TPTP Problem File: SWV730-1.p
View Solutions
- Solve Problem
%------------------------------------------------------------------------------
% File : SWV730-1 : TPTP v8.2.0. Released v4.1.0.
% Domain : Software Verification
% Problem : Needham-Schroeder shared-key protocol 169_1
% Version : Especial.
% English :
% Refs : [BAN89] Burrows et al. (1989), A Logic of Authentication
% : [Nip10] Nipkow (2010), Email to Geoff Sutcliffe
% : [BN10] Boehme & Nipkow (2010), Sledgehammer: Judgement Day
% Source : [Nip10]
% Names : NS_Shared-169_1 [Nip10]
% Status : Unsatisfiable
% Rating : 0.65 v8.2.0, 0.62 v8.1.0, 0.63 v7.4.0, 0.59 v7.3.0, 0.67 v7.1.0, 0.58 v7.0.0, 0.67 v6.3.0, 0.64 v6.2.0, 0.70 v6.1.0, 0.79 v6.0.0, 0.70 v5.5.0, 0.85 v5.4.0, 0.95 v5.3.0, 0.94 v5.0.0, 0.86 v4.1.0
% Syntax : Number of clauses : 561 ( 242 unt; 54 nHn; 340 RR)
% Number of literals : 1058 ( 285 equ; 524 neg)
% Maximal clause size : 6 ( 1 avg)
% Maximal term depth : 11 ( 2 avg)
% Number of predicates : 15 ( 14 usr; 0 prp; 1-3 aty)
% Number of functors : 65 ( 65 usr; 23 con; 0-4 aty)
% Number of variables : 1586 ( 465 sgn)
% SPC : CNF_UNS_RFO_SEQ_NHN
% Comments :
%------------------------------------------------------------------------------
cnf(cls_agent_Oinject_0,axiom,
( c_Message_Oagent_OFriend(V_nat) != c_Message_Oagent_OFriend(V_nat_H)
| V_nat = V_nat_H ) ).
cnf(cls_agent_Osimps_I6_J_0,axiom,
c_Message_Oagent_OFriend(V_nat) != c_Message_Oagent_OSpy ).
cnf(cls_agent_Osimps_I7_J_0,axiom,
c_Message_Oagent_OSpy != c_Message_Oagent_OFriend(V_nat) ).
cnf(cls_agent_Osimps_I2_J_0,axiom,
c_Message_Oagent_OServer != c_Message_Oagent_OFriend(V_nat_H) ).
cnf(cls_agent_Osimps_I3_J_0,axiom,
c_Message_Oagent_OFriend(V_nat_H) != c_Message_Oagent_OServer ).
cnf(cls_parts__empty_0,axiom,
c_Message_Oparts(c_Orderings_Obot__class_Obot(tc_fun(tc_Message_Omsg,tc_bool))) = c_Orderings_Obot__class_Obot(tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_bex__empty_0,axiom,
( ~ hBOOL(hAPP(V_P,V_x))
| ~ hBOOL(c_in(V_x,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a)) ) ).
cnf(cls_emptyE_0,axiom,
~ hBOOL(c_in(V_a,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a)) ).
cnf(cls_empty__iff_0,axiom,
~ hBOOL(c_in(V_c,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a)) ).
cnf(cls_ball__empty_0,axiom,
( hBOOL(hAPP(V_P,V_x))
| ~ hBOOL(c_in(V_x,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a)) ) ).
cnf(cls_ex__in__conv_0,axiom,
~ hBOOL(c_in(V_x,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a)) ).
cnf(cls_empty__is__image_1,axiom,
c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)) = c_Set_Oimage(V_f,c_Orderings_Obot__class_Obot(tc_fun(T_b,tc_bool)),T_b,T_a) ).
cnf(cls_insert__is__Un_0,axiom,
c_Set_Oinsert(V_a,V_A,T_a) = c_Lattices_Oupper__semilattice__class_Osup(c_Set_Oinsert(V_a,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a),V_A,tc_fun(T_a,tc_bool)) ).
cnf(cls_sup__eq__bot__eq2_0,axiom,
( ~ class_Lattices_Obounded__lattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,T_a) != c_Orderings_Obot__class_Obot(T_a)
| V_B = c_Orderings_Obot__class_Obot(T_a) ) ).
cnf(cls_sup__eq__bot__eq1_0,axiom,
( ~ class_Lattices_Obounded__lattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,T_a) != c_Orderings_Obot__class_Obot(T_a)
| V_A = c_Orderings_Obot__class_Obot(T_a) ) ).
cnf(cls_Un__empty_0,axiom,
( c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)) != c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool))
| V_A = c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)) ) ).
cnf(cls_Un__empty_1,axiom,
( c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)) != c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool))
| V_B = c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)) ) ).
cnf(cls_singleton__inject_0,axiom,
( c_Set_Oinsert(V_a,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a) != c_Set_Oinsert(V_b,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a)
| V_a = V_b ) ).
cnf(cls_image__empty_0,axiom,
c_Set_Oimage(V_f,c_Orderings_Obot__class_Obot(tc_fun(T_b,tc_bool)),T_b,T_a) = c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)) ).
cnf(cls_doubleton__eq__iff_4,axiom,
c_Set_Oinsert(V_xa,c_Set_Oinsert(V_x,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a),T_a) = c_Set_Oinsert(V_x,c_Set_Oinsert(V_xa,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a),T_a) ).
cnf(cls_parts__insert2_0,axiom,
c_Message_Oparts(c_Set_Oinsert(V_X,c_Set_Oinsert(V_Y,V_H,tc_Message_Omsg),tc_Message_Omsg)) = c_Lattices_Oupper__semilattice__class_Osup(c_Lattices_Oupper__semilattice__class_Osup(c_Message_Oparts(c_Set_Oinsert(V_X,c_Orderings_Obot__class_Obot(tc_fun(tc_Message_Omsg,tc_bool)),tc_Message_Omsg)),c_Message_Oparts(c_Set_Oinsert(V_Y,c_Orderings_Obot__class_Obot(tc_fun(tc_Message_Omsg,tc_bool)),tc_Message_Omsg)),tc_fun(tc_Message_Omsg,tc_bool)),c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_keymode_Osimps_I1_J_0,axiom,
c_Public_Okeymode_OSignature != c_Public_Okeymode_OEncryption ).
cnf(cls_bot__fun__eq_0,axiom,
( ~ class_Orderings_Obot(T_b)
| hAPP(c_Orderings_Obot__class_Obot(tc_fun(t_a,T_b)),v_x) = c_Orderings_Obot__class_Obot(T_b) ) ).
cnf(cls_empty__is__image_0,axiom,
( c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)) != c_Set_Oimage(V_f,V_A,T_b,T_a)
| V_A = c_Orderings_Obot__class_Obot(tc_fun(T_b,tc_bool)) ) ).
cnf(cls_keymode_Oinduct_0,axiom,
( hBOOL(hAPP(V_P,V_keymode))
| ~ hBOOL(hAPP(V_P,c_Public_Okeymode_OEncryption))
| ~ hBOOL(hAPP(V_P,c_Public_Okeymode_OSignature)) ) ).
cnf(cls_empty__subsetI_0,axiom,
c_lessequals(c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),V_A,tc_fun(T_a,tc_bool)) ).
cnf(cls_bot__least_0,axiom,
( ~ class_Orderings_Obot(T_a)
| c_lessequals(c_Orderings_Obot__class_Obot(T_a),V_x,T_a) ) ).
cnf(cls_insert__not__empty_0,axiom,
c_Set_Oinsert(V_a,V_A,T_a) != c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)) ).
cnf(cls_sup__bot__right_0,axiom,
( ~ class_Lattices_Obounded__lattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(V_x,c_Orderings_Obot__class_Obot(T_a),T_a) = V_x ) ).
cnf(cls_sup__bot__left_0,axiom,
( ~ class_Lattices_Obounded__lattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(c_Orderings_Obot__class_Obot(T_a),V_x,T_a) = V_x ) ).
cnf(cls_Un__empty__left_0,axiom,
c_Lattices_Oupper__semilattice__class_Osup(c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),V_B,tc_fun(T_a,tc_bool)) = V_B ).
cnf(cls_Un__empty__right_0,axiom,
c_Lattices_Oupper__semilattice__class_Osup(V_A,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),tc_fun(T_a,tc_bool)) = V_A ).
cnf(cls_keymode_Osimps_I2_J_0,axiom,
c_Public_Okeymode_OEncryption != c_Public_Okeymode_OSignature ).
cnf(cls_bot1E_0,axiom,
~ hBOOL(hAPP(c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),V_x)) ).
cnf(cls_UNIV__not__empty_0,axiom,
c_Orderings_Otop__class_Otop(tc_fun(T_a,tc_bool)) != c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)) ).
cnf(cls_doubleton__eq__iff_0,axiom,
( c_Set_Oinsert(V_a,c_Set_Oinsert(V_b,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a),T_a) != c_Set_Oinsert(V_c,c_Set_Oinsert(V_d,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a),T_a)
| V_a = V_d
| V_a = V_c ) ).
cnf(cls_doubleton__eq__iff_1,axiom,
( c_Set_Oinsert(V_a,c_Set_Oinsert(V_b,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a),T_a) != c_Set_Oinsert(V_c,c_Set_Oinsert(V_d,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a),T_a)
| V_b = V_c
| V_a = V_c ) ).
cnf(cls_doubleton__eq__iff_2,axiom,
( c_Set_Oinsert(V_a,c_Set_Oinsert(V_b,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a),T_a) != c_Set_Oinsert(V_c,c_Set_Oinsert(V_d,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a),T_a)
| V_a = V_d
| V_b = V_d ) ).
cnf(cls_doubleton__eq__iff_3,axiom,
( c_Set_Oinsert(V_a,c_Set_Oinsert(V_b,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a),T_a) != c_Set_Oinsert(V_c,c_Set_Oinsert(V_d,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a),T_a)
| V_b = V_c
| V_b = V_d ) ).
cnf(cls_bot__empty__eq_0,axiom,
hAPP(c_Orderings_Obot__class_Obot(tc_fun(t_a,tc_bool)),v_x) = c_in(v_x,c_Orderings_Obot__class_Obot(tc_fun(t_a,tc_bool)),t_a) ).
cnf(cls_subset__empty_0,axiom,
( V_A = c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_A,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),tc_fun(T_a,tc_bool)) ) ).
cnf(cls_subset__empty_1,axiom,
c_lessequals(c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),tc_fun(T_a,tc_bool)) ).
cnf(cls_empty__not__insert_0,axiom,
c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)) != c_Set_Oinsert(V_a,V_A,T_a) ).
cnf(cls_analz__empty_0,axiom,
c_Message_Oanalz(c_Orderings_Obot__class_Obot(tc_fun(tc_Message_Omsg,tc_bool))) = c_Orderings_Obot__class_Obot(tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_image__is__empty_0,axiom,
( c_Set_Oimage(V_f,V_A,T_b,T_a) != c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool))
| V_A = c_Orderings_Obot__class_Obot(tc_fun(T_b,tc_bool)) ) ).
cnf(cls_parts__insert_0,axiom,
c_Message_Oparts(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)) = c_Lattices_Oupper__semilattice__class_Osup(c_Message_Oparts(c_Set_Oinsert(V_X,c_Orderings_Obot__class_Obot(tc_fun(tc_Message_Omsg,tc_bool)),tc_Message_Omsg)),c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_subset__singletonD_0,axiom,
( V_A = c_Set_Oinsert(V_x,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a)
| V_A = c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_A,c_Set_Oinsert(V_x,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a),tc_fun(T_a,tc_bool)) ) ).
cnf(cls_Un__empty_2,axiom,
c_Lattices_Oupper__semilattice__class_Osup(c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),tc_fun(T_a,tc_bool)) = c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)) ).
cnf(cls_comm__monoid__add_Ononempty__iff_2,axiom,
( c_Set_Oinsert(V_x,V_xa,T_a) != c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool))
| hBOOL(c_in(V_x,V_xa,T_a)) ) ).
cnf(cls_singletonE_0,axiom,
( V_b = V_a
| ~ hBOOL(c_in(V_b,c_Set_Oinsert(V_a,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a),T_a)) ) ).
cnf(cls_singleton__iff_1,axiom,
hBOOL(c_in(V_x,c_Set_Oinsert(V_x,c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)),T_a),T_a)) ).
cnf(cls_set__empty_1,axiom,
c_List_Oset(c_List_Olist_ONil(T_a),T_a) = c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)) ).
cnf(cls_set__empty2_0,axiom,
( c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)) != c_List_Oset(V_xs,T_a)
| V_xs = c_List_Olist_ONil(T_a) ) ).
cnf(cls_set__empty2_1,axiom,
c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool)) = c_List_Oset(c_List_Olist_ONil(T_a),T_a) ).
cnf(cls_set__empty_0,axiom,
( c_List_Oset(V_xs,T_a) != c_Orderings_Obot__class_Obot(tc_fun(T_a,tc_bool))
| V_xs = c_List_Olist_ONil(T_a) ) ).
cnf(cls_parts__emptyE_0,axiom,
~ hBOOL(c_in(V_X,c_Message_Oparts(c_Orderings_Obot__class_Obot(tc_fun(tc_Message_Omsg,tc_bool))),tc_Message_Omsg)) ).
cnf(cls_parts__insert__knows__A_0,axiom,
c_Message_Oparts(c_Set_Oinsert(V_X,c_Event_Oknows(V_A,V_evs),tc_Message_Omsg)) = c_Lattices_Oupper__semilattice__class_Osup(c_Message_Oparts(c_Set_Oinsert(V_X,c_Orderings_Obot__class_Obot(tc_fun(tc_Message_Omsg,tc_bool)),tc_Message_Omsg)),c_Message_Oparts(c_Event_Oknows(V_A,V_evs)),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_initState__Friend_0,axiom,
c_Event_OinitState(c_Message_Oagent_OFriend(V_i)) = c_Lattices_Oupper__semilattice__class_Osup(c_Lattices_Oupper__semilattice__class_Osup(c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(c_Public_Okeymode_OEncryption),c_Message_Oagent_OFriend(V_i)))),c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(c_Public_Okeymode_OSignature),c_Message_Oagent_OFriend(V_i)))),c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,hAPP(c_Public_OshrK,c_Message_Oagent_OFriend(V_i))),c_Orderings_Obot__class_Obot(tc_fun(tc_Message_Omsg,tc_bool)),tc_Message_Omsg),tc_Message_Omsg),tc_Message_Omsg),c_Set_Oimage(c_Message_Omsg_OKey,c_Set_Oimage(c_Public_OpublicKey(c_Public_Okeymode_OEncryption),c_Orderings_Otop__class_Otop(tc_fun(tc_Message_Oagent,tc_bool)),tc_Message_Oagent,tc_nat),tc_nat,tc_Message_Omsg),tc_fun(tc_Message_Omsg,tc_bool)),c_Set_Oimage(c_Message_Omsg_OKey,c_Set_Oimage(c_Public_OpublicKey(c_Public_Okeymode_OSignature),c_Orderings_Otop__class_Otop(tc_fun(tc_Message_Oagent,tc_bool)),tc_Message_Oagent,tc_nat),tc_nat,tc_Message_Omsg),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_used__parts__subset__parts_0,axiom,
( c_lessequals(c_Message_Oparts(c_Set_Oinsert(V_X,c_Orderings_Obot__class_Obot(tc_fun(tc_Message_Omsg,tc_bool)),tc_Message_Omsg)),c_Event_Oused(V_evs),tc_fun(tc_Message_Omsg,tc_bool))
| ~ hBOOL(c_in(V_X,c_Event_Oused(V_evs),tc_Message_Omsg)) ) ).
cnf(cls_parts__insert__spies_0,axiom,
c_Message_Oparts(c_Set_Oinsert(V_X,c_Event_Oknows(c_Message_Oagent_OSpy,V_evs),tc_Message_Omsg)) = c_Lattices_Oupper__semilattice__class_Osup(c_Message_Oparts(c_Set_Oinsert(V_X,c_Orderings_Obot__class_Obot(tc_fun(tc_Message_Omsg,tc_bool)),tc_Message_Omsg)),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_Un__insert__right_0,axiom,
c_Lattices_Oupper__semilattice__class_Osup(V_A,c_Set_Oinsert(V_a,V_B,T_a),tc_fun(T_a,tc_bool)) = c_Set_Oinsert(V_a,c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)),T_a) ).
cnf(cls_Un__insert__left_0,axiom,
c_Lattices_Oupper__semilattice__class_Osup(c_Set_Oinsert(V_a,V_B,T_a),V_C,tc_fun(T_a,tc_bool)) = c_Set_Oinsert(V_a,c_Lattices_Oupper__semilattice__class_Osup(V_B,V_C,tc_fun(T_a,tc_bool)),T_a) ).
cnf(cls_subset__insertI2_0,axiom,
( c_lessequals(V_A,c_Set_Oinsert(V_b,V_B,T_a),tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_A,V_B,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_insert__subset_1,axiom,
( c_lessequals(V_A,V_B,tc_fun(T_a,tc_bool))
| ~ c_lessequals(c_Set_Oinsert(V_x,V_A,T_a),V_B,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_sup__fun__eq_0,axiom,
( ~ class_Lattices_Olattice(T_b)
| hAPP(c_Lattices_Oupper__semilattice__class_Osup(V_f,V_g,tc_fun(t_a,T_b)),v_x) = c_Lattices_Oupper__semilattice__class_Osup(hAPP(V_f,v_x),hAPP(V_g,v_x),T_b) ) ).
cnf(cls_Un__absorb_0,axiom,
c_Lattices_Oupper__semilattice__class_Osup(V_A,V_A,tc_fun(T_a,tc_bool)) = V_A ).
cnf(cls_sup__idem_0,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(V_x,V_x,T_a) = V_x ) ).
cnf(cls_analz__Un_0,axiom,
c_lessequals(c_Lattices_Oupper__semilattice__class_Osup(c_Message_Oanalz(V_G),c_Message_Oanalz(V_H),tc_fun(tc_Message_Omsg,tc_bool)),c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(V_G,V_H,tc_fun(tc_Message_Omsg,tc_bool))),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_parts__Un__subset1_0,axiom,
c_lessequals(c_Lattices_Oupper__semilattice__class_Osup(c_Message_Oparts(V_G),c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool)),c_Message_Oparts(c_Lattices_Oupper__semilattice__class_Osup(V_G,V_H,tc_fun(tc_Message_Omsg,tc_bool))),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_synth__subset__iff_1,axiom,
( c_lessequals(c_Message_Osynth(V_G),c_Message_Osynth(V_H),tc_fun(tc_Message_Omsg,tc_bool))
| ~ c_lessequals(V_G,c_Message_Osynth(V_H),tc_fun(tc_Message_Omsg,tc_bool)) ) ).
cnf(cls_synth__subset__iff_0,axiom,
( c_lessequals(V_G,c_Message_Osynth(V_H),tc_fun(tc_Message_Omsg,tc_bool))
| ~ c_lessequals(c_Message_Osynth(V_G),c_Message_Osynth(V_H),tc_fun(tc_Message_Omsg,tc_bool)) ) ).
cnf(cls_analz__analz__Un_0,axiom,
c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(c_Message_Oanalz(V_G),V_H,tc_fun(tc_Message_Omsg,tc_bool))) = c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(V_G,V_H,tc_fun(tc_Message_Omsg,tc_bool))) ).
cnf(cls_Un__left__commute_0,axiom,
c_Lattices_Oupper__semilattice__class_Osup(V_A,c_Lattices_Oupper__semilattice__class_Osup(V_B,V_C,tc_fun(T_a,tc_bool)),tc_fun(T_a,tc_bool)) = c_Lattices_Oupper__semilattice__class_Osup(V_B,c_Lattices_Oupper__semilattice__class_Osup(V_A,V_C,tc_fun(T_a,tc_bool)),tc_fun(T_a,tc_bool)) ).
cnf(cls_Un__assoc_0,axiom,
c_Lattices_Oupper__semilattice__class_Osup(c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)),V_C,tc_fun(T_a,tc_bool)) = c_Lattices_Oupper__semilattice__class_Osup(V_A,c_Lattices_Oupper__semilattice__class_Osup(V_B,V_C,tc_fun(T_a,tc_bool)),tc_fun(T_a,tc_bool)) ).
cnf(cls_sup__assoc_0,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a),V_z,T_a) = c_Lattices_Oupper__semilattice__class_Osup(V_x,c_Lattices_Oupper__semilattice__class_Osup(V_y,V_z,T_a),T_a) ) ).
cnf(cls_sup__left__commute_0,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(V_x,c_Lattices_Oupper__semilattice__class_Osup(V_y,V_z,T_a),T_a) = c_Lattices_Oupper__semilattice__class_Osup(V_y,c_Lattices_Oupper__semilattice__class_Osup(V_x,V_z,T_a),T_a) ) ).
cnf(cls_analz__image__freshK__simps_I65_J_0,axiom,
c_Lattices_Oupper__semilattice__class_Osup(V_A,c_Lattices_Oupper__semilattice__class_Osup(V_B,V_C,tc_fun(T_a,tc_bool)),tc_fun(T_a,tc_bool)) = c_Lattices_Oupper__semilattice__class_Osup(c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)),V_C,tc_fun(T_a,tc_bool)) ).
cnf(cls_inf__sup__aci_I7_J_0,axiom,
( ~ class_Lattices_Olattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(V_x,c_Lattices_Oupper__semilattice__class_Osup(V_y,V_z,T_a),T_a) = c_Lattices_Oupper__semilattice__class_Osup(V_y,c_Lattices_Oupper__semilattice__class_Osup(V_x,V_z,T_a),T_a) ) ).
cnf(cls_inf__sup__aci_I6_J_0,axiom,
( ~ class_Lattices_Olattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a),V_z,T_a) = c_Lattices_Oupper__semilattice__class_Osup(V_x,c_Lattices_Oupper__semilattice__class_Osup(V_y,V_z,T_a),T_a) ) ).
cnf(cls_analz__cong_0,axiom,
( c_Message_Oanalz(V_H) != c_Message_Oanalz(V_H_H)
| c_Message_Oanalz(V_G) != c_Message_Oanalz(V_G_H)
| c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(V_G,V_H,tc_fun(tc_Message_Omsg,tc_bool))) = c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(V_G_H,V_H_H,tc_fun(tc_Message_Omsg,tc_bool))) ) ).
cnf(cls_Un__subset__iff_2,axiom,
( c_lessequals(c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)),V_C,tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_B,V_C,tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_A,V_C,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_Un__upper2_0,axiom,
c_lessequals(V_B,c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)),tc_fun(T_a,tc_bool)) ).
cnf(cls_Un__upper1_0,axiom,
c_lessequals(V_A,c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)),tc_fun(T_a,tc_bool)) ).
cnf(cls_Un__least_0,axiom,
( c_lessequals(c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)),V_C,tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_B,V_C,tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_A,V_C,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_le__supI_0,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_lessequals(c_Lattices_Oupper__semilattice__class_Osup(V_a,V_b,T_a),V_x,T_a)
| ~ c_lessequals(V_b,V_x,T_a)
| ~ c_lessequals(V_a,V_x,T_a) ) ).
cnf(cls_sup__ge1_0,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_lessequals(V_x,c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a),T_a) ) ).
cnf(cls_sup__ge2_0,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_lessequals(V_y,c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a),T_a) ) ).
cnf(cls_sup__least_0,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_lessequals(c_Lattices_Oupper__semilattice__class_Osup(V_y,V_z,T_a),V_x,T_a)
| ~ c_lessequals(V_z,V_x,T_a)
| ~ c_lessequals(V_y,V_x,T_a) ) ).
cnf(cls_le__sup__iff_2,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_lessequals(c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a),V_z,T_a)
| ~ c_lessequals(V_y,V_z,T_a)
| ~ c_lessequals(V_x,V_z,T_a) ) ).
cnf(cls_inf__sup__ord_I4_J_0,axiom,
( ~ class_Lattices_Olattice(T_a)
| c_lessequals(V_y,c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a),T_a) ) ).
cnf(cls_inf__sup__ord_I3_J_0,axiom,
( ~ class_Lattices_Olattice(T_a)
| c_lessequals(V_x,c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a),T_a) ) ).
cnf(cls_msg_Osimps_I33_J_0,axiom,
c_Message_Omsg_OHash(V_msg_H) != c_Message_Omsg_ONonce(V_nat) ).
cnf(cls_Un__commute_0,axiom,
c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)) = c_Lattices_Oupper__semilattice__class_Osup(V_B,V_A,tc_fun(T_a,tc_bool)) ).
cnf(cls_sup__commute_0,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a) = c_Lattices_Oupper__semilattice__class_Osup(V_y,V_x,T_a) ) ).
cnf(cls_inf__sup__aci_I5_J_0,axiom,
( ~ class_Lattices_Olattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a) = c_Lattices_Oupper__semilattice__class_Osup(V_y,V_x,T_a) ) ).
cnf(cls_Un__left__absorb_0,axiom,
c_Lattices_Oupper__semilattice__class_Osup(V_A,c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)),tc_fun(T_a,tc_bool)) = c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)) ).
cnf(cls_sup__left__idem_0,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(V_x,c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a),T_a) = c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a) ) ).
cnf(cls_inf__sup__aci_I8_J_0,axiom,
( ~ class_Lattices_Olattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(V_x,c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a),T_a) = c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a) ) ).
cnf(cls_le__funD_0,axiom,
( ~ class_HOL_Oord(T_b)
| c_lessequals(hAPP(V_f,V_x),hAPP(V_g,V_x),T_b)
| ~ c_lessequals(V_f,V_g,tc_fun(T_a,T_b)) ) ).
cnf(cls_subset__iff_0,axiom,
( hBOOL(c_in(V_t,V_B,T_a))
| ~ hBOOL(c_in(V_t,V_A,T_a))
| ~ c_lessequals(V_A,V_B,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_set__rev__mp_0,axiom,
( hBOOL(c_in(V_x,V_B,T_a))
| ~ c_lessequals(V_A,V_B,tc_fun(T_a,tc_bool))
| ~ hBOOL(c_in(V_x,V_A,T_a)) ) ).
cnf(cls_subsetD_0,axiom,
( hBOOL(c_in(V_c,V_B,T_a))
| ~ hBOOL(c_in(V_c,V_A,T_a))
| ~ c_lessequals(V_A,V_B,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_set__mp_0,axiom,
( hBOOL(c_in(V_x,V_B,T_a))
| ~ hBOOL(c_in(V_x,V_A,T_a))
| ~ c_lessequals(V_A,V_B,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_UnCI_1,axiom,
( hBOOL(c_in(V_c,c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)),T_a))
| ~ hBOOL(c_in(V_c,V_A,T_a)) ) ).
cnf(cls_UnCI_0,axiom,
( hBOOL(c_in(V_c,c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)),T_a))
| ~ hBOOL(c_in(V_c,V_B,T_a)) ) ).
cnf(cls_UnE_0,axiom,
( hBOOL(c_in(V_c,V_B,T_a))
| hBOOL(c_in(V_c,V_A,T_a))
| ~ hBOOL(c_in(V_c,c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)),T_a)) ) ).
cnf(cls_msg_Osimps_I45_J_0,axiom,
c_Message_Omsg_OMPair(V_msg1_H,V_msg2_H) != c_Message_Omsg_OHash(V_msg) ).
cnf(cls_msg_Osimps_I44_J_0,axiom,
c_Message_Omsg_OHash(V_msg) != c_Message_Omsg_OMPair(V_msg1_H,V_msg2_H) ).
cnf(cls_analzp_OSnd_0,axiom,
( c_Message_Oanalzp(V_H,V_Y)
| ~ c_Message_Oanalzp(V_H,c_Message_Omsg_OMPair(V_X,V_Y)) ) ).
cnf(cls_analzp_OFst_0,axiom,
( c_Message_Oanalzp(V_H,V_X)
| ~ c_Message_Oanalzp(V_H,c_Message_Omsg_OMPair(V_X,V_Y)) ) ).
cnf(cls_parts__Un_0,axiom,
c_Message_Oparts(c_Lattices_Oupper__semilattice__class_Osup(V_G,V_H,tc_fun(tc_Message_Omsg,tc_bool))) = c_Lattices_Oupper__semilattice__class_Osup(c_Message_Oparts(V_G),c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_parts__increasing_0,axiom,
c_lessequals(V_H,c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_parts__mono_0,axiom,
( c_lessequals(c_Message_Oparts(V_G),c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool))
| ~ c_lessequals(V_G,V_H,tc_fun(tc_Message_Omsg,tc_bool)) ) ).
cnf(cls_parts__subset__iff_1,axiom,
( c_lessequals(c_Message_Oparts(V_G),c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool))
| ~ c_lessequals(V_G,c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool)) ) ).
cnf(cls_parts__subset__iff_0,axiom,
( c_lessequals(V_G,c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool))
| ~ c_lessequals(c_Message_Oparts(V_G),c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool)) ) ).
cnf(cls_msg_Osimps_I46_J_0,axiom,
c_Message_Omsg_OHash(V_msg) != c_Message_Omsg_OCrypt(V_nat_H,V_msg_H) ).
cnf(cls_msg_Osimps_I47_J_0,axiom,
c_Message_Omsg_OCrypt(V_nat_H,V_msg_H) != c_Message_Omsg_OHash(V_msg) ).
cnf(cls_msg_Osimps_I39_J_0,axiom,
c_Message_Omsg_OHash(V_msg_H) != hAPP(c_Message_Omsg_OKey,V_nat) ).
cnf(cls_msg_Osimps_I38_J_0,axiom,
hAPP(c_Message_Omsg_OKey,V_nat) != c_Message_Omsg_OHash(V_msg_H) ).
cnf(cls_msg_Osimps_I15_J_0,axiom,
c_Message_Omsg_OHash(V_msg_H) != c_Message_Omsg_OAgent(V_agent) ).
cnf(cls_msg_Osimps_I14_J_0,axiom,
c_Message_Omsg_OAgent(V_agent) != c_Message_Omsg_OHash(V_msg_H) ).
cnf(cls_Fake__parts__insert_0,axiom,
( c_lessequals(c_Message_Oparts(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)),c_Lattices_Oupper__semilattice__class_Osup(c_Message_Osynth(c_Message_Oanalz(V_H)),c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool)),tc_fun(tc_Message_Omsg,tc_bool))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg)) ) ).
cnf(cls_used__nil__subset_0,axiom,
c_lessequals(c_Event_Oused(c_List_Olist_ONil(tc_Event_Oevent)),c_Event_Oused(V_evs),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_parts__cut_0,axiom,
( hBOOL(c_in(V_Y,c_Message_Oparts(c_Lattices_Oupper__semilattice__class_Osup(V_G,V_H,tc_fun(tc_Message_Omsg,tc_bool))),tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,c_Message_Oparts(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_Y,c_Message_Oparts(c_Set_Oinsert(V_X,V_G,tc_Message_Omsg)),tc_Message_Omsg)) ) ).
cnf(cls_gen__analz__insert__eq_0,axiom,
( c_Message_Oanalz(c_Set_Oinsert(V_X,V_G,tc_Message_Omsg)) = c_Message_Oanalz(V_G)
| ~ c_lessequals(V_H,V_G,tc_fun(tc_Message_Omsg,tc_bool))
| ~ hBOOL(c_in(V_X,c_Message_Oanalz(V_H),tc_Message_Omsg)) ) ).
cnf(cls_analz__insert__Crypt__subset_0,axiom,
c_lessequals(c_Message_Oanalz(c_Set_Oinsert(c_Message_Omsg_OCrypt(V_K,V_X),V_H,tc_Message_Omsg)),c_Set_Oinsert(c_Message_Omsg_OCrypt(V_K,V_X),c_Message_Oanalz(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)),tc_Message_Omsg),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_initState__Spy_0,axiom,
c_Event_OinitState(c_Message_Oagent_OSpy) = c_Lattices_Oupper__semilattice__class_Osup(c_Lattices_Oupper__semilattice__class_Osup(c_Lattices_Oupper__semilattice__class_Osup(c_Lattices_Oupper__semilattice__class_Osup(c_Set_Oimage(c_Message_Omsg_OKey,c_Set_Oimage(c_Message_OinvKey,c_Set_Oimage(c_Public_OpublicKey(c_Public_Okeymode_OEncryption),c_Event_Obad,tc_Message_Oagent,tc_nat),tc_nat,tc_nat),tc_nat,tc_Message_Omsg),c_Set_Oimage(c_Message_Omsg_OKey,c_Set_Oimage(c_Message_OinvKey,c_Set_Oimage(c_Public_OpublicKey(c_Public_Okeymode_OSignature),c_Event_Obad,tc_Message_Oagent,tc_nat),tc_nat,tc_nat),tc_nat,tc_Message_Omsg),tc_fun(tc_Message_Omsg,tc_bool)),c_Set_Oimage(c_Message_Omsg_OKey,c_Set_Oimage(c_Public_OshrK,c_Event_Obad,tc_Message_Oagent,tc_nat),tc_nat,tc_Message_Omsg),tc_fun(tc_Message_Omsg,tc_bool)),c_Set_Oimage(c_Message_Omsg_OKey,c_Set_Oimage(c_Public_OpublicKey(c_Public_Okeymode_OEncryption),c_Orderings_Otop__class_Otop(tc_fun(tc_Message_Oagent,tc_bool)),tc_Message_Oagent,tc_nat),tc_nat,tc_Message_Omsg),tc_fun(tc_Message_Omsg,tc_bool)),c_Set_Oimage(c_Message_Omsg_OKey,c_Set_Oimage(c_Public_OpublicKey(c_Public_Okeymode_OSignature),c_Orderings_Otop__class_Otop(tc_fun(tc_Message_Oagent,tc_bool)),tc_Message_Oagent,tc_nat),tc_nat,tc_Message_Omsg),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_Fake__parts__sing_0,axiom,
( c_lessequals(c_Message_Oparts(c_Set_Oinsert(V_X,c_Orderings_Obot__class_Obot(tc_fun(tc_Message_Omsg,tc_bool)),tc_Message_Omsg)),c_Lattices_Oupper__semilattice__class_Osup(c_Message_Osynth(c_Message_Oanalz(V_H)),c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool)),tc_fun(tc_Message_Omsg,tc_bool))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg)) ) ).
cnf(cls_initState__Server_0,axiom,
c_Event_OinitState(c_Message_Oagent_OServer) = c_Lattices_Oupper__semilattice__class_Osup(c_Lattices_Oupper__semilattice__class_Osup(c_Lattices_Oupper__semilattice__class_Osup(c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(c_Public_Okeymode_OEncryption),c_Message_Oagent_OServer))),c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(c_Public_Okeymode_OSignature),c_Message_Oagent_OServer))),c_Orderings_Obot__class_Obot(tc_fun(tc_Message_Omsg,tc_bool)),tc_Message_Omsg),tc_Message_Omsg),c_Set_Oimage(c_Message_Omsg_OKey,c_Set_Oimage(c_Public_OpublicKey(c_Public_Okeymode_OEncryption),c_Orderings_Otop__class_Otop(tc_fun(tc_Message_Oagent,tc_bool)),tc_Message_Oagent,tc_nat),tc_nat,tc_Message_Omsg),tc_fun(tc_Message_Omsg,tc_bool)),c_Set_Oimage(c_Message_Omsg_OKey,c_Set_Oimage(c_Public_OpublicKey(c_Public_Okeymode_OSignature),c_Orderings_Otop__class_Otop(tc_fun(tc_Message_Oagent,tc_bool)),tc_Message_Oagent,tc_nat),tc_nat,tc_Message_Omsg),tc_fun(tc_Message_Omsg,tc_bool)),c_Set_Oimage(c_Message_Omsg_OKey,c_Set_Oimage(c_Public_OshrK,c_Orderings_Otop__class_Otop(tc_fun(tc_Message_Oagent,tc_bool)),tc_Message_Oagent,tc_nat),tc_nat,tc_Message_Omsg),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_used__Notes_0,axiom,
c_Event_Oused(c_List_Olist_OCons(c_Event_Oevent_ONotes(V_A,V_X),V_evs,tc_Event_Oevent)) = c_Lattices_Oupper__semilattice__class_Osup(c_Message_Oparts(c_Set_Oinsert(V_X,c_Orderings_Obot__class_Obot(tc_fun(tc_Message_Omsg,tc_bool)),tc_Message_Omsg)),c_Event_Oused(V_evs),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_used__Says_0,axiom,
c_Event_Oused(c_List_Olist_OCons(c_Event_Oevent_OSays(V_A,V_B,V_X),V_evs,tc_Event_Oevent)) = c_Lattices_Oupper__semilattice__class_Osup(c_Message_Oparts(c_Set_Oinsert(V_X,c_Orderings_Obot__class_Obot(tc_fun(tc_Message_Omsg,tc_bool)),tc_Message_Omsg)),c_Event_Oused(V_evs),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_Fake__parts__sing__imp__Un_0,axiom,
( hBOOL(c_in(V_c,c_Lattices_Oupper__semilattice__class_Osup(c_Message_Osynth(c_Message_Oanalz(V_H)),c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool)),tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg))
| ~ hBOOL(c_in(V_c,c_Message_Oparts(c_Set_Oinsert(V_X,c_Orderings_Obot__class_Obot(tc_fun(tc_Message_Omsg,tc_bool)),tc_Message_Omsg)),tc_Message_Omsg)) ) ).
cnf(cls_synth__mono_0,axiom,
( c_lessequals(c_Message_Osynth(V_G),c_Message_Osynth(V_H),tc_fun(tc_Message_Omsg,tc_bool))
| ~ c_lessequals(V_G,V_H,tc_fun(tc_Message_Omsg,tc_bool)) ) ).
cnf(cls_sup__top__right_0,axiom,
( ~ class_Lattices_Obounded__lattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(V_x,c_Orderings_Otop__class_Otop(T_a),T_a) = c_Orderings_Otop__class_Otop(T_a) ) ).
cnf(cls_sup__top__left_0,axiom,
( ~ class_Lattices_Obounded__lattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(c_Orderings_Otop__class_Otop(T_a),V_x,T_a) = c_Orderings_Otop__class_Otop(T_a) ) ).
cnf(cls_Un__UNIV__left_0,axiom,
c_Lattices_Oupper__semilattice__class_Osup(c_Orderings_Otop__class_Otop(tc_fun(T_a,tc_bool)),V_B,tc_fun(T_a,tc_bool)) = c_Orderings_Otop__class_Otop(tc_fun(T_a,tc_bool)) ).
cnf(cls_Un__UNIV__right_0,axiom,
c_Lattices_Oupper__semilattice__class_Osup(V_A,c_Orderings_Otop__class_Otop(tc_fun(T_a,tc_bool)),tc_fun(T_a,tc_bool)) = c_Orderings_Otop__class_Otop(tc_fun(T_a,tc_bool)) ).
cnf(cls_parts__Un__subset2_0,axiom,
c_lessequals(c_Message_Oparts(c_Lattices_Oupper__semilattice__class_Osup(V_G,V_H,tc_fun(tc_Message_Omsg,tc_bool))),c_Lattices_Oupper__semilattice__class_Osup(c_Message_Oparts(V_G),c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool)),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_subset__insertI_0,axiom,
c_lessequals(V_B,c_Set_Oinsert(V_a,V_B,T_a),tc_fun(T_a,tc_bool)) ).
cnf(cls_sup1E_0,axiom,
( hBOOL(hAPP(V_B,V_x))
| hBOOL(hAPP(V_A,V_x))
| ~ hBOOL(hAPP(c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)),V_x)) ) ).
cnf(cls_sup1CI_0,axiom,
( hBOOL(hAPP(c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)),V_x))
| ~ hBOOL(hAPP(V_B,V_x)) ) ).
cnf(cls_sup1CI_1,axiom,
( hBOOL(hAPP(c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)),V_x))
| ~ hBOOL(hAPP(V_A,V_x)) ) ).
cnf(cls_analz__increasing_0,axiom,
c_lessequals(V_H,c_Message_Oanalz(V_H),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_synth__Un_0,axiom,
c_lessequals(c_Lattices_Oupper__semilattice__class_Osup(c_Message_Osynth(V_G),c_Message_Osynth(V_H),tc_fun(tc_Message_Omsg,tc_bool)),c_Message_Osynth(c_Lattices_Oupper__semilattice__class_Osup(V_G,V_H,tc_fun(tc_Message_Omsg,tc_bool))),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_synthp_OHash_0,axiom,
( c_Message_Osynthp(V_H,c_Message_Omsg_OHash(V_X))
| ~ c_Message_Osynthp(V_H,V_X) ) ).
cnf(cls_analz__subset__iff_0,axiom,
( c_lessequals(V_G,c_Message_Oanalz(V_H),tc_fun(tc_Message_Omsg,tc_bool))
| ~ c_lessequals(c_Message_Oanalz(V_G),c_Message_Oanalz(V_H),tc_fun(tc_Message_Omsg,tc_bool)) ) ).
cnf(cls_analz__subset__iff_1,axiom,
( c_lessequals(c_Message_Oanalz(V_G),c_Message_Oanalz(V_H),tc_fun(tc_Message_Omsg,tc_bool))
| ~ c_lessequals(V_G,c_Message_Oanalz(V_H),tc_fun(tc_Message_Omsg,tc_bool)) ) ).
cnf(cls_equalityI_0,axiom,
( V_A = V_B
| ~ c_lessequals(V_B,V_A,tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_A,V_B,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_set__eq__subset_2,axiom,
( V_A = V_B
| ~ c_lessequals(V_B,V_A,tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_A,V_B,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_order__eq__iff_2,axiom,
( ~ class_Orderings_Oorder(T_a)
| V_x = V_y
| ~ c_lessequals(V_y,V_x,T_a)
| ~ c_lessequals(V_x,V_y,T_a) ) ).
cnf(cls_order__antisym_0,axiom,
( ~ class_Orderings_Oorder(T_a)
| V_x = V_y
| ~ c_lessequals(V_y,V_x,T_a)
| ~ c_lessequals(V_x,V_y,T_a) ) ).
cnf(cls_order__antisym__conv_0,axiom,
( ~ class_Orderings_Oorder(T_a)
| V_x = V_y
| ~ c_lessequals(V_x,V_y,T_a)
| ~ c_lessequals(V_y,V_x,T_a) ) ).
cnf(cls_sup__absorb1_0,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a) = V_x
| ~ c_lessequals(V_y,V_x,T_a) ) ).
cnf(cls_le__iff__sup_1,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a) != V_y
| c_lessequals(V_x,V_y,T_a) ) ).
cnf(cls_le__iff__sup_0,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a) = V_y
| ~ c_lessequals(V_x,V_y,T_a) ) ).
cnf(cls_Un__absorb1_0,axiom,
( c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)) = V_B
| ~ c_lessequals(V_A,V_B,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_Un__absorb2_0,axiom,
( c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)) = V_A
| ~ c_lessequals(V_B,V_A,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_subset__Un__eq_1,axiom,
( c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)) != V_B
| c_lessequals(V_A,V_B,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_msg_Osimps_I5_J_0,axiom,
( c_Message_Omsg_OHash(V_msg) != c_Message_Omsg_OHash(V_msg_H)
| V_msg = V_msg_H ) ).
cnf(cls_analz__image__freshK__simps_I57_J_0,axiom,
c_Lattices_Oupper__semilattice__class_Osup(c_Set_Oimage(V_f,V_A,T_b,T_a),c_Set_Oimage(V_f,V_B,T_b,T_a),tc_fun(T_a,tc_bool)) = c_Set_Oimage(V_f,c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_b,tc_bool)),T_b,T_a) ).
cnf(cls_Un__mono_0,axiom,
( c_lessequals(c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)),c_Lattices_Oupper__semilattice__class_Osup(V_C,V_D,tc_fun(T_a,tc_bool)),tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_B,V_D,tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_A,V_C,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_subset__UNIV_0,axiom,
c_lessequals(V_A,c_Orderings_Otop__class_Otop(tc_fun(T_a,tc_bool)),tc_fun(T_a,tc_bool)) ).
cnf(cls_top__greatest_0,axiom,
( ~ class_Orderings_Otop(T_a)
| c_lessequals(V_x,c_Orderings_Otop__class_Otop(T_a),T_a) ) ).
cnf(cls_synth__increasing_0,axiom,
c_lessequals(V_H,c_Message_Osynth(V_H),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_le__sup__iff_1,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_lessequals(V_y,V_z,T_a)
| ~ c_lessequals(c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a),V_z,T_a) ) ).
cnf(cls_le__sup__iff_0,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_lessequals(V_x,V_z,T_a)
| ~ c_lessequals(c_Lattices_Oupper__semilattice__class_Osup(V_x,V_y,T_a),V_z,T_a) ) ).
cnf(cls_le__supI2_0,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_lessequals(V_x,c_Lattices_Oupper__semilattice__class_Osup(V_a,V_b,T_a),T_a)
| ~ c_lessequals(V_x,V_b,T_a) ) ).
cnf(cls_le__supI1_0,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_lessequals(V_x,c_Lattices_Oupper__semilattice__class_Osup(V_a,V_b,T_a),T_a)
| ~ c_lessequals(V_x,V_a,T_a) ) ).
cnf(cls_le__supE_1,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_lessequals(V_b,V_x,T_a)
| ~ c_lessequals(c_Lattices_Oupper__semilattice__class_Osup(V_a,V_b,T_a),V_x,T_a) ) ).
cnf(cls_le__supE_0,axiom,
( ~ class_Lattices_Oupper__semilattice(T_a)
| c_lessequals(V_a,V_x,T_a)
| ~ c_lessequals(c_Lattices_Oupper__semilattice__class_Osup(V_a,V_b,T_a),V_x,T_a) ) ).
cnf(cls_Un__subset__iff_0,axiom,
( c_lessequals(V_A,V_C,tc_fun(T_a,tc_bool))
| ~ c_lessequals(c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)),V_C,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_Un__subset__iff_1,axiom,
( c_lessequals(V_B,V_C,tc_fun(T_a,tc_bool))
| ~ c_lessequals(c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_a,tc_bool)),V_C,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_xt1_I6_J_0,axiom,
( ~ class_Orderings_Oorder(T_a)
| c_lessequals(V_z,V_x,T_a)
| ~ c_lessequals(V_z,V_y,T_a)
| ~ c_lessequals(V_y,V_x,T_a) ) ).
cnf(cls_order__trans_0,axiom,
( ~ class_Orderings_Opreorder(T_a)
| c_lessequals(V_x,V_z,T_a)
| ~ c_lessequals(V_y,V_z,T_a)
| ~ c_lessequals(V_x,V_y,T_a) ) ).
cnf(cls_equalityE_0,axiom,
c_lessequals(V_x,V_x,tc_fun(T_a,tc_bool)) ).
cnf(cls_subset__refl_0,axiom,
c_lessequals(V_A,V_A,tc_fun(T_a,tc_bool)) ).
cnf(cls_subset__trans_0,axiom,
( c_lessequals(V_A,V_C,tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_B,V_C,tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_A,V_B,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_predicate1D_0,axiom,
( hBOOL(hAPP(V_Q,V_x))
| ~ hBOOL(hAPP(V_P,V_x))
| ~ c_lessequals(V_P,V_Q,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_order__eq__iff_0,axiom,
( ~ class_Orderings_Oorder(T_a)
| c_lessequals(V_x,V_x,T_a) ) ).
cnf(cls_order__eq__refl_0,axiom,
( ~ class_Orderings_Opreorder(T_a)
| c_lessequals(V_x,V_x,T_a) ) ).
cnf(cls_rev__predicate1D_0,axiom,
( hBOOL(hAPP(V_Q,V_x))
| ~ c_lessequals(V_P,V_Q,tc_fun(T_a,tc_bool))
| ~ hBOOL(hAPP(V_P,V_x)) ) ).
cnf(cls_analz__mono_0,axiom,
( c_lessequals(c_Message_Oanalz(V_G),c_Message_Oanalz(V_H),tc_fun(tc_Message_Omsg,tc_bool))
| ~ c_lessequals(V_G,V_H,tc_fun(tc_Message_Omsg,tc_bool)) ) ).
cnf(cls_keysFor__insert__Hash_0,axiom,
c_Message_OkeysFor(c_Set_Oinsert(c_Message_Omsg_OHash(V_X),V_H,tc_Message_Omsg)) = c_Message_OkeysFor(V_H) ).
cnf(cls_analzp_OInj_0,axiom,
( c_Message_Oanalzp(V_H,V_X)
| ~ hBOOL(hAPP(V_H,V_X)) ) ).
cnf(cls_image__mono_0,axiom,
( c_lessequals(c_Set_Oimage(V_f,V_A,T_a,T_b),c_Set_Oimage(V_f,V_B,T_a,T_b),tc_fun(T_b,tc_bool))
| ~ c_lessequals(V_A,V_B,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_subset__image__iff_2,axiom,
( ~ c_lessequals(V_x,V_A,tc_fun(T_b,tc_bool))
| c_lessequals(c_Set_Oimage(V_f,V_x,T_b,T_a),c_Set_Oimage(V_f,V_A,T_b,T_a),tc_fun(T_a,tc_bool)) ) ).
cnf(cls_insert__mono_0,axiom,
( c_lessequals(c_Set_Oinsert(V_a,V_C,T_a),c_Set_Oinsert(V_a,V_D,T_a),tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_C,V_D,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_image__Un_0,axiom,
c_Set_Oimage(V_f,c_Lattices_Oupper__semilattice__class_Osup(V_A,V_B,tc_fun(T_b,tc_bool)),T_b,T_a) = c_Lattices_Oupper__semilattice__class_Osup(c_Set_Oimage(V_f,V_A,T_b,T_a),c_Set_Oimage(V_f,V_B,T_b,T_a),tc_fun(T_a,tc_bool)) ).
cnf(cls_msg_Osimps_I32_J_0,axiom,
c_Message_Omsg_ONonce(V_nat) != c_Message_Omsg_OHash(V_msg_H) ).
cnf(cls_analz__subset__cong_0,axiom,
( c_lessequals(c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(V_G,V_H,tc_fun(tc_Message_Omsg,tc_bool))),c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(V_G_H,V_H_H,tc_fun(tc_Message_Omsg,tc_bool))),tc_fun(tc_Message_Omsg,tc_bool))
| ~ c_lessequals(c_Message_Oanalz(V_H),c_Message_Oanalz(V_H_H),tc_fun(tc_Message_Omsg,tc_bool))
| ~ c_lessequals(c_Message_Oanalz(V_G),c_Message_Oanalz(V_G_H),tc_fun(tc_Message_Omsg,tc_bool)) ) ).
cnf(cls_linorder__linear_0,axiom,
( ~ class_Orderings_Olinorder(T_a)
| c_lessequals(V_y,V_x,T_a)
| c_lessequals(V_x,V_y,T_a) ) ).
cnf(cls_parts__insert__subset__Un_0,axiom,
( c_lessequals(c_Message_Oparts(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)),c_Lattices_Oupper__semilattice__class_Osup(c_Message_Oparts(V_G),c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool)),tc_fun(tc_Message_Omsg,tc_bool))
| ~ hBOOL(c_in(V_X,V_G,tc_Message_Omsg)) ) ).
cnf(cls_subset__insert_0,axiom,
( c_lessequals(V_A,V_B,tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_A,c_Set_Oinsert(V_x,V_B,T_a),tc_fun(T_a,tc_bool))
| hBOOL(c_in(V_x,V_A,T_a)) ) ).
cnf(cls_subset__insert_1,axiom,
( c_lessequals(V_A,c_Set_Oinsert(V_x,V_B,T_a),tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_A,V_B,tc_fun(T_a,tc_bool))
| hBOOL(c_in(V_x,V_A,T_a)) ) ).
cnf(cls_subset__insert__iff_1,axiom,
( c_lessequals(V_A,V_B,tc_fun(T_a,tc_bool))
| hBOOL(c_in(V_x,V_A,T_a))
| ~ c_lessequals(V_A,c_Set_Oinsert(V_x,V_B,T_a),tc_fun(T_a,tc_bool)) ) ).
cnf(cls_subset__insert__iff_2,axiom,
( c_lessequals(V_A,c_Set_Oinsert(V_x,V_B,T_a),tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_A,V_B,tc_fun(T_a,tc_bool))
| hBOOL(c_in(V_x,V_A,T_a)) ) ).
cnf(cls_insert__subset_0,axiom,
( hBOOL(c_in(V_x,V_B,T_a))
| ~ c_lessequals(c_Set_Oinsert(V_x,V_A,T_a),V_B,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_insert__subset_2,axiom,
( c_lessequals(c_Set_Oinsert(V_x,V_A,T_a),V_B,tc_fun(T_a,tc_bool))
| ~ c_lessequals(V_A,V_B,tc_fun(T_a,tc_bool))
| ~ hBOOL(c_in(V_x,V_B,T_a)) ) ).
cnf(cls_image__subset__iff_0,axiom,
( hBOOL(c_in(hAPP(V_f,V_x),V_B,T_a))
| ~ hBOOL(c_in(V_x,V_A,T_b))
| ~ c_lessequals(c_Set_Oimage(V_f,V_A,T_b,T_a),V_B,tc_fun(T_a,tc_bool)) ) ).
cnf(cls_set__subset__Cons_0,axiom,
c_lessequals(c_List_Oset(V_xs,T_a),c_List_Oset(c_List_Olist_OCons(V_x,V_xs,T_a),T_a),tc_fun(T_a,tc_bool)) ).
cnf(cls_in__parts__UnE_0,axiom,
( hBOOL(c_in(V_c,c_Message_Oparts(V_H),tc_Message_Omsg))
| hBOOL(c_in(V_c,c_Message_Oparts(V_G),tc_Message_Omsg))
| ~ hBOOL(c_in(V_c,c_Message_Oparts(c_Lattices_Oupper__semilattice__class_Osup(V_G,V_H,tc_fun(tc_Message_Omsg,tc_bool))),tc_Message_Omsg)) ) ).
cnf(cls_parts__trans_0,axiom,
( hBOOL(c_in(V_X,c_Message_Oparts(V_H),tc_Message_Omsg))
| ~ c_lessequals(V_G,c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool))
| ~ hBOOL(c_in(V_X,c_Message_Oparts(V_G),tc_Message_Omsg)) ) ).
cnf(cls_analz__image__freshK__simps_I61_J_0,axiom,
( hBOOL(c_in(V_c,c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(V_A,V_G,tc_fun(tc_Message_Omsg,tc_bool))),tc_Message_Omsg))
| ~ hBOOL(c_in(V_c,c_Message_Oanalz(V_G),tc_Message_Omsg)) ) ).
cnf(cls_analz__trans_0,axiom,
( hBOOL(c_in(V_X,c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ c_lessequals(V_G,c_Message_Oanalz(V_H),tc_fun(tc_Message_Omsg,tc_bool))
| ~ hBOOL(c_in(V_X,c_Message_Oanalz(V_G),tc_Message_Omsg)) ) ).
cnf(cls_top__fun__eq_0,axiom,
( ~ class_Orderings_Otop(T_b)
| hAPP(c_Orderings_Otop__class_Otop(tc_fun(t_a,T_b)),v_x) = c_Orderings_Otop__class_Otop(T_b) ) ).
cnf(cls_Hash__synth_0,axiom,
( hBOOL(c_in(V_X,c_Message_Osynth(V_H),tc_Message_Omsg))
| hBOOL(c_in(c_Message_Omsg_OHash(V_X),V_H,tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OHash(V_X),c_Message_Osynth(V_H),tc_Message_Omsg)) ) ).
cnf(cls_synth__trans_0,axiom,
( hBOOL(c_in(V_X,c_Message_Osynth(V_H),tc_Message_Omsg))
| ~ c_lessequals(V_G,c_Message_Osynth(V_H),tc_fun(tc_Message_Omsg,tc_bool))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(V_G),tc_Message_Omsg)) ) ).
cnf(cls_synth_OHash_0,axiom,
( hBOOL(c_in(c_Message_Omsg_OHash(V_X),c_Message_Osynth(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(V_H),tc_Message_Omsg)) ) ).
cnf(cls_analz__subset__parts_0,axiom,
c_lessequals(c_Message_Oanalz(V_H),c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_keysFor__insert__MPair_0,axiom,
c_Message_OkeysFor(c_Set_Oinsert(c_Message_Omsg_OMPair(V_X,V_Y),V_H,tc_Message_Omsg)) = c_Message_OkeysFor(V_H) ).
cnf(cls_parts__insert__Hash_0,axiom,
c_Message_Oparts(c_Set_Oinsert(c_Message_Omsg_OHash(V_X),V_H,tc_Message_Omsg)) = c_Set_Oinsert(c_Message_Omsg_OHash(V_X),c_Message_Oparts(V_H),tc_Message_Omsg) ).
cnf(cls_parts__insert__subset_0,axiom,
c_lessequals(c_Set_Oinsert(V_X,c_Message_Oparts(V_H),tc_Message_Omsg),c_Message_Oparts(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_Fake__analz__insert_0,axiom,
( c_lessequals(c_Message_Oanalz(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)),c_Lattices_Oupper__semilattice__class_Osup(c_Message_Osynth(c_Message_Oanalz(V_G)),c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(V_G,V_H,tc_fun(tc_Message_Omsg,tc_bool))),tc_fun(tc_Message_Omsg,tc_bool)),tc_fun(tc_Message_Omsg,tc_bool))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Oanalz(V_G)),tc_Message_Omsg)) ) ).
cnf(cls_parts__synth_0,axiom,
c_Message_Oparts(c_Message_Osynth(V_H)) = c_Lattices_Oupper__semilattice__class_Osup(c_Message_Oparts(V_H),c_Message_Osynth(V_H),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_pushes_I11_J_0,axiom,
c_Set_Oinsert(c_Message_Omsg_OCrypt(V_X,V_K),c_Set_Oinsert(c_Message_Omsg_OHash(V_X_H),V_A,tc_Message_Omsg),tc_Message_Omsg) = c_Set_Oinsert(c_Message_Omsg_OHash(V_X_H),c_Set_Oinsert(c_Message_Omsg_OCrypt(V_X,V_K),V_A,tc_Message_Omsg),tc_Message_Omsg) ).
cnf(cls_analz__insert__Hash_0,axiom,
c_Message_Oanalz(c_Set_Oinsert(c_Message_Omsg_OHash(V_X),V_H,tc_Message_Omsg)) = c_Set_Oinsert(c_Message_Omsg_OHash(V_X),c_Message_Oanalz(V_H),tc_Message_Omsg) ).
cnf(cls_analz__insert_0,axiom,
c_lessequals(c_Set_Oinsert(V_X,c_Message_Oanalz(V_H),tc_Message_Omsg),c_Message_Oanalz(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_keysFor__insert__Key_0,axiom,
c_Message_OkeysFor(c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,V_K),V_H,tc_Message_Omsg)) = c_Message_OkeysFor(V_H) ).
cnf(cls_pushes_I4_J_0,axiom,
c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,V_K),c_Set_Oinsert(c_Message_Omsg_OHash(V_X),V_A,tc_Message_Omsg),tc_Message_Omsg) = c_Set_Oinsert(c_Message_Omsg_OHash(V_X),c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,V_K),V_A,tc_Message_Omsg),tc_Message_Omsg) ).
cnf(cls_synth__analz__mono_0,axiom,
( c_lessequals(c_Message_Osynth(c_Message_Oanalz(V_G)),c_Message_Osynth(c_Message_Oanalz(V_H)),tc_fun(tc_Message_Omsg,tc_bool))
| ~ c_lessequals(V_G,V_H,tc_fun(tc_Message_Omsg,tc_bool)) ) ).
cnf(cls_analz__synth_0,axiom,
c_Message_Oanalz(c_Message_Osynth(V_H)) = c_Lattices_Oupper__semilattice__class_Osup(c_Message_Oanalz(V_H),c_Message_Osynth(V_H),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_analz__synth__Un_0,axiom,
c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(c_Message_Osynth(V_G),V_H,tc_fun(tc_Message_Omsg,tc_bool))) = c_Lattices_Oupper__semilattice__class_Osup(c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(V_G,V_H,tc_fun(tc_Message_Omsg,tc_bool))),c_Message_Osynth(V_G),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_synth__insert_0,axiom,
c_lessequals(c_Set_Oinsert(V_X,c_Message_Osynth(V_H),tc_Message_Omsg),c_Message_Osynth(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_keysFor__insert__Agent_0,axiom,
c_Message_OkeysFor(c_Set_Oinsert(c_Message_Omsg_OAgent(V_A),V_H,tc_Message_Omsg)) = c_Message_OkeysFor(V_H) ).
cnf(cls_keysFor__insert__Nonce_0,axiom,
c_Message_OkeysFor(c_Set_Oinsert(c_Message_Omsg_ONonce(V_N),V_H,tc_Message_Omsg)) = c_Message_OkeysFor(V_H) ).
cnf(cls_lists_Ocases_0,axiom,
( V_a = c_List_Olist_OCons(v_sko__List__Xlists__Xcases__1(V_A,V_a),v_sko__List__Xlists__Xcases__2(V_A,V_a),t_a)
| V_a = c_List_Olist_ONil(t_a)
| ~ hBOOL(c_in(V_a,c_List_Olists(V_A,t_a),tc_List_Olist(t_a))) ) ).
cnf(cls_lists_Oinduct_3,axiom,
( hBOOL(hAPP(V_P,V_x))
| ~ hBOOL(hAPP(V_P,c_List_Olist_OCons(v_sko__List__Xlists__Xinduct__1(V_A,V_P),v_sko__List__Xlists__Xinduct__2(V_A,V_P),t_a)))
| ~ hBOOL(hAPP(V_P,c_List_Olist_ONil(t_a)))
| ~ hBOOL(c_in(V_x,c_List_Olists(V_A,t_a),tc_List_Olist(t_a))) ) ).
cnf(cls_lists_Oinducts_3,axiom,
( hBOOL(hAPP(V_P,V_x))
| ~ hBOOL(hAPP(V_P,c_List_Olist_OCons(v_sko__List__Xlists__Xinducts__1(V_A,V_P),v_sko__List__Xlists__Xinducts__2(V_A,V_P),t_a)))
| ~ hBOOL(hAPP(V_P,c_List_Olist_ONil(t_a)))
| ~ hBOOL(c_in(V_x,c_List_Olists(V_A,t_a),tc_List_Olist(t_a))) ) ).
cnf(cls_invKey__image__eq_0,axiom,
( hBOOL(c_in(V_x,V_A,tc_nat))
| ~ hBOOL(c_in(hAPP(c_Message_OinvKey,V_x),c_Set_Oimage(c_Message_OinvKey,V_A,tc_nat,tc_nat),tc_nat)) ) ).
cnf(cls_invKey__image__eq_1,axiom,
( hBOOL(c_in(hAPP(c_Message_OinvKey,V_x),c_Set_Oimage(c_Message_OinvKey,V_A,tc_nat,tc_nat),tc_nat))
| ~ hBOOL(c_in(V_x,V_A,tc_nat)) ) ).
cnf(cls_knows__subset__knows__Cons_0,axiom,
c_lessequals(c_Event_Oknows(V_A,V_evs),c_Event_Oknows(V_A,c_List_Olist_OCons(V_e,V_evs,tc_Event_Oevent)),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_initState__subset__knows_0,axiom,
c_lessequals(c_Event_OinitState(V_A),c_Event_Oknows(V_A,V_evs),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_analzp_ODecrypt_0,axiom,
( c_Message_Oanalzp(V_H,V_X)
| ~ c_Message_Oanalzp(V_H,hAPP(c_Message_Omsg_OKey,hAPP(c_Message_OinvKey,V_K)))
| ~ c_Message_Oanalzp(V_H,c_Message_Omsg_OCrypt(V_K,V_X)) ) ).
cnf(cls_in__lists__conv__set_2,axiom,
( hBOOL(c_in(V_xs,c_List_Olists(V_A,T_a),tc_List_Olist(T_a)))
| ~ hBOOL(c_in(c_List_Osko__List__Xin__lists__conv__set__1__1(V_A,V_xs,T_a),V_A,T_a)) ) ).
cnf(cls_Hash__notin__image__Key_0,axiom,
~ hBOOL(c_in(c_Message_Omsg_OHash(V_X),c_Set_Oimage(c_Message_Omsg_OKey,V_A,tc_nat,tc_Message_Omsg),tc_Message_Omsg)) ).
cnf(cls_Nonce__supply1_0,axiom,
~ hBOOL(c_in(c_Message_Omsg_ONonce(c_Public_Osko__Public__XNonce__supply1__1__1(V_evs)),c_Event_Oused(V_evs),tc_Message_Omsg)) ).
cnf(cls_lists_Oinducts_2,axiom,
( hBOOL(hAPP(V_P,V_x))
| hBOOL(hAPP(V_P,v_sko__List__Xlists__Xinducts__2(V_A,V_P)))
| ~ hBOOL(hAPP(V_P,c_List_Olist_ONil(t_a)))
| ~ hBOOL(c_in(V_x,c_List_Olists(V_A,t_a),tc_List_Olist(t_a))) ) ).
cnf(cls_lists_Oinduct_2,axiom,
( hBOOL(hAPP(V_P,V_x))
| hBOOL(hAPP(V_P,v_sko__List__Xlists__Xinduct__2(V_A,V_P)))
| ~ hBOOL(hAPP(V_P,c_List_Olist_ONil(t_a)))
| ~ hBOOL(c_in(V_x,c_List_Olists(V_A,t_a),tc_List_Olist(t_a))) ) ).
cnf(cls_lists_Oinduct_1,axiom,
( hBOOL(hAPP(V_P,V_x))
| hBOOL(c_in(v_sko__List__Xlists__Xinduct__2(V_A,V_P),c_List_Olists(V_A,t_a),tc_List_Olist(t_a)))
| ~ hBOOL(hAPP(V_P,c_List_Olist_ONil(t_a)))
| ~ hBOOL(c_in(V_x,c_List_Olists(V_A,t_a),tc_List_Olist(t_a))) ) ).
cnf(cls_lists_Oinducts_1,axiom,
( hBOOL(hAPP(V_P,V_x))
| hBOOL(c_in(v_sko__List__Xlists__Xinducts__2(V_A,V_P),c_List_Olists(V_A,t_a),tc_List_Olist(t_a)))
| ~ hBOOL(hAPP(V_P,c_List_Olist_ONil(t_a)))
| ~ hBOOL(c_in(V_x,c_List_Olists(V_A,t_a),tc_List_Olist(t_a))) ) ).
cnf(cls_lists_Ocases_2,axiom,
( hBOOL(c_in(v_sko__List__Xlists__Xcases__2(V_A,V_a),c_List_Olists(V_A,t_a),tc_List_Olist(t_a)))
| V_a = c_List_Olist_ONil(t_a)
| ~ hBOOL(c_in(V_a,c_List_Olists(V_A,t_a),tc_List_Olist(t_a))) ) ).
cnf(cls_knows__subset__knows__Says_0,axiom,
c_lessequals(c_Event_Oknows(V_A,V_evs),c_Event_Oknows(V_A,c_List_Olist_OCons(c_Event_Oevent_OSays(V_A_H,V_B,V_X),V_evs,tc_Event_Oevent)),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_priEK__noteq__shrK_0,axiom,
hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(c_Public_Okeymode_OEncryption),V_A)) != hAPP(c_Public_OshrK,V_B) ).
cnf(cls_knows__subset__knows__Notes_0,axiom,
c_lessequals(c_Event_Oknows(V_A,V_evs),c_Event_Oknows(V_A,c_List_Olist_OCons(c_Event_Oevent_ONotes(V_A_H,V_X),V_evs,tc_Event_Oevent)),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_knows__subset__knows__Gets_0,axiom,
c_lessequals(c_Event_Oknows(V_A,V_evs),c_Event_Oknows(V_A,c_List_Olist_OCons(c_Event_Oevent_OGets(V_A_H,V_X),V_evs,tc_Event_Oevent)),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_ns__sharedp__ns__shared__eq_0,axiom,
c_NS__Shared__Mirabelle_Ons__sharedp(v_x) = c_in(v_x,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)) ).
cnf(cls_Hash__synth__analz_1,axiom,
( hBOOL(c_in(c_Message_Omsg_OHash(c_Message_Omsg_OMPair(V_X,V_Y)),c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OHash(c_Message_Omsg_OMPair(V_X,V_Y)),c_Message_Oanalz(V_H),tc_Message_Omsg))
| hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg)) ) ).
cnf(cls_Hash__synth__analz_0,axiom,
( hBOOL(c_in(c_Message_Omsg_OHash(c_Message_Omsg_OMPair(V_X,V_Y)),c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OHash(c_Message_Omsg_OMPair(V_X,V_Y)),c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg))
| hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg)) ) ).
cnf(cls_keysFor__parts__insert_0,axiom,
( hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Message_OinvKey,V_K)),c_Message_Oparts(V_H),tc_Message_Omsg))
| hBOOL(c_in(V_K,c_Message_OkeysFor(c_Message_Oparts(c_Lattices_Oupper__semilattice__class_Osup(V_G,V_H,tc_fun(tc_Message_Omsg,tc_bool)))),tc_nat))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg))
| ~ hBOOL(c_in(V_K,c_Message_OkeysFor(c_Message_Oparts(c_Set_Oinsert(V_X,V_G,tc_Message_Omsg))),tc_nat)) ) ).
cnf(cls_analz__insert__Key_0,axiom,
( c_Message_Oanalz(c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,V_K),V_H,tc_Message_Omsg)) = c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(V_H),tc_Message_Omsg)
| hBOOL(c_in(V_K,c_Message_OkeysFor(c_Message_Oanalz(V_H)),tc_nat)) ) ).
cnf(cls_lists_Oinducts_0,axiom,
( hBOOL(hAPP(V_P,V_x))
| hBOOL(c_in(v_sko__List__Xlists__Xinducts__1(V_A,V_P),V_A,t_a))
| ~ hBOOL(hAPP(V_P,c_List_Olist_ONil(t_a)))
| ~ hBOOL(c_in(V_x,c_List_Olists(V_A,t_a),tc_List_Olist(t_a))) ) ).
cnf(cls_lists_Ocases_1,axiom,
( hBOOL(c_in(v_sko__List__Xlists__Xcases__1(V_A,V_a),V_A,t_a))
| V_a = c_List_Olist_ONil(t_a)
| ~ hBOOL(c_in(V_a,c_List_Olists(V_A,t_a),tc_List_Olist(t_a))) ) ).
cnf(cls_lists_Oinduct_0,axiom,
( hBOOL(hAPP(V_P,V_x))
| hBOOL(c_in(v_sko__List__Xlists__Xinduct__1(V_A,V_P),V_A,t_a))
| ~ hBOOL(hAPP(V_P,c_List_Olist_ONil(t_a)))
| ~ hBOOL(c_in(V_x,c_List_Olists(V_A,t_a),tc_List_Olist(t_a))) ) ).
cnf(cls_Crypt__imp__invKey__keysFor_0,axiom,
( hBOOL(c_in(hAPP(c_Message_OinvKey,V_K),c_Message_OkeysFor(V_H),tc_nat))
| ~ hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),V_H,tc_Message_Omsg)) ) ).
cnf(cls_in__lists__conv__set_1,axiom,
( hBOOL(c_in(V_xs,c_List_Olists(V_A,T_a),tc_List_Olist(T_a)))
| hBOOL(c_in(c_List_Osko__List__Xin__lists__conv__set__1__1(V_A,V_xs,T_a),c_List_Oset(V_xs,T_a),T_a)) ) ).
cnf(cls_analz__image__freshK__lemma_1,axiom,
( hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(c_Set_Oimage(c_Message_Omsg_OKey,V_nE,tc_nat,tc_Message_Omsg),V_H,tc_fun(tc_Message_Omsg,tc_bool))),tc_Message_Omsg))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(V_H),tc_Message_Omsg))
| hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(c_Set_Oimage(c_Message_Omsg_OKey,V_nE,tc_nat,tc_Message_Omsg),V_H,tc_fun(tc_Message_Omsg,tc_bool))),tc_Message_Omsg)) ) ).
cnf(cls_analz__image__freshK__lemma_5,axiom,
( hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(c_Set_Oimage(c_Message_Omsg_OKey,V_nE,tc_nat,tc_Message_Omsg),V_H,tc_fun(tc_Message_Omsg,tc_bool))),tc_Message_Omsg))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(V_H),tc_Message_Omsg)) ) ).
cnf(cls_Crypt__imp__keysFor_0,axiom,
( hBOOL(c_in(V_K,c_Message_OkeysFor(V_H),tc_nat))
| ~ hBOOL(c_in(V_K,c_Message_OsymKeys,tc_nat))
| ~ hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),V_H,tc_Message_Omsg)) ) ).
cnf(cls_parts__knows__Spy__subset__used_0,axiom,
c_lessequals(c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)),c_Event_Oused(V_evs),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_knows__Spy__subset__knows__Spy__Says_0,axiom,
c_lessequals(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs),c_Event_Oknows(c_Message_Oagent_OSpy,c_List_Olist_OCons(c_Event_Oevent_OSays(V_A,V_B,V_X),V_evs,tc_Event_Oevent)),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_knows__Spy__subset__knows__Spy__Notes_0,axiom,
c_lessequals(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs),c_Event_Oknows(c_Message_Oagent_OSpy,c_List_Olist_OCons(c_Event_Oevent_ONotes(V_A,V_X),V_evs,tc_Event_Oevent)),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_knows__Spy__subset__knows__Spy__Gets_0,axiom,
c_lessequals(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs),c_Event_Oknows(c_Message_Oagent_OSpy,c_List_Olist_OCons(c_Event_Oevent_OGets(V_A,V_X),V_evs,tc_Event_Oevent)),tc_fun(tc_Message_Omsg,tc_bool)) ).
cnf(cls_knows__Spy__imp__Says__Notes__initState_0,axiom,
( hBOOL(c_in(V_X,c_Event_OinitState(c_Message_Oagent_OSpy),tc_Message_Omsg))
| hBOOL(c_in(c_Event_Oevent_ONotes(c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1(V_X,V_evs),V_X),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent))
| hBOOL(c_in(c_Event_Oevent_OSays(c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1(V_X,V_evs),c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__2(V_X,V_evs),V_X),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent))
| ~ hBOOL(c_in(V_X,c_Event_Oknows(c_Message_Oagent_OSpy,V_evs),tc_Message_Omsg)) ) ).
cnf(cls_publicKey__notin__image__privateKey_0,axiom,
~ hBOOL(c_in(hAPP(c_Public_OpublicKey(V_b),V_A),c_Set_Oimage(c_Message_OinvKey,c_Set_Oimage(c_Public_OpublicKey(V_c),V_AS,tc_Message_Oagent,tc_nat),tc_nat,tc_nat),tc_nat)) ).
cnf(cls_privateKey__image__eq_0,axiom,
( V_b = V_c
| ~ hBOOL(c_in(hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(V_b),V_A)),c_Set_Oimage(c_Message_OinvKey,c_Set_Oimage(c_Public_OpublicKey(V_c),V_AS,tc_Message_Oagent,tc_nat),tc_nat,tc_nat),tc_nat)) ) ).
cnf(cls_symKey__neq__priEK_0,axiom,
~ hBOOL(c_in(hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(c_Public_Okeymode_OEncryption),V_A)),c_Message_OsymKeys,tc_nat)) ).
cnf(cls_Fake__parts__insert__in__Un_0,axiom,
( hBOOL(c_in(V_Z,c_Lattices_Oupper__semilattice__class_Osup(c_Message_Osynth(c_Message_Oanalz(V_H)),c_Message_Oparts(V_H),tc_fun(tc_Message_Omsg,tc_bool)),tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg))
| ~ hBOOL(c_in(V_Z,c_Message_Oparts(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)),tc_Message_Omsg)) ) ).
cnf(cls_synth__analz__insert__eq_1,axiom,
( hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(c_Set_Oinsert(V_X,V_G,tc_Message_Omsg)),tc_Message_Omsg))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(V_G),tc_Message_Omsg))
| ~ c_lessequals(V_H,V_G,tc_fun(tc_Message_Omsg,tc_bool))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg)) ) ).
cnf(cls_synth__analz__insert__eq_0,axiom,
( hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(V_G),tc_Message_Omsg))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(c_Set_Oinsert(V_X,V_G,tc_Message_Omsg)),tc_Message_Omsg))
| ~ c_lessequals(V_H,V_G,tc_fun(tc_Message_Omsg,tc_bool))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg)) ) ).
cnf(cls_analz__image__freshK__lemma_2,axiom,
( hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(c_Set_Oimage(c_Message_Omsg_OKey,V_nE,tc_nat,tc_Message_Omsg),V_H,tc_fun(tc_Message_Omsg,tc_bool))),tc_Message_Omsg))
| ~ hBOOL(c_in(V_K,V_nE,tc_nat))
| ~ hBOOL(c_in(V_K,V_nE,tc_nat)) ) ).
cnf(cls_analz__image__freshK__lemma_0,axiom,
( hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(c_Set_Oimage(c_Message_Omsg_OKey,V_nE,tc_nat,tc_Message_Omsg),V_H,tc_fun(tc_Message_Omsg,tc_bool))),tc_Message_Omsg))
| ~ hBOOL(c_in(V_K,V_nE,tc_nat))
| hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(c_Set_Oimage(c_Message_Omsg_OKey,V_nE,tc_nat,tc_Message_Omsg),V_H,tc_fun(tc_Message_Omsg,tc_bool))),tc_Message_Omsg)) ) ).
cnf(cls_analz__image__freshK__lemma_4,axiom,
( hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(c_Set_Oimage(c_Message_Omsg_OKey,V_nE,tc_nat,tc_Message_Omsg),V_H,tc_fun(tc_Message_Omsg,tc_bool))),tc_Message_Omsg))
| ~ hBOOL(c_in(V_K,V_nE,tc_nat))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(V_H),tc_Message_Omsg)) ) ).
cnf(cls_analz__image__freshK__lemma_3,axiom,
( hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(c_Lattices_Oupper__semilattice__class_Osup(c_Set_Oimage(c_Message_Omsg_OKey,V_nE,tc_nat,tc_Message_Omsg),V_H,tc_fun(tc_Message_Omsg,tc_bool))),tc_Message_Omsg))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_K,V_nE,tc_nat)) ) ).
cnf(cls_shrK__notin__image__privateKey_0,axiom,
~ hBOOL(c_in(hAPP(c_Public_OshrK,V_x),c_Set_Oimage(c_Message_OinvKey,c_Set_Oimage(c_Public_OpublicKey(V_b),V_AA,tc_Message_Oagent,tc_nat),tc_nat,tc_nat),tc_nat)) ).
cnf(cls_privateKey__image__eq_2,axiom,
( hBOOL(c_in(hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(V_x),V_A)),c_Set_Oimage(c_Message_OinvKey,c_Set_Oimage(c_Public_OpublicKey(V_x),V_AS,tc_Message_Oagent,tc_nat),tc_nat,tc_nat),tc_nat))
| ~ hBOOL(c_in(V_A,V_AS,tc_Message_Oagent)) ) ).
cnf(cls_privateKey__image__eq_1,axiom,
( hBOOL(c_in(V_A,V_AS,tc_Message_Oagent))
| ~ hBOOL(c_in(hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(V_b),V_A)),c_Set_Oimage(c_Message_OinvKey,c_Set_Oimage(c_Public_OpublicKey(V_c),V_AS,tc_Message_Oagent,tc_nat),tc_nat,tc_nat),tc_nat)) ) ).
cnf(cls_lemma1_0,axiom,
( c_lessequals(c_Message_Oanalz(c_Set_Oinsert(c_Message_Omsg_OCrypt(V_K,V_X),V_H,tc_Message_Omsg)),c_Set_Oinsert(c_Message_Omsg_OCrypt(V_K,V_X),c_Message_Oanalz(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)),tc_Message_Omsg),tc_fun(tc_Message_Omsg,tc_bool))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Message_OinvKey,V_K)),c_Message_Oanalz(V_H),tc_Message_Omsg)) ) ).
cnf(cls_lemma2_0,axiom,
( c_lessequals(c_Set_Oinsert(c_Message_Omsg_OCrypt(V_K,V_X),c_Message_Oanalz(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)),tc_Message_Omsg),c_Message_Oanalz(c_Set_Oinsert(c_Message_Omsg_OCrypt(V_K,V_X),V_H,tc_Message_Omsg)),tc_fun(tc_Message_Omsg,tc_bool))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Message_OinvKey,V_K)),c_Message_Oanalz(V_H),tc_Message_Omsg)) ) ).
cnf(cls_knows__imp__Says__Gets__Notes__initState_0,axiom,
( hBOOL(c_in(V_X,c_Event_OinitState(V_A),tc_Message_Omsg))
| hBOOL(c_in(c_Event_Oevent_ONotes(V_A,V_X),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent))
| hBOOL(c_in(c_Event_Oevent_OGets(V_A,V_X),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent))
| hBOOL(c_in(c_Event_Oevent_OSays(V_A,c_Event_Osko__Event__Xknows__imp__Says__Gets__Notes__initState__1__1(V_A,V_X,V_evs),V_X),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent))
| V_A = c_Message_Oagent_OSpy
| ~ hBOOL(c_in(V_X,c_Event_Oknows(V_A,V_evs),tc_Message_Omsg)) ) ).
cnf(cls_new__keys__not__used_0,axiom,
( ~ hBOOL(c_in(V_K,c_Message_OkeysFor(c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs))),tc_nat))
| ~ hBOOL(c_in(V_evs,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)))
| ~ hBOOL(c_in(V_K,c_Message_OsymKeys,tc_nat))
| hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Event_Oused(V_evs),tc_Message_Omsg)) ) ).
cnf(cls_Crypt__notin__used__empty_0,axiom,
~ hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),c_Event_Oused(c_List_Olist_ONil(tc_Event_Oevent)),tc_Message_Omsg)) ).
cnf(cls_parts__analz_0,axiom,
c_Message_Oparts(c_Message_Oanalz(V_H)) = c_Message_Oparts(V_H) ).
cnf(cls_analz__parts_0,axiom,
c_Message_Oanalz(c_Message_Oparts(V_H)) = c_Message_Oparts(V_H) ).
cnf(cls_publicKey__into__used_0,axiom,
hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Public_OpublicKey(V_b),V_A)),c_Event_Oused(V_evs),tc_Message_Omsg)) ).
cnf(cls_Key__image__eq_1,axiom,
( hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_x),c_Set_Oimage(c_Message_Omsg_OKey,V_A,tc_nat,tc_Message_Omsg),tc_Message_Omsg))
| ~ hBOOL(c_in(V_x,V_A,tc_nat)) ) ).
cnf(cls_Key__image__eq_0,axiom,
( hBOOL(c_in(V_x,V_A,tc_nat))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_x),c_Set_Oimage(c_Message_Omsg_OKey,V_A,tc_nat,tc_Message_Omsg),tc_Message_Omsg)) ) ).
cnf(cls_Nonce__Key__image__eq_0,axiom,
~ hBOOL(c_in(c_Message_Omsg_ONonce(V_x),c_Set_Oimage(c_Message_Omsg_OKey,V_A,tc_nat,tc_Message_Omsg),tc_Message_Omsg)) ).
cnf(cls_publicKey__in__initState_0,axiom,
hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Public_OpublicKey(V_b),V_A)),c_Event_OinitState(V_B),tc_Message_Omsg)) ).
cnf(cls_analz__Decrypt_H_0,axiom,
( hBOOL(c_in(V_X,c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_K,c_Message_OsymKeys,tc_nat))
| ~ hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),c_Message_Oanalz(V_H),tc_Message_Omsg)) ) ).
cnf(cls_analz__Crypt__if_0,axiom,
( c_Message_Oanalz(c_Set_Oinsert(c_Message_Omsg_OCrypt(V_K,V_X),V_H,tc_Message_Omsg)) = c_Set_Oinsert(c_Message_Omsg_OCrypt(V_K,V_X),c_Message_Oanalz(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)),tc_Message_Omsg)
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Message_OinvKey,V_K)),c_Message_Oanalz(V_H),tc_Message_Omsg)) ) ).
cnf(cls_analz__Crypt__if_1,axiom,
( c_Message_Oanalz(c_Set_Oinsert(c_Message_Omsg_OCrypt(V_K,V_X),V_H,tc_Message_Omsg)) = c_Set_Oinsert(c_Message_Omsg_OCrypt(V_K,V_X),c_Message_Oanalz(V_H),tc_Message_Omsg)
| hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Message_OinvKey,V_K)),c_Message_Oanalz(V_H),tc_Message_Omsg)) ) ).
cnf(cls_Crypt__synth__analz_1,axiom,
( hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Message_OinvKey,V_K)),c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(V_H),tc_Message_Omsg)) ) ).
cnf(cls_Crypt__synth__analz_0,axiom,
( hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Message_OinvKey,V_K)),c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oanalz(V_H),tc_Message_Omsg)) ) ).
cnf(cls_msg_Osimps_I37_J_0,axiom,
c_Message_Omsg_OCrypt(V_nat_H,V_msg_H) != c_Message_Omsg_ONonce(V_nat) ).
cnf(cls_msg_Osimps_I36_J_0,axiom,
c_Message_Omsg_ONonce(V_nat) != c_Message_Omsg_OCrypt(V_nat_H,V_msg_H) ).
cnf(cls_msg_Osimps_I31_J_0,axiom,
hAPP(c_Message_Omsg_OKey,V_nat_H) != c_Message_Omsg_ONonce(V_nat) ).
cnf(cls_msg_Osimps_I30_J_0,axiom,
c_Message_Omsg_ONonce(V_nat) != hAPP(c_Message_Omsg_OKey,V_nat_H) ).
cnf(cls_analz__mono__contra_I2_J_0,axiom,
( ~ hBOOL(c_in(V_c,c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)),tc_Message_Omsg))
| hBOOL(c_in(V_c,c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,c_List_Olist_OCons(c_Event_Oevent_ONotes(V_A,V_X),V_evs,tc_Event_Oevent))),tc_Message_Omsg)) ) ).
cnf(cls_analz__mono__contra_I3_J_0,axiom,
( ~ hBOOL(c_in(V_c,c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)),tc_Message_Omsg))
| hBOOL(c_in(V_c,c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,c_List_Olist_OCons(c_Event_Oevent_OGets(V_A,V_X),V_evs,tc_Event_Oevent))),tc_Message_Omsg)) ) ).
cnf(cls_ns__sharedp_OFake_0,axiom,
( hBOOL(c_NS__Shared__Mirabelle_Ons__sharedp(c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,V_B,V_X),V_evsf,tc_Event_Oevent)))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,V_evsf))),tc_Message_Omsg))
| ~ hBOOL(c_NS__Shared__Mirabelle_Ons__sharedp(V_evsf)) ) ).
cnf(cls_synthp_OAgent_0,axiom,
c_Message_Osynthp(V_H,c_Message_Omsg_OAgent(V_agt)) ).
cnf(cls_msg_Osimps_I11_J_0,axiom,
c_Message_Omsg_ONonce(V_nat_H) != c_Message_Omsg_OAgent(V_agent) ).
cnf(cls_msg_Osimps_I10_J_0,axiom,
c_Message_Omsg_OAgent(V_agent) != c_Message_Omsg_ONonce(V_nat_H) ).
cnf(cls_knows__Spy__Gets_0,axiom,
c_Event_Oknows(c_Message_Oagent_OSpy,c_List_Olist_OCons(c_Event_Oevent_OGets(V_A,V_X),V_evs,tc_Event_Oevent)) = c_Event_Oknows(c_Message_Oagent_OSpy,V_evs) ).
cnf(cls_event_Osimps_I4_J_0,axiom,
c_Event_Oevent_OSays(V_agent1,V_agent2,V_msg) != c_Event_Oevent_OGets(V_agent_H,V_msg_H) ).
cnf(cls_event_Osimps_I6_J_0,axiom,
c_Event_Oevent_OSays(V_agent1,V_agent2,V_msg) != c_Event_Oevent_ONotes(V_agent_H,V_msg_H) ).
cnf(cls_event_Osimps_I5_J_0,axiom,
c_Event_Oevent_OGets(V_agent_H,V_msg_H) != c_Event_Oevent_OSays(V_agent1,V_agent2,V_msg) ).
cnf(cls_event_Osimps_I7_J_0,axiom,
c_Event_Oevent_ONotes(V_agent_H,V_msg_H) != c_Event_Oevent_OSays(V_agent1,V_agent2,V_msg) ).
cnf(cls_knows__Says_0,axiom,
c_Event_Oknows(V_A,c_List_Olist_OCons(c_Event_Oevent_OSays(V_A,V_B,V_X),V_evs,tc_Event_Oevent)) = c_Set_Oinsert(V_X,c_Event_Oknows(V_A,V_evs),tc_Message_Omsg) ).
cnf(cls_pubK__neq__shrK_0,axiom,
hAPP(c_Public_OshrK,V_A) != hAPP(c_Public_OpublicKey(V_b),V_C) ).
cnf(cls_shrK__neq__pubK_0,axiom,
hAPP(c_Public_OpublicKey(V_b),V_C) != hAPP(c_Public_OshrK,V_A) ).
cnf(cls_invKey__shrK_0,axiom,
hAPP(c_Message_OinvKey,hAPP(c_Public_OshrK,V_A)) = hAPP(c_Public_OshrK,V_A) ).
cnf(cls_shrK__image__eq_1,axiom,
( hBOOL(c_in(hAPP(c_Public_OshrK,V_x),c_Set_Oimage(c_Public_OshrK,V_AA,tc_Message_Oagent,tc_nat),tc_nat))
| ~ hBOOL(c_in(V_x,V_AA,tc_Message_Oagent)) ) ).
cnf(cls_shrK__image__eq_0,axiom,
( hBOOL(c_in(V_x,V_AA,tc_Message_Oagent))
| ~ hBOOL(c_in(hAPP(c_Public_OshrK,V_x),c_Set_Oimage(c_Public_OshrK,V_AA,tc_Message_Oagent,tc_nat),tc_nat)) ) ).
cnf(cls_ns__sharedp_ONS1_0,axiom,
( hBOOL(c_NS__Shared__Mirabelle_Ons__sharedp(c_List_Olist_OCons(c_Event_Oevent_OSays(V_A,c_Message_Oagent_OServer,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_A),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_B),c_Message_Omsg_ONonce(V_NA)))),V_evs1,tc_Event_Oevent)))
| hBOOL(c_in(c_Message_Omsg_ONonce(V_NA),c_Event_Oused(V_evs1),tc_Message_Omsg))
| ~ hBOOL(c_NS__Shared__Mirabelle_Ons__sharedp(V_evs1)) ) ).
cnf(cls_analz_ODecrypt_0,axiom,
( hBOOL(c_in(V_X,c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Message_OinvKey,V_K)),c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),c_Message_Oanalz(V_H),tc_Message_Omsg)) ) ).
cnf(cls_knows__Spy__Notes_0,axiom,
( c_Event_Oknows(c_Message_Oagent_OSpy,c_List_Olist_OCons(c_Event_Oevent_ONotes(V_A,V_X),V_evs,tc_Event_Oevent)) = c_Set_Oinsert(V_X,c_Event_Oknows(c_Message_Oagent_OSpy,V_evs),tc_Message_Omsg)
| ~ hBOOL(c_in(V_A,c_Event_Obad,tc_Message_Oagent)) ) ).
cnf(cls_ns__sharedp_ONS4_0,axiom,
( hBOOL(c_NS__Shared__Mirabelle_Ons__sharedp(c_List_Olist_OCons(c_Event_Oevent_OSays(V_B,V_A,c_Message_Omsg_OCrypt(V_K,c_Message_Omsg_ONonce(V_NB))),V_evs4,tc_Event_Oevent)))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_A_H,V_B,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,V_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Omsg_OAgent(V_A)))),c_List_Oset(V_evs4,tc_Event_Oevent),tc_Event_Oevent))
| ~ hBOOL(c_in(V_K,c_Message_OsymKeys,tc_nat))
| hBOOL(c_in(c_Message_Omsg_ONonce(V_NB),c_Event_Oused(V_evs4),tc_Message_Omsg))
| ~ hBOOL(c_NS__Shared__Mirabelle_Ons__sharedp(V_evs4)) ) ).
cnf(cls_knows__Spy__Says_0,axiom,
c_Event_Oknows(c_Message_Oagent_OSpy,c_List_Olist_OCons(c_Event_Oevent_OSays(V_A,V_B,V_X),V_evs,tc_Event_Oevent)) = c_Set_Oinsert(V_X,c_Event_Oknows(c_Message_Oagent_OSpy,V_evs),tc_Message_Omsg) ).
cnf(cls_Notes__imp__used_0,axiom,
( hBOOL(c_in(V_X,c_Event_Oused(V_evs),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Event_Oevent_ONotes(V_A,V_X),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent)) ) ).
cnf(cls_ns__sharedp_ONS5_0,axiom,
( hBOOL(c_NS__Shared__Mirabelle_Ons__sharedp(c_List_Olist_OCons(c_Event_Oevent_OSays(V_A,V_B,c_Message_Omsg_OCrypt(V_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(V_NB),c_Message_Omsg_ONonce(V_NB)))),V_evs5,tc_Event_Oevent)))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_S,V_A,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,V_A),c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(V_NA),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,V_K),V_X))))),c_List_Oset(V_evs5,tc_Event_Oevent),tc_Event_Oevent))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_B_H,V_A,c_Message_Omsg_OCrypt(V_K,c_Message_Omsg_ONonce(V_NB))),c_List_Oset(V_evs5,tc_Event_Oevent),tc_Event_Oevent))
| ~ hBOOL(c_in(V_K,c_Message_OsymKeys,tc_nat))
| ~ hBOOL(c_NS__Shared__Mirabelle_Ons__sharedp(V_evs5)) ) ).
cnf(cls_ns__sharedp_ONS2_0,axiom,
( hBOOL(c_NS__Shared__Mirabelle_Ons__sharedp(c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OServer,V_A,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,V_A),c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(V_NA),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,V_KAB),c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,V_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,V_KAB),c_Message_Omsg_OAgent(V_A)))))))),V_evs2,tc_Event_Oevent)))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_A_H,c_Message_Oagent_OServer,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_A),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_B),c_Message_Omsg_ONonce(V_NA)))),c_List_Oset(V_evs2,tc_Event_Oevent),tc_Event_Oevent))
| ~ hBOOL(c_in(V_KAB,c_Message_OsymKeys,tc_nat))
| hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_KAB),c_Event_Oused(V_evs2),tc_Message_Omsg))
| ~ hBOOL(c_NS__Shared__Mirabelle_Ons__sharedp(V_evs2)) ) ).
cnf(cls_set__ConsD_0,axiom,
( hBOOL(c_in(V_y,c_List_Oset(V_xs,T_a),T_a))
| V_y = V_x
| ~ hBOOL(c_in(V_y,c_List_Oset(c_List_Olist_OCons(V_x,V_xs,T_a),T_a),T_a)) ) ).
cnf(cls_analz_OSnd_0,axiom,
( hBOOL(c_in(V_Y,c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OMPair(V_X,V_Y),c_Message_Oanalz(V_H),tc_Message_Omsg)) ) ).
cnf(cls_analz_OFst_0,axiom,
( hBOOL(c_in(V_X,c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OMPair(V_X,V_Y),c_Message_Oanalz(V_H),tc_Message_Omsg)) ) ).
cnf(cls_MPair__used_1,axiom,
( hBOOL(c_in(V_Y,c_Event_Oused(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OMPair(V_X,V_Y),c_Event_Oused(V_H),tc_Message_Omsg)) ) ).
cnf(cls_MPair__used_0,axiom,
( hBOOL(c_in(V_X,c_Event_Oused(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OMPair(V_X,V_Y),c_Event_Oused(V_H),tc_Message_Omsg)) ) ).
cnf(cls_synth_OMPair_0,axiom,
( hBOOL(c_in(c_Message_Omsg_OMPair(V_X,V_Y),c_Message_Osynth(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_Y,c_Message_Osynth(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(V_H),tc_Message_Omsg)) ) ).
cnf(cls_MPair__synth_1,axiom,
( hBOOL(c_in(V_Y,c_Message_Osynth(V_H),tc_Message_Omsg))
| hBOOL(c_in(c_Message_Omsg_OMPair(V_X,V_Y),V_H,tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OMPair(V_X,V_Y),c_Message_Osynth(V_H),tc_Message_Omsg)) ) ).
cnf(cls_MPair__synth_0,axiom,
( hBOOL(c_in(V_X,c_Message_Osynth(V_H),tc_Message_Omsg))
| hBOOL(c_in(c_Message_Omsg_OMPair(V_X,V_Y),V_H,tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OMPair(V_X,V_Y),c_Message_Osynth(V_H),tc_Message_Omsg)) ) ).
cnf(cls_parts__insertI_0,axiom,
( hBOOL(c_in(V_c,c_Message_Oparts(c_Set_Oinsert(V_a,V_G,tc_Message_Omsg)),tc_Message_Omsg))
| ~ hBOOL(c_in(V_c,c_Message_Oparts(V_G),tc_Message_Omsg)) ) ).
cnf(cls_parts__cut__eq_0,axiom,
( c_Message_Oparts(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)) = c_Message_Oparts(V_H)
| ~ hBOOL(c_in(V_X,c_Message_Oparts(V_H),tc_Message_Omsg)) ) ).
cnf(cls_msg_Osimps_I35_J_0,axiom,
c_Message_Omsg_OMPair(V_msg1_H,V_msg2_H) != c_Message_Omsg_ONonce(V_nat) ).
cnf(cls_msg_Osimps_I34_J_0,axiom,
c_Message_Omsg_ONonce(V_nat) != c_Message_Omsg_OMPair(V_msg1_H,V_msg2_H) ).
cnf(cls_synthp_OMPair_0,axiom,
( c_Message_Osynthp(V_H,c_Message_Omsg_OMPair(V_X,V_Y))
| ~ c_Message_Osynthp(V_H,V_Y)
| ~ c_Message_Osynthp(V_H,V_X) ) ).
cnf(cls_initState__into__used_0,axiom,
( hBOOL(c_in(V_X,c_Event_Oused(V_evs),tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,c_Message_Oparts(c_Event_OinitState(V_B)),tc_Message_Omsg)) ) ).
cnf(cls_Nonce__notin__initState_0,axiom,
~ hBOOL(c_in(c_Message_Omsg_ONonce(V_N),c_Message_Oparts(c_Event_OinitState(V_B)),tc_Message_Omsg)) ).
cnf(cls_MPair__synth__analz_2,axiom,
( hBOOL(c_in(c_Message_Omsg_OMPair(V_X,V_Y),c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg))
| ~ hBOOL(c_in(V_Y,c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg)) ) ).
cnf(cls_MPair__synth__analz_0,axiom,
( hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OMPair(V_X,V_Y),c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg)) ) ).
cnf(cls_MPair__synth__analz_1,axiom,
( hBOOL(c_in(V_Y,c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OMPair(V_X,V_Y),c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg)) ) ).
cnf(cls_synth__synthD_0,axiom,
( hBOOL(c_in(V_X,c_Message_Osynth(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Osynth(V_H)),tc_Message_Omsg)) ) ).
cnf(cls_synth_OInj_0,axiom,
( hBOOL(c_in(V_X,c_Message_Osynth(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,V_H,tc_Message_Omsg)) ) ).
cnf(cls_analz__analzD_0,axiom,
( hBOOL(c_in(V_X,c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,c_Message_Oanalz(c_Message_Oanalz(V_H)),tc_Message_Omsg)) ) ).
cnf(cls_analz_OInj_0,axiom,
( hBOOL(c_in(V_X,c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,V_H,tc_Message_Omsg)) ) ).
cnf(cls_imageI_0,axiom,
( hBOOL(c_in(hAPP(V_f,V_x),c_Set_Oimage(V_f,V_A,T_a,T_b),T_b))
| ~ hBOOL(c_in(V_x,V_A,T_a)) ) ).
cnf(cls_image__eqI_0,axiom,
( hBOOL(c_in(hAPP(V_f,V_x),c_Set_Oimage(V_f,V_A,T_b,T_a),T_a))
| ~ hBOOL(c_in(V_x,V_A,T_b)) ) ).
cnf(cls_image__iff_2,axiom,
( ~ hBOOL(c_in(V_x,V_A,T_b))
| hBOOL(c_in(hAPP(V_f,V_x),c_Set_Oimage(V_f,V_A,T_b,T_a),T_a)) ) ).
cnf(cls_rev__image__eqI_0,axiom,
( ~ hBOOL(c_in(V_x,V_A,T_aa))
| hBOOL(c_in(hAPP(V_f,V_x),c_Set_Oimage(V_f,V_A,T_aa,T_a),T_a)) ) ).
cnf(cls_insert__absorb_0,axiom,
( c_Set_Oinsert(V_a,V_A,T_a) = V_A
| ~ hBOOL(c_in(V_a,V_A,T_a)) ) ).
cnf(cls_insert__ident_0,axiom,
( c_Set_Oinsert(V_x,V_A,T_a) != c_Set_Oinsert(V_x,V_B,T_a)
| hBOOL(c_in(V_x,V_B,T_a))
| hBOOL(c_in(V_x,V_A,T_a))
| V_A = V_B ) ).
cnf(cls_insertCI_1,axiom,
hBOOL(c_in(V_x,c_Set_Oinsert(V_x,V_B,T_a),T_a)) ).
cnf(cls_insertI1_0,axiom,
hBOOL(c_in(V_a,c_Set_Oinsert(V_a,V_B,T_a),T_a)) ).
cnf(cls_insert__iff_1,axiom,
hBOOL(c_in(V_x,c_Set_Oinsert(V_x,V_A,T_a),T_a)) ).
cnf(cls_UNIV__I_0,axiom,
hBOOL(c_in(V_x,c_Orderings_Otop__class_Otop(tc_fun(T_a,tc_bool)),T_a)) ).
cnf(cls_insertE_0,axiom,
( hBOOL(c_in(V_a,V_A,T_a))
| V_a = V_b
| ~ hBOOL(c_in(V_a,c_Set_Oinsert(V_b,V_A,T_a),T_a)) ) ).
cnf(cls_insertCI_0,axiom,
( hBOOL(c_in(V_a,c_Set_Oinsert(V_b,V_B,T_a),T_a))
| ~ hBOOL(c_in(V_a,V_B,T_a)) ) ).
cnf(cls_insert__iff_2,axiom,
( hBOOL(c_in(V_a,c_Set_Oinsert(V_b,V_A,T_a),T_a))
| ~ hBOOL(c_in(V_a,V_A,T_a)) ) ).
cnf(cls_Key__not__used_0,axiom,
( ~ hBOOL(c_in(V_K,c_Set_Oimage(c_Public_OshrK,c_Orderings_Otop__class_Otop(tc_fun(tc_Message_Oagent,tc_bool)),tc_Message_Oagent,tc_nat),tc_nat))
| hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Event_Oused(V_evs),tc_Message_Omsg)) ) ).
cnf(cls_privateKey__into__used_0,axiom,
hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(V_b),V_A))),c_Event_Oused(V_evs),tc_Message_Omsg)) ).
cnf(cls_shrK__notin__image__publicKey_0,axiom,
~ hBOOL(c_in(hAPP(c_Public_OshrK,V_x),c_Set_Oimage(c_Public_OpublicKey(V_b),V_AA,tc_Message_Oagent,tc_nat),tc_nat)) ).
cnf(cls_Fake__analz__eq_0,axiom,
( c_Message_Osynth(c_Message_Oanalz(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg))) = c_Message_Osynth(c_Message_Oanalz(V_H))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Oanalz(V_H)),tc_Message_Omsg)) ) ).
cnf(cls_analz__image__freshK__simps_I56_J_0,axiom,
c_Set_Oinsert(hAPP(V_f,V_a),c_Set_Oimage(V_f,V_B,T_b,T_a),T_a) = c_Set_Oimage(V_f,c_Set_Oinsert(V_a,V_B,T_b),T_b,T_a) ).
cnf(cls_Nonce__synth_0,axiom,
( hBOOL(c_in(c_Message_Omsg_ONonce(V_n),V_H,tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_ONonce(V_n),c_Message_Osynth(V_H),tc_Message_Omsg)) ) ).
cnf(cls_Nonce__synth__eq_0,axiom,
( hBOOL(c_in(c_Message_Omsg_ONonce(V_N),V_H,tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_ONonce(V_N),c_Message_Osynth(V_H),tc_Message_Omsg)) ) ).
cnf(cls_Nonce__synth__eq_1,axiom,
( hBOOL(c_in(c_Message_Omsg_ONonce(V_N),c_Message_Osynth(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_ONonce(V_N),V_H,tc_Message_Omsg)) ) ).
cnf(cls_analz__insertI_0,axiom,
( hBOOL(c_in(V_c,c_Message_Oanalz(c_Set_Oinsert(V_a,V_G,tc_Message_Omsg)),tc_Message_Omsg))
| ~ hBOOL(c_in(V_c,c_Message_Oanalz(V_G),tc_Message_Omsg)) ) ).
cnf(cls_not__Cons__self_0,axiom,
V_xs != c_List_Olist_OCons(V_x,V_xs,T_a) ).
cnf(cls_not__Cons__self2_0,axiom,
c_List_Olist_OCons(V_x,V_t,T_a) != V_t ).
cnf(cls_not__symKeys__pubK_0,axiom,
~ hBOOL(c_in(hAPP(c_Public_OpublicKey(V_b),V_A),c_Message_OsymKeys,tc_nat)) ).
cnf(cls_synth__idem_0,axiom,
c_Message_Osynth(c_Message_Osynth(V_H)) = c_Message_Osynth(V_H) ).
cnf(cls_analz__insert__MPair_0,axiom,
c_Message_Oanalz(c_Set_Oinsert(c_Message_Omsg_OMPair(V_X,V_Y),V_H,tc_Message_Omsg)) = c_Set_Oinsert(c_Message_Omsg_OMPair(V_X,V_Y),c_Message_Oanalz(c_Set_Oinsert(V_X,c_Set_Oinsert(V_Y,V_H,tc_Message_Omsg),tc_Message_Omsg)),tc_Message_Omsg) ).
cnf(cls_analz__insert__Agent_0,axiom,
c_Message_Oanalz(c_Set_Oinsert(c_Message_Omsg_OAgent(V_agt),V_H,tc_Message_Omsg)) = c_Set_Oinsert(c_Message_Omsg_OAgent(V_agt),c_Message_Oanalz(V_H),tc_Message_Omsg) ).
cnf(cls_list_Osimps_I3_J_0,axiom,
c_List_Olist_OCons(V_a_H,V_list_H,T_a) != c_List_Olist_ONil(T_a) ).
cnf(cls_neq__Nil__conv_1,axiom,
c_List_Olist_OCons(V_x,V_xa,T_a) != c_List_Olist_ONil(T_a) ).
cnf(cls_insert__image_0,axiom,
( c_Set_Oinsert(hAPP(V_f,V_x),c_Set_Oimage(V_f,V_A,T_a,T_b),T_b) = c_Set_Oimage(V_f,V_A,T_a,T_b)
| ~ hBOOL(c_in(V_x,V_A,T_a)) ) ).
cnf(cls_analz__insert__eq_0,axiom,
( c_Message_Oanalz(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)) = c_Message_Oanalz(V_H)
| ~ hBOOL(c_in(V_X,c_Message_Oanalz(V_H),tc_Message_Omsg)) ) ).
cnf(cls_insert__code_2,axiom,
( hBOOL(hAPP(c_Set_Oinsert(V_y,V_A,T_a),V_x))
| ~ hBOOL(hAPP(V_A,V_x)) ) ).
cnf(cls_pushes_I2_J_0,axiom,
c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,V_K),c_Set_Oinsert(c_Message_Omsg_ONonce(V_N),V_A,tc_Message_Omsg),tc_Message_Omsg) = c_Set_Oinsert(c_Message_Omsg_ONonce(V_N),c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,V_K),V_A,tc_Message_Omsg),tc_Message_Omsg) ).
cnf(cls_Nonce__notin__used__empty_0,axiom,
~ hBOOL(c_in(c_Message_Omsg_ONonce(V_N),c_Event_Oused(c_List_Olist_ONil(tc_Event_Oevent)),tc_Message_Omsg)) ).
cnf(cls_priK__in__initState_0,axiom,
hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(V_b),V_A))),c_Event_OinitState(V_A),tc_Message_Omsg)) ).
cnf(cls_rangeI_0,axiom,
hBOOL(c_in(hAPP(V_f,V_x),c_Set_Oimage(V_f,c_Orderings_Otop__class_Otop(tc_fun(T_b,tc_bool)),T_b,T_a),T_a)) ).
cnf(cls_insert__commute_0,axiom,
c_Set_Oinsert(V_x,c_Set_Oinsert(V_y,V_A,T_a),T_a) = c_Set_Oinsert(V_y,c_Set_Oinsert(V_x,V_A,T_a),T_a) ).
cnf(cls_msg_Osimps_I3_J_0,axiom,
( c_Message_Omsg_ONonce(V_nat) != c_Message_Omsg_ONonce(V_nat_H)
| V_nat = V_nat_H ) ).
cnf(cls_publicKey__inject_0,axiom,
( hAPP(c_Public_OpublicKey(V_b),V_A) != hAPP(c_Public_OpublicKey(V_c),V_A_H)
| V_b = V_c ) ).
cnf(cls_publicKey__inject_1,axiom,
( hAPP(c_Public_OpublicKey(V_b),V_A) != hAPP(c_Public_OpublicKey(V_c),V_A_H)
| V_A = V_A_H ) ).
cnf(cls_publicKey__notin__image__shrK_0,axiom,
~ hBOOL(c_in(hAPP(c_Public_OpublicKey(V_b),V_x),c_Set_Oimage(c_Public_OshrK,V_AA,tc_Message_Oagent,tc_nat),tc_nat)) ).
cnf(cls_lists_ONil_0,axiom,
hBOOL(c_in(c_List_Olist_ONil(T_a),c_List_Olists(V_A,T_a),tc_List_Olist(T_a))) ).
cnf(cls_privateKey__neq__publicKey_0,axiom,
hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(V_b),V_A)) != hAPP(c_Public_OpublicKey(V_c),V_A_H) ).
cnf(cls_invKey__eq_0,axiom,
( hAPP(c_Message_OinvKey,V_K) != hAPP(c_Message_OinvKey,V_K_H)
| V_K = V_K_H ) ).
cnf(cls_publicKey__image__eq_0,axiom,
( V_b = V_c
| ~ hBOOL(c_in(hAPP(c_Public_OpublicKey(V_b),V_x),c_Set_Oimage(c_Public_OpublicKey(V_c),V_AA,tc_Message_Oagent,tc_nat),tc_nat)) ) ).
cnf(cls_publicKey__image__eq_1,axiom,
( hBOOL(c_in(V_x,V_AA,tc_Message_Oagent))
| ~ hBOOL(c_in(hAPP(c_Public_OpublicKey(V_b),V_x),c_Set_Oimage(c_Public_OpublicKey(V_c),V_AA,tc_Message_Oagent,tc_nat),tc_nat)) ) ).
cnf(cls_publicKey__image__eq_2,axiom,
( hBOOL(c_in(hAPP(c_Public_OpublicKey(V_x),V_xa),c_Set_Oimage(c_Public_OpublicKey(V_x),V_AA,tc_Message_Oagent,tc_nat),tc_nat))
| ~ hBOOL(c_in(V_xa,V_AA,tc_Message_Oagent)) ) ).
cnf(cls_synth__cut_0,axiom,
( hBOOL(c_in(V_Y,c_Message_Osynth(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_Y,c_Message_Osynth(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)),tc_Message_Omsg)) ) ).
cnf(cls_analz__cut_0,axiom,
( hBOOL(c_in(V_Y,c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_Y,c_Message_Oanalz(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)),tc_Message_Omsg)) ) ).
cnf(cls_privateKey__notin__image__publicKey_0,axiom,
~ hBOOL(c_in(hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(V_b),V_x)),c_Set_Oimage(c_Public_OpublicKey(V_c),V_AA,tc_Message_Oagent,tc_nat),tc_nat)) ).
cnf(cls_analz__insert__Nonce_0,axiom,
c_Message_Oanalz(c_Set_Oinsert(c_Message_Omsg_ONonce(V_N),V_H,tc_Message_Omsg)) = c_Set_Oinsert(c_Message_Omsg_ONonce(V_N),c_Message_Oanalz(V_H),tc_Message_Omsg) ).
cnf(cls_insert__absorb2_0,axiom,
c_Set_Oinsert(V_x,c_Set_Oinsert(V_x,V_A,T_a),T_a) = c_Set_Oinsert(V_x,V_A,T_a) ).
cnf(cls_insert__code_0,axiom,
( hBOOL(hAPP(V_A,V_x))
| V_y = V_x
| ~ hBOOL(hAPP(c_Set_Oinsert(V_y,V_A,T_a),V_x)) ) ).
cnf(cls_pushes_I9_J_0,axiom,
c_Set_Oinsert(c_Message_Omsg_OCrypt(V_X,V_K),c_Set_Oinsert(c_Message_Omsg_ONonce(V_N),V_A,tc_Message_Omsg),tc_Message_Omsg) = c_Set_Oinsert(c_Message_Omsg_ONonce(V_N),c_Set_Oinsert(c_Message_Omsg_OCrypt(V_X,V_K),V_A,tc_Message_Omsg),tc_Message_Omsg) ).
cnf(cls_symKeys__invKey__iff_0,axiom,
( hBOOL(c_in(V_K,c_Message_OsymKeys,tc_nat))
| ~ hBOOL(c_in(hAPP(c_Message_OinvKey,V_K),c_Message_OsymKeys,tc_nat)) ) ).
cnf(cls_symKeys__invKey__iff_1,axiom,
( hBOOL(c_in(hAPP(c_Message_OinvKey,V_K),c_Message_OsymKeys,tc_nat))
| ~ hBOOL(c_in(V_K,c_Message_OsymKeys,tc_nat)) ) ).
cnf(cls_invKey__K_0,axiom,
( hAPP(c_Message_OinvKey,V_K) = V_K
| ~ hBOOL(c_in(V_K,c_Message_OsymKeys,tc_nat)) ) ).
cnf(cls_knows__Notes_0,axiom,
c_Event_Oknows(V_A,c_List_Olist_OCons(c_Event_Oevent_ONotes(V_A,V_X),V_evs,tc_Event_Oevent)) = c_Set_Oinsert(V_X,c_Event_Oknows(V_A,V_evs),tc_Message_Omsg) ).
cnf(cls_ns__sharedp_ONil_0,axiom,
hBOOL(c_NS__Shared__Mirabelle_Ons__sharedp(c_List_Olist_ONil(tc_Event_Oevent))) ).
cnf(cls_analz__image__Key_0,axiom,
c_Message_Oanalz(c_Set_Oimage(c_Message_Omsg_OKey,V_N,tc_nat,tc_Message_Omsg)) = c_Set_Oimage(c_Message_Omsg_OKey,V_N,tc_nat,tc_Message_Omsg) ).
cnf(cls_event_Osimps_I2_J_1,axiom,
( c_Event_Oevent_OGets(V_agent,V_msg) != c_Event_Oevent_OGets(V_agent_H,V_msg_H)
| V_msg = V_msg_H ) ).
cnf(cls_event_Osimps_I2_J_0,axiom,
( c_Event_Oevent_OGets(V_agent,V_msg) != c_Event_Oevent_OGets(V_agent_H,V_msg_H)
| V_agent = V_agent_H ) ).
cnf(cls_top1I_0,axiom,
hBOOL(hAPP(c_Orderings_Otop__class_Otop(tc_fun(T_a,tc_bool)),V_x)) ).
cnf(cls_privateKey__notin__image__shrK_0,axiom,
~ hBOOL(c_in(hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(V_b),V_x)),c_Set_Oimage(c_Public_OshrK,V_AA,tc_Message_Oagent,tc_nat),tc_nat)) ).
cnf(cls_event_Osimps_I8_J_0,axiom,
c_Event_Oevent_OGets(V_agent,V_msg) != c_Event_Oevent_ONotes(V_agent_H,V_msg_H) ).
cnf(cls_list_Osimps_I2_J_0,axiom,
c_List_Olist_ONil(T_a) != c_List_Olist_OCons(V_a_H,V_list_H,T_a) ).
cnf(cls_event_Osimps_I3_J_1,axiom,
( c_Event_Oevent_ONotes(V_agent,V_msg) != c_Event_Oevent_ONotes(V_agent_H,V_msg_H)
| V_msg = V_msg_H ) ).
cnf(cls_event_Osimps_I3_J_0,axiom,
( c_Event_Oevent_ONotes(V_agent,V_msg) != c_Event_Oevent_ONotes(V_agent_H,V_msg_H)
| V_agent = V_agent_H ) ).
cnf(cls_image__insert_0,axiom,
c_Set_Oimage(V_f,c_Set_Oinsert(V_a,V_B,T_b),T_b,T_a) = c_Set_Oinsert(hAPP(V_f,V_a),c_Set_Oimage(V_f,V_B,T_b,T_a),T_a) ).
cnf(cls_insert__code_1,axiom,
hBOOL(hAPP(c_Set_Oinsert(V_x,V_A,T_a),V_x)) ).
cnf(cls_invKey_0,axiom,
hAPP(c_Message_OinvKey,hAPP(c_Message_OinvKey,V_K)) = V_K ).
cnf(cls_not__symKeys__priK_0,axiom,
~ hBOOL(c_in(hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(V_b),V_A)),c_Message_OsymKeys,tc_nat)) ).
cnf(cls_parts__insert__Nonce_0,axiom,
c_Message_Oparts(c_Set_Oinsert(c_Message_Omsg_ONonce(V_N),V_H,tc_Message_Omsg)) = c_Set_Oinsert(c_Message_Omsg_ONonce(V_N),c_Message_Oparts(V_H),tc_Message_Omsg) ).
cnf(cls_event_Osimps_I9_J_0,axiom,
c_Event_Oevent_ONotes(V_agent_H,V_msg_H) != c_Event_Oevent_OGets(V_agent,V_msg) ).
cnf(cls_knows__Nil_0,axiom,
c_Event_Oknows(V_A,c_List_Olist_ONil(tc_Event_Oevent)) = c_Event_OinitState(V_A) ).
cnf(cls_list_Oinject_0,axiom,
( c_List_Olist_OCons(V_a,V_list,T_a) != c_List_Olist_OCons(V_a_H,V_list_H,T_a)
| V_a = V_a_H ) ).
cnf(cls_list_Oinject_1,axiom,
( c_List_Olist_OCons(V_a,V_list,T_a) != c_List_Olist_OCons(V_a_H,V_list_H,T_a)
| V_list = V_list_H ) ).
cnf(cls_synthp_OInj_0,axiom,
( c_Message_Osynthp(V_H,V_X)
| ~ hBOOL(hAPP(V_H,V_X)) ) ).
cnf(cls_priK__neq__shrK_0,axiom,
hAPP(c_Public_OshrK,V_A) != hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(V_b),V_C)) ).
cnf(cls_analz__insert__cong_0,axiom,
( c_Message_Oanalz(V_H) != c_Message_Oanalz(V_H_H)
| c_Message_Oanalz(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)) = c_Message_Oanalz(c_Set_Oinsert(V_X,V_H_H,tc_Message_Omsg)) ) ).
cnf(cls_knows__Gets_0,axiom,
( c_Event_Oknows(V_A,c_List_Olist_OCons(c_Event_Oevent_OGets(V_A,V_X),V_evs,tc_Event_Oevent)) = c_Set_Oinsert(V_X,c_Event_Oknows(V_A,V_evs),tc_Message_Omsg)
| V_A = c_Message_Oagent_OSpy ) ).
cnf(cls_analz__idem_0,axiom,
c_Message_Oanalz(c_Message_Oanalz(V_H)) = c_Message_Oanalz(V_H) ).
cnf(cls_List_Oset_Osimps_I2_J_0,axiom,
c_List_Oset(c_List_Olist_OCons(V_x,V_xs,T_a),T_a) = c_Set_Oinsert(V_x,c_List_Oset(V_xs,T_a),T_a) ).
cnf(cls_used__Gets_0,axiom,
c_Event_Oused(c_List_Olist_OCons(c_Event_Oevent_OGets(V_A,V_X),V_evs,tc_Event_Oevent)) = c_Event_Oused(V_evs) ).
cnf(cls_shrK__neq__priK_0,axiom,
hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(V_b),V_C)) != hAPP(c_Public_OshrK,V_A) ).
cnf(cls_publicKey__neq__privateKey_0,axiom,
hAPP(c_Public_OpublicKey(V_c),V_A_H) != hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(V_b),V_A)) ).
cnf(cls_sym__shrK_0,axiom,
hBOOL(c_in(hAPP(c_Public_OshrK,V_X),c_Message_OsymKeys,tc_nat)) ).
cnf(cls_not__parts__not__analz_0,axiom,
( ~ hBOOL(c_in(V_c,c_Message_Oanalz(V_H),tc_Message_Omsg))
| hBOOL(c_in(V_c,c_Message_Oparts(V_H),tc_Message_Omsg)) ) ).
cnf(cls_analz__into__parts_0,axiom,
( hBOOL(c_in(V_c,c_Message_Oparts(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_c,c_Message_Oanalz(V_H),tc_Message_Omsg)) ) ).
cnf(cls_analz__conj__parts_0,axiom,
( hBOOL(c_in(V_X,c_Message_Oparts(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,c_Message_Oanalz(V_H),tc_Message_Omsg)) ) ).
cnf(cls_parts__insert__MPair_0,axiom,
c_Message_Oparts(c_Set_Oinsert(c_Message_Omsg_OMPair(V_X,V_Y),V_H,tc_Message_Omsg)) = c_Set_Oinsert(c_Message_Omsg_OMPair(V_X,V_Y),c_Message_Oparts(c_Set_Oinsert(V_X,c_Set_Oinsert(V_Y,V_H,tc_Message_Omsg),tc_Message_Omsg)),tc_Message_Omsg) ).
cnf(cls_Crypt__synth_0,axiom,
( hBOOL(c_in(V_X,c_Message_Osynth(V_H),tc_Message_Omsg))
| hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),V_H,tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),c_Message_Osynth(V_H),tc_Message_Omsg)) ) ).
cnf(cls_pushes_I12_J_0,axiom,
c_Set_Oinsert(c_Message_Omsg_OCrypt(V_X,V_K),c_Set_Oinsert(c_Message_Omsg_OMPair(V_X_H,V_Y),V_A,tc_Message_Omsg),tc_Message_Omsg) = c_Set_Oinsert(c_Message_Omsg_OMPair(V_X_H,V_Y),c_Set_Oinsert(c_Message_Omsg_OCrypt(V_X,V_K),V_A,tc_Message_Omsg),tc_Message_Omsg) ).
cnf(cls_Key__synth__eq_1,axiom,
( hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Osynth(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),V_H,tc_Message_Omsg)) ) ).
cnf(cls_Key__synth_0,axiom,
( hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),V_H,tc_Message_Omsg))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Osynth(V_H),tc_Message_Omsg)) ) ).
cnf(cls_parts__insert__Crypt_0,axiom,
c_Message_Oparts(c_Set_Oinsert(c_Message_Omsg_OCrypt(V_K,V_X),V_H,tc_Message_Omsg)) = c_Set_Oinsert(c_Message_Omsg_OCrypt(V_K,V_X),c_Message_Oparts(c_Set_Oinsert(V_X,V_H,tc_Message_Omsg)),tc_Message_Omsg) ).
cnf(cls_pushes_I5_J_0,axiom,
c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,V_K),c_Set_Oinsert(c_Message_Omsg_OMPair(V_X,V_Y),V_A,tc_Message_Omsg),tc_Message_Omsg) = c_Set_Oinsert(c_Message_Omsg_OMPair(V_X,V_Y),c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,V_K),V_A,tc_Message_Omsg),tc_Message_Omsg) ).
cnf(cls_parts__insert__Key_0,axiom,
c_Message_Oparts(c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,V_K),V_H,tc_Message_Omsg)) = c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Oparts(V_H),tc_Message_Omsg) ).
cnf(cls_parts__image__Key_0,axiom,
c_Message_Oparts(c_Set_Oimage(c_Message_Omsg_OKey,V_N,tc_nat,tc_Message_Omsg)) = c_Set_Oimage(c_Message_Omsg_OKey,V_N,tc_nat,tc_Message_Omsg) ).
cnf(cls_synth_OAgent_0,axiom,
hBOOL(c_in(c_Message_Omsg_OAgent(V_agt),c_Message_Osynth(V_H),tc_Message_Omsg)) ).
cnf(cls_Agent__synth_0,axiom,
hBOOL(c_in(c_Message_Omsg_OAgent(V_A),c_Message_Osynth(V_H),tc_Message_Omsg)) ).
cnf(cls_synthp_OCrypt_0,axiom,
( c_Message_Osynthp(V_H,c_Message_Omsg_OCrypt(V_K,V_X))
| ~ hBOOL(hAPP(V_H,hAPP(c_Message_Omsg_OKey,V_K)))
| ~ c_Message_Osynthp(V_H,V_X) ) ).
cnf(cls_pushes_I6_J_0,axiom,
c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,V_K),c_Set_Oinsert(c_Message_Omsg_OCrypt(V_X,V_K_H),V_A,tc_Message_Omsg),tc_Message_Omsg) = c_Set_Oinsert(c_Message_Omsg_OCrypt(V_X,V_K_H),c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,V_K),V_A,tc_Message_Omsg),tc_Message_Omsg) ).
cnf(cls_parts__insert__Agent_0,axiom,
c_Message_Oparts(c_Set_Oinsert(c_Message_Omsg_OAgent(V_agt),V_H,tc_Message_Omsg)) = c_Set_Oinsert(c_Message_Omsg_OAgent(V_agt),c_Message_Oparts(V_H),tc_Message_Omsg) ).
cnf(cls_pushes_I8_J_0,axiom,
c_Set_Oinsert(c_Message_Omsg_OCrypt(V_X,V_K),c_Set_Oinsert(c_Message_Omsg_OAgent(V_C),V_A,tc_Message_Omsg),tc_Message_Omsg) = c_Set_Oinsert(c_Message_Omsg_OAgent(V_C),c_Set_Oinsert(c_Message_Omsg_OCrypt(V_X,V_K),V_A,tc_Message_Omsg),tc_Message_Omsg) ).
cnf(cls_analz__spies__pubK_0,axiom,
hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Public_OpublicKey(V_b),V_A)),c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)),tc_Message_Omsg)) ).
cnf(cls_pushes_I1_J_0,axiom,
c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,V_K),c_Set_Oinsert(c_Message_Omsg_OAgent(V_C),V_A,tc_Message_Omsg),tc_Message_Omsg) = c_Set_Oinsert(c_Message_Omsg_OAgent(V_C),c_Set_Oinsert(hAPP(c_Message_Omsg_OKey,V_K),V_A,tc_Message_Omsg),tc_Message_Omsg) ).
cnf(cls_analz__mono__contra_I1_J_0,axiom,
( ~ hBOOL(c_in(V_c,c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)),tc_Message_Omsg))
| hBOOL(c_in(V_c,c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,c_List_Olist_OCons(c_Event_Oevent_OSays(V_A,V_B,V_X),V_evs,tc_Event_Oevent))),tc_Message_Omsg)) ) ).
cnf(cls_ns__shared_OFake_0,axiom,
( hBOOL(c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OSpy,V_B,V_X),V_evsf,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,V_evsf))),tc_Message_Omsg))
| ~ hBOOL(c_in(V_evsf,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))) ) ).
cnf(cls_knows__Spy__Notes_1,axiom,
( c_Event_Oknows(c_Message_Oagent_OSpy,c_List_Olist_OCons(c_Event_Oevent_ONotes(V_A,V_X),V_evs,tc_Event_Oevent)) = c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)
| hBOOL(c_in(V_A,c_Event_Obad,tc_Message_Oagent)) ) ).
cnf(cls_ns__shared_ONS4_0,axiom,
( hBOOL(c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(V_B,V_A,c_Message_Omsg_OCrypt(V_K,c_Message_Omsg_ONonce(V_NB))),V_evs4,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_A_H,V_B,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,V_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Omsg_OAgent(V_A)))),c_List_Oset(V_evs4,tc_Event_Oevent),tc_Event_Oevent))
| ~ hBOOL(c_in(V_K,c_Message_OsymKeys,tc_nat))
| hBOOL(c_in(c_Message_Omsg_ONonce(V_NB),c_Event_Oused(V_evs4),tc_Message_Omsg))
| ~ hBOOL(c_in(V_evs4,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))) ) ).
cnf(cls_ns__shared_ONil_0,axiom,
hBOOL(c_in(c_List_Olist_ONil(tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))) ).
cnf(cls_ns__shared_ONS1_0,axiom,
( hBOOL(c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(V_A,c_Message_Oagent_OServer,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_A),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_B),c_Message_Omsg_ONonce(V_NA)))),V_evs1,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)))
| hBOOL(c_in(c_Message_Omsg_ONonce(V_NA),c_Event_Oused(V_evs1),tc_Message_Omsg))
| ~ hBOOL(c_in(V_evs1,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))) ) ).
cnf(cls_ns__shared_ONS2_0,axiom,
( hBOOL(c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(c_Message_Oagent_OServer,V_A,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,V_A),c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(V_NA),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,V_KAB),c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,V_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,V_KAB),c_Message_Omsg_OAgent(V_A)))))))),V_evs2,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_A_H,c_Message_Oagent_OServer,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_A),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_B),c_Message_Omsg_ONonce(V_NA)))),c_List_Oset(V_evs2,tc_Event_Oevent),tc_Event_Oevent))
| ~ hBOOL(c_in(V_KAB,c_Message_OsymKeys,tc_nat))
| hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_KAB),c_Event_Oused(V_evs2),tc_Message_Omsg))
| ~ hBOOL(c_in(V_evs2,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))) ) ).
cnf(cls_ns__sharedp_OOops_0,axiom,
( hBOOL(c_NS__Shared__Mirabelle_Ons__sharedp(c_List_Olist_OCons(c_Event_Oevent_ONotes(c_Message_Oagent_OSpy,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(V_NA),c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(V_NB),hAPP(c_Message_Omsg_OKey,V_K)))),V_evso,tc_Event_Oevent)))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer,V_A,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,V_A),c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(V_NA),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,V_K),V_X))))),c_List_Oset(V_evso,tc_Event_Oevent),tc_Event_Oevent))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_B,V_A,c_Message_Omsg_OCrypt(V_K,c_Message_Omsg_ONonce(V_NB))),c_List_Oset(V_evso,tc_Event_Oevent),tc_Event_Oevent))
| ~ hBOOL(c_NS__Shared__Mirabelle_Ons__sharedp(V_evso)) ) ).
cnf(cls_ns__shared_ONS5_0,axiom,
( hBOOL(c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(V_A,V_B,c_Message_Omsg_OCrypt(V_K,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(V_NB),c_Message_Omsg_ONonce(V_NB)))),V_evs5,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_S,V_A,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,V_A),c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(V_NA),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,V_K),V_X))))),c_List_Oset(V_evs5,tc_Event_Oevent),tc_Event_Oevent))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_B_H,V_A,c_Message_Omsg_OCrypt(V_K,c_Message_Omsg_ONonce(V_NB))),c_List_Oset(V_evs5,tc_Event_Oevent),tc_Event_Oevent))
| ~ hBOOL(c_in(V_K,c_Message_OsymKeys,tc_nat))
| ~ hBOOL(c_in(V_evs5,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))) ) ).
cnf(cls_Crypt__notin__initState_0,axiom,
~ hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),c_Message_Oparts(c_Event_OinitState(V_B)),tc_Message_Omsg)) ).
cnf(cls_in__lists__conv__set_0,axiom,
( hBOOL(c_in(V_x,V_A,T_a))
| ~ hBOOL(c_in(V_x,c_List_Oset(V_xs,T_a),T_a))
| ~ hBOOL(c_in(V_xs,c_List_Olists(V_A,T_a),tc_List_Olist(T_a))) ) ).
cnf(cls_Crypt__notin__image__Key_0,axiom,
~ hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),c_Set_Oimage(c_Message_Omsg_OKey,V_A,tc_nat,tc_Message_Omsg),tc_Message_Omsg)) ).
cnf(cls_Crypt__synth__eq_1,axiom,
( hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),c_Message_Osynth(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),V_H,tc_Message_Omsg))
| hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),V_H,tc_Message_Omsg)) ) ).
cnf(cls_Crypt__synth__eq_0,axiom,
( hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),V_H,tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),c_Message_Osynth(V_H),tc_Message_Omsg))
| hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),V_H,tc_Message_Omsg)) ) ).
cnf(cls_Crypt__synth_1,axiom,
( hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),V_H,tc_Message_Omsg))
| hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),V_H,tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),c_Message_Osynth(V_H),tc_Message_Omsg)) ) ).
cnf(cls_synth_OCrypt_0,axiom,
( hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),c_Message_Osynth(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,V_K),V_H,tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,c_Message_Osynth(V_H),tc_Message_Omsg)) ) ).
cnf(cls_shrK__in__initState_0,axiom,
hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Public_OshrK,V_A)),c_Event_OinitState(V_A),tc_Message_Omsg)) ).
cnf(cls_shrK__in__used_0,axiom,
hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Public_OshrK,V_A)),c_Event_Oused(V_evs),tc_Message_Omsg)) ).
cnf(cls_neq__shrK_0,axiom,
hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Public_OshrK,V_B)),c_Event_Oused(V_evs),tc_Message_Omsg)) ).
cnf(cls_ns__sharedp_ONS3_0,axiom,
( hBOOL(c_NS__Shared__Mirabelle_Ons__sharedp(c_List_Olist_OCons(c_Event_Oevent_OSays(V_A,V_B,V_X),V_evs3,tc_Event_Oevent)))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_A,c_Message_Oagent_OServer,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_A),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_B),c_Message_Omsg_ONonce(V_NA)))),c_List_Oset(V_evs3,tc_Event_Oevent),tc_Event_Oevent))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_S,V_A,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,V_A),c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(V_NA),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,V_K),V_X))))),c_List_Oset(V_evs3,tc_Event_Oevent),tc_Event_Oevent))
| V_A = c_Message_Oagent_OServer
| ~ hBOOL(c_NS__Shared__Mirabelle_Ons__sharedp(V_evs3)) ) ).
cnf(cls_Spy__spies__bad__privateKey_0,axiom,
( hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Message_OinvKey,hAPP(c_Public_OpublicKey(V_b),V_A))),c_Event_Oknows(c_Message_Oagent_OSpy,V_evs),tc_Message_Omsg))
| ~ hBOOL(c_in(V_A,c_Event_Obad,tc_Message_Oagent)) ) ).
cnf(cls_Says__Server__message__form_0,axiom,
( ~ hBOOL(c_in(V_K,c_Set_Oimage(c_Public_OshrK,c_Orderings_Otop__class_Otop(tc_fun(tc_Message_Oagent,tc_bool)),tc_Message_Oagent,tc_nat),tc_nat))
| ~ hBOOL(c_in(V_evs,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer,V_A,c_Message_Omsg_OCrypt(V_K_H,c_Message_Omsg_OMPair(V_N,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,V_K),V_X))))),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent)) ) ).
cnf(cls_usedI_0,axiom,
( hBOOL(c_in(V_c,c_Event_Oused(V_evs),tc_Message_Omsg))
| ~ hBOOL(c_in(V_c,c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)),tc_Message_Omsg)) ) ).
cnf(cls_analz__shrK__Decrypt_0,axiom,
( hBOOL(c_in(V_X,c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Public_OshrK,V_A)),c_Message_Oanalz(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,V_A),V_X),c_Message_Oanalz(V_H),tc_Message_Omsg)) ) ).
cnf(cls_spies__pubK_0,axiom,
hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Public_OpublicKey(V_b),V_A)),c_Event_Oknows(c_Message_Oagent_OSpy,V_evs),tc_Message_Omsg)) ).
cnf(cls_Says__imp__used_0,axiom,
( hBOOL(c_in(V_X,c_Event_Oused(V_evs),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_A,V_B,V_X),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent)) ) ).
cnf(cls_Notes__imp__knows_0,axiom,
( hBOOL(c_in(V_X,c_Event_Oknows(V_A,V_evs),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Event_Oevent_ONotes(V_A,V_X),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent)) ) ).
cnf(cls_ns__shared_OOops_0,axiom,
( hBOOL(c_in(c_List_Olist_OCons(c_Event_Oevent_ONotes(c_Message_Oagent_OSpy,c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(V_NA),c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(V_NB),hAPP(c_Message_Omsg_OKey,V_K)))),V_evso,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer,V_A,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,V_A),c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(V_NA),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,V_K),V_X))))),c_List_Oset(V_evso,tc_Event_Oevent),tc_Event_Oevent))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_B,V_A,c_Message_Omsg_OCrypt(V_K,c_Message_Omsg_ONonce(V_NB))),c_List_Oset(V_evso,tc_Event_Oevent),tc_Event_Oevent))
| ~ hBOOL(c_in(V_evso,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))) ) ).
cnf(cls_Gets__imp__knows__agents_0,axiom,
( hBOOL(c_in(V_X,c_Event_Oknows(V_A,V_evs),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Event_Oevent_OGets(V_A,V_X),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent))
| V_A = c_Message_Oagent_OSpy ) ).
cnf(cls_ns__shared_ONS3_0,axiom,
( hBOOL(c_in(c_List_Olist_OCons(c_Event_Oevent_OSays(V_A,V_B,V_X),V_evs3,tc_Event_Oevent),c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_A,c_Message_Oagent_OServer,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_A),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_B),c_Message_Omsg_ONonce(V_NA)))),c_List_Oset(V_evs3,tc_Event_Oevent),tc_Event_Oevent))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_S,V_A,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,V_A),c_Message_Omsg_OMPair(c_Message_Omsg_ONonce(V_NA),c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,V_K),V_X))))),c_List_Oset(V_evs3,tc_Event_Oevent),tc_Event_Oevent))
| V_A = c_Message_Oagent_OServer
| ~ hBOOL(c_in(V_evs3,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))) ) ).
cnf(cls_Says__imp__analz__Spy_0,axiom,
( hBOOL(c_in(V_X,c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_A,V_B,V_X),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent)) ) ).
cnf(cls_Crypt__Spy__analz__bad_0,axiom,
( hBOOL(c_in(V_X,c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)),tc_Message_Omsg))
| ~ hBOOL(c_in(V_A,c_Event_Obad,tc_Message_Oagent))
| ~ hBOOL(c_in(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,V_A),V_X),c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)),tc_Message_Omsg)) ) ).
cnf(cls_Notes__imp__knows__Spy_0,axiom,
( hBOOL(c_in(V_X,c_Event_Oknows(c_Message_Oagent_OSpy,V_evs),tc_Message_Omsg))
| ~ hBOOL(c_in(V_A,c_Event_Obad,tc_Message_Oagent))
| ~ hBOOL(c_in(c_Event_Oevent_ONotes(V_A,V_X),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent)) ) ).
cnf(cls_Spy__analz__shrK_0,axiom,
( hBOOL(c_in(V_A,c_Event_Obad,tc_Message_Oagent))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Public_OshrK,V_A)),c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)),tc_Message_Omsg))
| ~ hBOOL(c_in(V_evs,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))) ) ).
cnf(cls_Spy__analz__shrK_1,axiom,
( hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Public_OshrK,V_A)),c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)),tc_Message_Omsg))
| ~ hBOOL(c_in(V_A,c_Event_Obad,tc_Message_Oagent))
| ~ hBOOL(c_in(V_evs,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))) ) ).
cnf(cls_msg_Osimps_I1_J_0,axiom,
( c_Message_Omsg_OAgent(V_agent) != c_Message_Omsg_OAgent(V_agent_H)
| V_agent = V_agent_H ) ).
cnf(cls_Says__imp__knows_0,axiom,
( hBOOL(c_in(V_X,c_Event_Oknows(V_A,V_evs),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_A,V_B,V_X),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent)) ) ).
cnf(cls_parts_OSnd_0,axiom,
( hBOOL(c_in(V_Y,c_Message_Oparts(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OMPair(V_X,V_Y),c_Message_Oparts(V_H),tc_Message_Omsg)) ) ).
cnf(cls_parts_OFst_0,axiom,
( hBOOL(c_in(V_X,c_Message_Oparts(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OMPair(V_X,V_Y),c_Message_Oparts(V_H),tc_Message_Omsg)) ) ).
cnf(cls_msg_Osimps_I12_J_0,axiom,
c_Message_Omsg_OAgent(V_agent) != hAPP(c_Message_Omsg_OKey,V_nat_H) ).
cnf(cls_event_Osimps_I1_J_0,axiom,
( c_Event_Oevent_OSays(V_agent1,V_agent2,V_msg) != c_Event_Oevent_OSays(V_agent1_H,V_agent2_H,V_msg_H)
| V_agent1 = V_agent1_H ) ).
cnf(cls_event_Osimps_I1_J_1,axiom,
( c_Event_Oevent_OSays(V_agent1,V_agent2,V_msg) != c_Event_Oevent_OSays(V_agent1_H,V_agent2_H,V_msg_H)
| V_agent2 = V_agent2_H ) ).
cnf(cls_event_Osimps_I1_J_2,axiom,
( c_Event_Oevent_OSays(V_agent1,V_agent2,V_msg) != c_Event_Oevent_OSays(V_agent1_H,V_agent2_H,V_msg_H)
| V_msg = V_msg_H ) ).
cnf(cls_parts_OInj_0,axiom,
( hBOOL(c_in(V_X,c_Message_Oparts(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,V_H,tc_Message_Omsg)) ) ).
cnf(cls_Says__imp__parts__knows__Spy_0,axiom,
( hBOOL(c_in(V_X,c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_A,V_B,V_X),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent)) ) ).
cnf(cls_Says__imp__spies_0,axiom,
( hBOOL(c_in(V_X,c_Event_Oknows(c_Message_Oagent_OSpy,V_evs),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_A,V_B,V_X),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent)) ) ).
cnf(cls_Spy__in__bad_0,axiom,
hBOOL(c_in(c_Message_Oagent_OSpy,c_Event_Obad,tc_Message_Oagent)) ).
cnf(cls_NS3__msg__in__parts__spies_0,axiom,
( hBOOL(c_in(V_X,c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(V_S,V_A,c_Message_Omsg_OCrypt(V_KA,c_Message_Omsg_OMPair(V_N,c_Message_Omsg_OMPair(V_B,c_Message_Omsg_OMPair(V_K,V_X))))),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent)) ) ).
cnf(cls_msg_Osimps_I43_J_0,axiom,
c_Message_Omsg_OCrypt(V_nat_H,V_msg_H) != hAPP(c_Message_Omsg_OKey,V_nat) ).
cnf(cls_parts__idem_0,axiom,
c_Message_Oparts(c_Message_Oparts(V_H)) = c_Message_Oparts(V_H) ).
cnf(cls_msg_Osimps_I17_J_0,axiom,
c_Message_Omsg_OMPair(V_msg1_H,V_msg2_H) != c_Message_Omsg_OAgent(V_agent) ).
cnf(cls_Says__Server__message__form_2,axiom,
( V_K_H = hAPP(c_Public_OshrK,V_A)
| ~ hBOOL(c_in(V_evs,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer,V_A,c_Message_Omsg_OCrypt(V_K_H,c_Message_Omsg_OMPair(V_N,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,V_K),V_X))))),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent)) ) ).
cnf(cls_parts_OBody_0,axiom,
( hBOOL(c_in(V_X,c_Message_Oparts(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Message_Omsg_OCrypt(V_K,V_X),c_Message_Oparts(V_H),tc_Message_Omsg)) ) ).
cnf(cls_Spy__see__shrK_1,axiom,
( hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Public_OshrK,V_A)),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)),tc_Message_Omsg))
| ~ hBOOL(c_in(V_A,c_Event_Obad,tc_Message_Oagent))
| ~ hBOOL(c_in(V_evs,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))) ) ).
cnf(cls_Spy__see__shrK_0,axiom,
( hBOOL(c_in(V_A,c_Event_Obad,tc_Message_Oagent))
| ~ hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Public_OshrK,V_A)),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)),tc_Message_Omsg))
| ~ hBOOL(c_in(V_evs,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))) ) ).
cnf(cls_agent_Osimps_I4_J_0,axiom,
c_Message_Oagent_OServer != c_Message_Oagent_OSpy ).
cnf(cls_parts__partsD_0,axiom,
( hBOOL(c_in(V_X,c_Message_Oparts(V_H),tc_Message_Omsg))
| ~ hBOOL(c_in(V_X,c_Message_Oparts(c_Message_Oparts(V_H)),tc_Message_Omsg)) ) ).
cnf(cls_msg_Osimps_I4_J_0,axiom,
( hAPP(c_Message_Omsg_OKey,V_nat) != hAPP(c_Message_Omsg_OKey,V_nat_H)
| V_nat = V_nat_H ) ).
cnf(cls_msg_Osimps_I16_J_0,axiom,
c_Message_Omsg_OAgent(V_agent) != c_Message_Omsg_OMPair(V_msg1_H,V_msg2_H) ).
cnf(cls_Spy__spies__bad__shrK_0,axiom,
( hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Public_OshrK,V_A)),c_Event_Oknows(c_Message_Oagent_OSpy,V_evs),tc_Message_Omsg))
| ~ hBOOL(c_in(V_A,c_Event_Obad,tc_Message_Oagent)) ) ).
cnf(cls_Oops__parts__spies_0,axiom,
( hBOOL(c_in(V_K,c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,V_evs)),tc_Message_Omsg))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer,V_A,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,V_A),c_Message_Omsg_OMPair(V_NA,c_Message_Omsg_OMPair(V_B,c_Message_Omsg_OMPair(V_K,V_X))))),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent)) ) ).
cnf(cls_msg_Osimps_I18_J_0,axiom,
c_Message_Omsg_OAgent(V_agent) != c_Message_Omsg_OCrypt(V_nat_H,V_msg_H) ).
cnf(cls_msg_Osimps_I48_J_0,axiom,
c_Message_Omsg_OMPair(V_msg1,V_msg2) != c_Message_Omsg_OCrypt(V_nat_H,V_msg_H) ).
cnf(cls_msg_Osimps_I19_J_0,axiom,
c_Message_Omsg_OCrypt(V_nat_H,V_msg_H) != c_Message_Omsg_OAgent(V_agent) ).
cnf(cls_shrK__in__knows_0,axiom,
hBOOL(c_in(hAPP(c_Message_Omsg_OKey,hAPP(c_Public_OshrK,V_A)),c_Event_Oknows(V_A,V_evs),tc_Message_Omsg)) ).
cnf(cls_msg_Osimps_I13_J_0,axiom,
hAPP(c_Message_Omsg_OKey,V_nat_H) != c_Message_Omsg_OAgent(V_agent) ).
cnf(cls_mem__def_1,axiom,
( hBOOL(c_in(V_x,V_S,T_a))
| ~ hBOOL(hAPP(V_S,V_x)) ) ).
cnf(cls_mem__def_0,axiom,
( hBOOL(hAPP(V_S,V_x))
| ~ hBOOL(c_in(V_x,V_S,T_a)) ) ).
cnf(cls_msg_Osimps_I7_J_0,axiom,
( c_Message_Omsg_OCrypt(V_nat,V_msg) != c_Message_Omsg_OCrypt(V_nat_H,V_msg_H)
| V_nat = V_nat_H ) ).
cnf(cls_msg_Osimps_I7_J_1,axiom,
( c_Message_Omsg_OCrypt(V_nat,V_msg) != c_Message_Omsg_OCrypt(V_nat_H,V_msg_H)
| V_msg = V_msg_H ) ).
cnf(cls_msg_Osimps_I6_J_0,axiom,
( c_Message_Omsg_OMPair(V_msg1,V_msg2) != c_Message_Omsg_OMPair(V_msg1_H,V_msg2_H)
| V_msg1 = V_msg1_H ) ).
cnf(cls_msg_Osimps_I6_J_1,axiom,
( c_Message_Omsg_OMPair(V_msg1,V_msg2) != c_Message_Omsg_OMPair(V_msg1_H,V_msg2_H)
| V_msg2 = V_msg2_H ) ).
cnf(cls_agent_Osimps_I5_J_0,axiom,
c_Message_Oagent_OSpy != c_Message_Oagent_OServer ).
cnf(cls_msg_Osimps_I49_J_0,axiom,
c_Message_Omsg_OCrypt(V_nat_H,V_msg_H) != c_Message_Omsg_OMPair(V_msg1,V_msg2) ).
cnf(cls_Says__Server__message__form_1,axiom,
( V_X = c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,V_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,V_K),c_Message_Omsg_OAgent(V_A)))
| ~ hBOOL(c_in(V_evs,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent)))
| ~ hBOOL(c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer,V_A,c_Message_Omsg_OCrypt(V_K_H,c_Message_Omsg_OMPair(V_N,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(V_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,V_K),V_X))))),c_List_Oset(V_evs,tc_Event_Oevent),tc_Event_Oevent)) ) ).
cnf(cls_msg_Osimps_I40_J_0,axiom,
hAPP(c_Message_Omsg_OKey,V_nat) != c_Message_Omsg_OMPair(V_msg1_H,V_msg2_H) ).
cnf(cls_Server__not__bad_0,axiom,
~ hBOOL(c_in(c_Message_Oagent_OServer,c_Event_Obad,tc_Message_Oagent)) ).
cnf(cls_msg_Osimps_I41_J_0,axiom,
c_Message_Omsg_OMPair(V_msg1_H,V_msg2_H) != hAPP(c_Message_Omsg_OKey,V_nat) ).
cnf(cls_msg_Osimps_I42_J_0,axiom,
hAPP(c_Message_Omsg_OKey,V_nat) != c_Message_Omsg_OCrypt(V_nat_H,V_msg_H) ).
cnf(cls_shrK__injective_0,axiom,
( hAPP(c_Public_OshrK,V_x) != hAPP(c_Public_OshrK,V_y)
| V_x = V_y ) ).
cnf(cls_conjecture_0,negated_conjecture,
~ hBOOL(c_in(v_A,c_Event_Obad,tc_Message_Oagent)) ).
cnf(cls_conjecture_1,negated_conjecture,
hBOOL(c_in(v_evs,c_NS__Shared__Mirabelle_Ons__shared,tc_List_Olist(tc_Event_Oevent))) ).
cnf(cls_conjecture_2,negated_conjecture,
hBOOL(c_in(c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_A),c_Message_Omsg_OMPair(v_NA,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),v_X)))),c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy,v_evs)),tc_Message_Omsg)) ).
cnf(cls_conjecture_3,negated_conjecture,
~ hBOOL(c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer,v_A,c_Message_Omsg_OCrypt(hAPP(c_Public_OshrK,v_A),c_Message_Omsg_OMPair(v_NA,c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B),c_Message_Omsg_OMPair(hAPP(c_Message_Omsg_OKey,v_K),v_X))))),c_List_Oset(v_evs,tc_Event_Oevent),tc_Event_Oevent)) ).
cnf(clsarity_fun__Lattices_Oupper__semilattice,axiom,
( class_Lattices_Oupper__semilattice(tc_fun(T_2,T_1))
| ~ class_Lattices_Olattice(T_1) ) ).
cnf(clsarity_fun__Lattices_Obounded__lattice,axiom,
( class_Lattices_Obounded__lattice(tc_fun(T_2,T_1))
| ~ class_Lattices_Obounded__lattice(T_1) ) ).
cnf(clsarity_fun__Orderings_Opreorder,axiom,
( class_Orderings_Opreorder(tc_fun(T_2,T_1))
| ~ class_Orderings_Opreorder(T_1) ) ).
cnf(clsarity_fun__Lattices_Olattice,axiom,
( class_Lattices_Olattice(tc_fun(T_2,T_1))
| ~ class_Lattices_Olattice(T_1) ) ).
cnf(clsarity_fun__Orderings_Oorder,axiom,
( class_Orderings_Oorder(tc_fun(T_2,T_1))
| ~ class_Orderings_Oorder(T_1) ) ).
cnf(clsarity_fun__Orderings_Otop,axiom,
( class_Orderings_Otop(tc_fun(T_2,T_1))
| ~ class_Orderings_Otop(T_1) ) ).
cnf(clsarity_fun__Orderings_Obot,axiom,
( class_Orderings_Obot(tc_fun(T_2,T_1))
| ~ class_Orderings_Obot(T_1) ) ).
cnf(clsarity_fun__HOL_Oord,axiom,
( class_HOL_Oord(tc_fun(T_2,T_1))
| ~ class_HOL_Oord(T_1) ) ).
cnf(clsarity_nat__Lattices_Oupper__semilattice,axiom,
class_Lattices_Oupper__semilattice(tc_nat) ).
cnf(clsarity_nat__Orderings_Opreorder,axiom,
class_Orderings_Opreorder(tc_nat) ).
cnf(clsarity_nat__Orderings_Olinorder,axiom,
class_Orderings_Olinorder(tc_nat) ).
cnf(clsarity_nat__Lattices_Olattice,axiom,
class_Lattices_Olattice(tc_nat) ).
cnf(clsarity_nat__Orderings_Oorder,axiom,
class_Orderings_Oorder(tc_nat) ).
cnf(clsarity_nat__Orderings_Obot,axiom,
class_Orderings_Obot(tc_nat) ).
cnf(clsarity_nat__HOL_Oord,axiom,
class_HOL_Oord(tc_nat) ).
cnf(clsarity_bool__Lattices_Oupper__semilattice,axiom,
class_Lattices_Oupper__semilattice(tc_bool) ).
cnf(clsarity_bool__Lattices_Obounded__lattice,axiom,
class_Lattices_Obounded__lattice(tc_bool) ).
cnf(clsarity_bool__Orderings_Opreorder,axiom,
class_Orderings_Opreorder(tc_bool) ).
cnf(clsarity_bool__Lattices_Olattice,axiom,
class_Lattices_Olattice(tc_bool) ).
cnf(clsarity_bool__Orderings_Oorder,axiom,
class_Orderings_Oorder(tc_bool) ).
cnf(clsarity_bool__Orderings_Otop,axiom,
class_Orderings_Otop(tc_bool) ).
cnf(clsarity_bool__Orderings_Obot,axiom,
class_Orderings_Obot(tc_bool) ).
cnf(clsarity_bool__HOL_Oord,axiom,
class_HOL_Oord(tc_bool) ).
cnf(cls_ATP__Linkup_Oequal__imp__fequal_0,axiom,
c_fequal(V_x,V_x,T_a) ).
cnf(cls_ATP__Linkup_Ofequal__imp__equal_0,axiom,
( V_X = V_Y
| ~ c_fequal(V_X,V_Y,T_a) ) ).
%------------------------------------------------------------------------------