTP, S2TTP, Key(RPwd R), hr|} # evs2 \ certified_mail" CM3: --{*@{term TTP} simultaneously reveals the key to the recipient and gives a receipt to the sender. The SSL channel does not authenticate - the client (@{term R'}), but @{term TTP} accepts the message only - if the given password is that of the claimed sender, @{term R'}. + the client (@{term R}), but @{term TTP} accepts the message only + if the given password is that of the claimed sender, @{term R}. He replies over the established SSL channel.*} "[|evs3 \ certified_mail; - Notes TTP {|Agent R', Agent TTP, S2TTP'', Key(RPwd R'), hr'|} \ set evs3; - S2TTP'' = Crypt (pubEK TTP) - {|Agent S, Number BothAuth, Key k', Agent R', hs'|}; - TTP \ R'; hs' = hr'; k' \ symKeys|] + Notes TTP {|Agent R, Agent TTP, S2TTP, Key(RPwd R), hr|} \ set evs3; + S2TTP = Crypt (pubEK TTP) + {|Agent S, Number BothAuth, Key k, Agent R, hs|}; + TTP \ R; hs = hr; k \ symKeys|] ==> - Notes R' {|Agent TTP, Agent R', Key k', hr'|} # - Gets S (Crypt (priSK TTP) S2TTP'') # - Says TTP S (Crypt (priSK TTP) S2TTP'') # evs3 \ certified_mail" + Notes R {|Agent TTP, Agent R, Key k, hr|} # + Gets S (Crypt (priSK TTP) S2TTP) # + Says TTP S (Crypt (priSK TTP) S2TTP) # evs3 \ certified_mail" Reception: "[|evsr \ certified_mail; Says A B X \ set evsr|]