%------------------------------------------------------------------------------
% File     : Z3---4.8.9.0
% Problem  : SWV301-2 : TPTP v8.1.0. Released v3.2.0.
% Transfm  : none
% Format   : tptp
% Command  : z3_tptp -proof -model -t:%d -file:%s

% Computer : n027.cluster.edu
% Model    : x86_64 x86_64
% CPU      : Intel(R) Xeon(R) CPU E5-2620 v4 2.10GHz
% Memory   : 8042.1875MB
% OS       : Linux 3.10.0-693.el7.x86_64
% CPULimit : 300s
% WCLimit  : 300s
% DateTime : Thu Sep 29 15:10:59 EDT 2022

% Result   : Unsatisfiable 0.19s 0.39s
% Output   : Proof 0.19s
% Verified : 
% SZS Type : -

% Comments : 
%------------------------------------------------------------------------------
%----WARNING: Could not form TPTP format derivation
%------------------------------------------------------------------------------
%----ORIGINAL SYSTEM OUTPUT
% 0.07/0.12  % Problem  : SWV301-2 : TPTP v8.1.0. Released v3.2.0.
% 0.07/0.13  % Command  : z3_tptp -proof -model -t:%d -file:%s
% 0.12/0.33  % Computer : n027.cluster.edu
% 0.12/0.33  % Model    : x86_64 x86_64
% 0.12/0.33  % CPU      : Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz
% 0.12/0.33  % Memory   : 8042.1875MB
% 0.12/0.33  % OS       : Linux 3.10.0-693.el7.x86_64
% 0.12/0.33  % CPULimit : 300
% 0.12/0.33  % WCLimit  : 300
% 0.12/0.33  % DateTime : Sun Sep  4 02:32:36 EDT 2022
% 0.12/0.34  % CPUTime  : 
% 0.12/0.34  Z3tptp [4.8.9.0] (c) 2006-20**. Microsoft Corp.
% 0.12/0.34  Usage: tptp [options] [-file:]file
% 0.12/0.34    -h, -?       prints this message.
% 0.12/0.34    -smt2        print SMT-LIB2 benchmark.
% 0.12/0.34    -m, -model   generate model.
% 0.12/0.34    -p, -proof   generate proof.
% 0.12/0.34    -c, -core    generate unsat core of named formulas.
% 0.12/0.34    -st, -statistics display statistics.
% 0.12/0.34    -t:timeout   set timeout (in second).
% 0.12/0.34    -smt2status  display status in smt2 format instead of SZS.
% 0.12/0.34    -check_status check the status produced by Z3 against annotation in benchmark.
% 0.12/0.34    -<param>:<value> configuration parameter and value.
% 0.12/0.34    -o:<output-file> file to place output in.
% 0.19/0.39  % SZS status Unsatisfiable
% 0.19/0.39  % SZS output start Proof
% 0.19/0.39  tff(c_in_type, type, (
% 0.19/0.39     c_in: ( $i * $i * $i ) > $o)).
% 0.19/0.39  tff(tc_Message_Oagent_type, type, (
% 0.19/0.39     tc_Message_Oagent: $i)).
% 0.19/0.39  tff(c_Event_Obad_type, type, (
% 0.19/0.39     c_Event_Obad: $i)).
% 0.19/0.39  tff(v_B_type, type, (
% 0.19/0.39     v_B: $i)).
% 0.19/0.39  tff(c_Message_Oagent_OSpy_type, type, (
% 0.19/0.39     c_Message_Oagent_OSpy: $i)).
% 0.19/0.39  tff(tc_Event_Oevent_type, type, (
% 0.19/0.39     tc_Event_Oevent: $i)).
% 0.19/0.39  tff(c_List_Oset_type, type, (
% 0.19/0.39     c_List_Oset: ( $i * $i ) > $i)).
% 0.19/0.39  tff(v_evsf_type, type, (
% 0.19/0.39     v_evsf: $i)).
% 0.19/0.39  tff(c_Event_Oevent_OSays_type, type, (
% 0.19/0.39     c_Event_Oevent_OSays: ( $i * $i * $i ) > $i)).
% 0.19/0.39  tff(c_Message_Omsg_OMPair_type, type, (
% 0.19/0.39     c_Message_Omsg_OMPair: ( $i * $i ) > $i)).
% 0.19/0.39  tff(c_Message_Omsg_OCrypt_type, type, (
% 0.19/0.39     c_Message_Omsg_OCrypt: ( $i * $i ) > $i)).
% 0.19/0.39  tff(c_Message_Omsg_OAgent_type, type, (
% 0.19/0.39     c_Message_Omsg_OAgent: $i > $i)).
% 0.19/0.39  tff(v_A_type, type, (
% 0.19/0.39     v_A: $i)).
% 0.19/0.39  tff(v_NB_type, type, (
% 0.19/0.39     v_NB: $i)).
% 0.19/0.39  tff(v_NA_type, type, (
% 0.19/0.39     v_NA: $i)).
% 0.19/0.39  tff(c_Public_OshrK_type, type, (
% 0.19/0.39     c_Public_OshrK: $i > $i)).
% 0.19/0.39  tff(v_x_type, type, (
% 0.19/0.39     v_x: $i)).
% 0.19/0.39  tff(c_Message_Oagent_OServer_type, type, (
% 0.19/0.39     c_Message_Oagent_OServer: $i)).
% 0.19/0.39  tff(tc_Message_Omsg_type, type, (
% 0.19/0.39     tc_Message_Omsg: $i)).
% 0.19/0.39  tff(c_Message_Oparts_type, type, (
% 0.19/0.39     c_Message_Oparts: $i > $i)).
% 0.19/0.39  tff(c_Event_Oknows_type, type, (
% 0.19/0.39     c_Event_Oknows: ( $i * $i ) > $i)).
% 0.19/0.39  tff(c_Message_Omsg_OKey_type, type, (
% 0.19/0.39     c_Message_Omsg_OKey: $i > $i)).
% 0.19/0.39  tff(v_K_type, type, (
% 0.19/0.39     v_K: $i)).
% 0.19/0.39  tff(c_Message_Oanalz_type, type, (
% 0.19/0.39     c_Message_Oanalz: $i > $i)).
% 0.19/0.39  tff(tc_List_Olist_type, type, (
% 0.19/0.39     tc_List_Olist: $i > $i)).
% 0.19/0.39  tff(c_OtwayRees_Ootway_type, type, (
% 0.19/0.39     c_OtwayRees_Ootway: $i)).
% 0.19/0.39  tff(c_Message_Osynth_type, type, (
% 0.19/0.39     c_Message_Osynth: $i > $i)).
% 0.19/0.39  tff(c_union_type, type, (
% 0.19/0.39     c_union: ( $i * $i * $i ) > $i)).
% 0.19/0.39  tff(c_insert_type, type, (
% 0.19/0.39     c_insert: ( $i * $i * $i ) > $i)).
% 0.19/0.39  tff(v_X_type, type, (
% 0.19/0.39     v_X: $i)).
% 0.19/0.39  tff(1,assumption,(~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)), introduced(assumption)).
% 0.19/0.39  tff(2,plain,
% 0.19/0.39      (^[V_c: $i, V_H: $i] : refl(((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg)) <=> ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg)))),
% 0.19/0.39      inference(bind,[status(th)],[])).
% 0.19/0.39  tff(3,plain,
% 0.19/0.39      (![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg)) <=> ![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))),
% 0.19/0.39      inference(quant_intro,[status(thm)],[2])).
% 0.19/0.39  tff(4,plain,
% 0.19/0.39      (![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg)) <=> ![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))),
% 0.19/0.39      inference(rewrite,[status(thm)],[])).
% 0.19/0.39  tff(5,axiom,(![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_Message_Oanalz__into__parts__dest_0')).
% 0.19/0.39  tff(6,plain,
% 0.19/0.39      (![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))),
% 0.19/0.39      inference(modus_ponens,[status(thm)],[5, 4])).
% 0.19/0.39  tff(7,plain,(
% 0.19/0.39      ![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))),
% 0.19/0.39      inference(skolemize,[status(sab)],[6])).
% 0.19/0.39  tff(8,plain,
% 0.19/0.39      (![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))),
% 0.19/0.39      inference(modus_ponens,[status(thm)],[7, 3])).
% 0.19/0.39  tff(9,plain,
% 0.19/0.39      (((~![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))) | ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))) <=> ((~![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.19/0.39      inference(rewrite,[status(thm)],[])).
% 0.19/0.39  tff(10,plain,
% 0.19/0.39      ((~![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))) | ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.19/0.39      inference(quant_inst,[status(thm)],[])).
% 0.19/0.39  tff(11,plain,
% 0.19/0.39      ((~![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)),
% 0.19/0.39      inference(modus_ponens,[status(thm)],[10, 9])).
% 0.19/0.39  tff(12,plain,
% 0.19/0.39      (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)),
% 0.19/0.39      inference(unit_resolution,[status(thm)],[11, 8, 1])).
% 0.19/0.39  tff(13,assumption,(c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)), introduced(assumption)).
% 0.19/0.39  tff(14,plain,
% 0.19/0.39      (^[V_A: $i, V_evs: $i] : refl((c_in(V_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg)) | (~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent)))) <=> (c_in(V_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg)) | (~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent)))))),
% 0.19/0.39      inference(bind,[status(th)],[])).
% 0.19/0.39  tff(15,plain,
% 0.19/0.39      (![V_A: $i, V_evs: $i] : (c_in(V_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg)) | (~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent)))) <=> ![V_A: $i, V_evs: $i] : (c_in(V_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg)) | (~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))))),
% 0.19/0.39      inference(quant_intro,[status(thm)],[14])).
% 0.19/0.39  tff(16,plain,
% 0.19/0.39      (![V_A: $i, V_evs: $i] : (c_in(V_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg)) | (~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent)))) <=> ![V_A: $i, V_evs: $i] : (c_in(V_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg)) | (~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))))),
% 0.19/0.39      inference(rewrite,[status(thm)],[])).
% 0.19/0.39  tff(17,plain,
% 0.19/0.39      (^[V_A: $i, V_evs: $i] : rewrite((((~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg))) | c_in(V_A, c_Event_Obad, tc_Message_Oagent)) <=> (c_in(V_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg)) | (~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent)))))),
% 0.19/0.39      inference(bind,[status(th)],[])).
% 0.19/0.39  tff(18,plain,
% 0.19/0.39      (![V_A: $i, V_evs: $i] : (((~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg))) | c_in(V_A, c_Event_Obad, tc_Message_Oagent)) <=> ![V_A: $i, V_evs: $i] : (c_in(V_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg)) | (~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))))),
% 0.19/0.39      inference(quant_intro,[status(thm)],[17])).
% 0.19/0.39  tff(19,axiom,(![V_A: $i, V_evs: $i] : (((~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg))) | c_in(V_A, c_Event_Obad, tc_Message_Oagent))), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_OtwayRees_OSpy__see__shrK__D__dest_0')).
% 0.19/0.39  tff(20,plain,
% 0.19/0.39      (![V_A: $i, V_evs: $i] : (c_in(V_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg)) | (~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))))),
% 0.19/0.39      inference(modus_ponens,[status(thm)],[19, 18])).
% 0.19/0.39  tff(21,plain,
% 0.19/0.39      (![V_A: $i, V_evs: $i] : (c_in(V_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg)) | (~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))))),
% 0.19/0.39      inference(modus_ponens,[status(thm)],[20, 16])).
% 0.19/0.39  tff(22,plain,(
% 0.19/0.39      ![V_A: $i, V_evs: $i] : (c_in(V_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg)) | (~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))))),
% 0.19/0.39      inference(skolemize,[status(sab)],[21])).
% 0.19/0.39  tff(23,plain,
% 0.19/0.39      (![V_A: $i, V_evs: $i] : (c_in(V_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg)) | (~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))))),
% 0.19/0.39      inference(modus_ponens,[status(thm)],[22, 15])).
% 0.19/0.39  tff(24,plain,
% 0.19/0.39      (c_in(v_evsf, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent)) <=> c_in(v_evsf, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))),
% 0.19/0.39      inference(rewrite,[status(thm)],[])).
% 0.19/0.39  tff(25,axiom,(c_in(v_evsf, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_conjecture_1')).
% 0.19/0.39  tff(26,plain,
% 0.19/0.39      (c_in(v_evsf, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))),
% 0.19/0.39      inference(modus_ponens,[status(thm)],[25, 24])).
% 0.19/0.39  tff(27,plain,
% 0.19/0.39      ((~c_in(v_B, c_Event_Obad, tc_Message_Oagent)) <=> (~c_in(v_B, c_Event_Obad, tc_Message_Oagent))),
% 0.19/0.39      inference(rewrite,[status(thm)],[])).
% 0.19/0.39  tff(28,axiom,(~c_in(v_B, c_Event_Obad, tc_Message_Oagent)), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_conjecture_0')).
% 0.19/0.39  tff(29,plain,
% 0.19/0.39      (~c_in(v_B, c_Event_Obad, tc_Message_Oagent)),
% 0.19/0.39      inference(modus_ponens,[status(thm)],[28, 27])).
% 0.19/0.39  tff(30,plain,
% 0.19/0.39      (((~![V_A: $i, V_evs: $i] : (c_in(V_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg)) | (~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))))) | (c_in(v_B, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(v_evsf, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))))) <=> ((~![V_A: $i, V_evs: $i] : (c_in(V_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg)) | (~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))))) | c_in(v_B, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(v_evsf, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))))),
% 0.19/0.39      inference(rewrite,[status(thm)],[])).
% 0.19/0.39  tff(31,plain,
% 0.19/0.39      ((~![V_A: $i, V_evs: $i] : (c_in(V_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg)) | (~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))))) | (c_in(v_B, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(v_evsf, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))))),
% 0.19/0.39      inference(quant_inst,[status(thm)],[])).
% 0.19/0.39  tff(32,plain,
% 0.19/0.39      ((~![V_A: $i, V_evs: $i] : (c_in(V_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, V_evs)), tc_Message_Omsg)) | (~c_in(V_evs, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent))))) | c_in(v_B, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(v_evsf, c_OtwayRees_Ootway, tc_List_Olist(tc_Event_Oevent)))),
% 0.19/0.39      inference(modus_ponens,[status(thm)],[31, 30])).
% 0.19/0.39  tff(33,plain,
% 0.19/0.39      ($false),
% 0.19/0.39      inference(unit_resolution,[status(thm)],[32, 29, 26, 23, 13])).
% 0.19/0.39  tff(34,plain,(~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)), inference(lemma,lemma(discharge,[]))).
% 0.19/0.39  tff(35,plain,
% 0.19/0.39      (((~![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))) | ((~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))) <=> ((~![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.19/0.39      inference(rewrite,[status(thm)],[])).
% 0.19/0.39  tff(36,plain,
% 0.19/0.39      ((~![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))) | ((~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.19/0.39      inference(quant_inst,[status(thm)],[])).
% 0.19/0.39  tff(37,plain,
% 0.19/0.39      ((~![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)),
% 0.19/0.40      inference(modus_ponens,[status(thm)],[36, 35])).
% 0.19/0.40  tff(38,plain,
% 0.19/0.40      (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)),
% 0.19/0.40      inference(unit_resolution,[status(thm)],[37, 8, 34])).
% 0.19/0.40  tff(39,plain,
% 0.19/0.40      (^[V_Z: $i, V_H: $i, V_X: $i] : refl((c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg))) <=> (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg))))),
% 0.19/0.40      inference(bind,[status(th)],[])).
% 0.19/0.40  tff(40,plain,
% 0.19/0.40      (![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg))) <=> ![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.19/0.40      inference(quant_intro,[status(thm)],[39])).
% 0.19/0.40  tff(41,plain,
% 0.19/0.40      (![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg))) <=> ![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.19/0.40      inference(rewrite,[status(thm)],[])).
% 0.19/0.40  tff(42,plain,
% 0.19/0.40      (^[V_Z: $i, V_H: $i, V_X: $i] : trans(monotonicity(rewrite(((~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg))) <=> ((~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))), ((((~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg))) | c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg)) <=> (((~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg))) | c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg)))), rewrite((((~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg))) | c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg)) <=> (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))), ((((~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg))) | c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg)) <=> (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))))),
% 0.19/0.40      inference(bind,[status(th)],[])).
% 0.19/0.40  tff(43,plain,
% 0.19/0.40      (![V_Z: $i, V_H: $i, V_X: $i] : (((~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg))) | c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg)) <=> ![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.19/0.40      inference(quant_intro,[status(thm)],[42])).
% 0.19/0.40  tff(44,axiom,(![V_Z: $i, V_H: $i, V_X: $i] : (((~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg))) | c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg))), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_Message_OFake__parts__insert__in__Un__dest_0')).
% 0.19/0.40  tff(45,plain,
% 0.19/0.40      (![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.19/0.40      inference(modus_ponens,[status(thm)],[44, 43])).
% 0.19/0.40  tff(46,plain,
% 0.19/0.40      (![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.19/0.40      inference(modus_ponens,[status(thm)],[45, 41])).
% 0.19/0.40  tff(47,plain,(
% 0.19/0.40      ![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.19/0.40      inference(skolemize,[status(sab)],[46])).
% 0.19/0.40  tff(48,plain,
% 0.19/0.40      (![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.19/0.40      inference(modus_ponens,[status(thm)],[47, 40])).
% 0.19/0.40  tff(49,plain,
% 0.19/0.40      (c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg) <=> c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)),
% 0.19/0.40      inference(rewrite,[status(thm)],[])).
% 0.19/0.40  tff(50,axiom,(c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_conjecture_3')).
% 0.19/0.40  tff(51,plain,
% 0.19/0.40      (c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)),
% 0.19/0.40      inference(modus_ponens,[status(thm)],[50, 49])).
% 0.19/0.40  tff(52,plain,
% 0.19/0.40      (c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) <=> c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)),
% 0.19/0.40      inference(rewrite,[status(thm)],[])).
% 0.19/0.40  tff(53,axiom,(c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_conjecture_2')).
% 0.19/0.40  tff(54,plain,
% 0.19/0.40      (c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)),
% 0.19/0.40      inference(modus_ponens,[status(thm)],[53, 52])).
% 0.19/0.40  tff(55,plain,
% 0.19/0.40      (((~![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))) | (c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)))) <=> ((~![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.19/0.40      inference(rewrite,[status(thm)],[])).
% 0.19/0.40  tff(56,plain,
% 0.19/0.40      ((~![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))) | (c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.19/0.40      inference(quant_inst,[status(thm)],[])).
% 0.19/0.40  tff(57,plain,
% 0.19/0.40      ((~![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg))),
% 0.19/0.40      inference(modus_ponens,[status(thm)],[56, 55])).
% 0.19/0.40  tff(58,plain,
% 0.19/0.40      (c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg)),
% 0.19/0.40      inference(unit_resolution,[status(thm)],[57, 54, 51, 48])).
% 0.19/0.40  tff(59,plain,
% 0.19/0.40      (^[V_c: $i, T_a: $i, V_B: $i, V_A: $i] : refl((c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a))) <=> (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a))))),
% 0.19/0.40      inference(bind,[status(th)],[])).
% 0.19/0.40  tff(60,plain,
% 0.19/0.40      (![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a))) <=> ![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))),
% 0.19/0.40      inference(quant_intro,[status(thm)],[59])).
% 0.19/0.40  tff(61,plain,
% 0.19/0.40      (![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a))) <=> ![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))),
% 0.19/0.40      inference(rewrite,[status(thm)],[])).
% 0.19/0.40  tff(62,plain,
% 0.19/0.40      (^[V_c: $i, T_a: $i, V_B: $i, V_A: $i] : rewrite((((~c_in(V_c, c_union(V_A, V_B, T_a), T_a)) | c_in(V_c, V_B, T_a)) | c_in(V_c, V_A, T_a)) <=> (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a))))),
% 0.19/0.40      inference(bind,[status(th)],[])).
% 0.19/0.40  tff(63,plain,
% 0.19/0.40      (![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (((~c_in(V_c, c_union(V_A, V_B, T_a), T_a)) | c_in(V_c, V_B, T_a)) | c_in(V_c, V_A, T_a)) <=> ![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))),
% 0.19/0.40      inference(quant_intro,[status(thm)],[62])).
% 0.19/0.40  tff(64,axiom,(![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (((~c_in(V_c, c_union(V_A, V_B, T_a), T_a)) | c_in(V_c, V_B, T_a)) | c_in(V_c, V_A, T_a))), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_Set_OUnE_0')).
% 0.19/0.40  tff(65,plain,
% 0.19/0.40      (![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))),
% 0.19/0.40      inference(modus_ponens,[status(thm)],[64, 63])).
% 0.19/0.40  tff(66,plain,
% 0.19/0.40      (![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))),
% 0.19/0.40      inference(modus_ponens,[status(thm)],[65, 61])).
% 0.19/0.40  tff(67,plain,(
% 0.19/0.40      ![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))),
% 0.19/0.40      inference(skolemize,[status(sab)],[66])).
% 0.19/0.40  tff(68,plain,
% 0.19/0.40      (![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))),
% 0.19/0.40      inference(modus_ponens,[status(thm)],[67, 60])).
% 0.19/0.40  tff(69,plain,
% 0.19/0.40      (((~![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))) | (c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg)))) <=> ((~![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg)))),
% 0.19/0.41      inference(rewrite,[status(thm)],[])).
% 0.19/0.41  tff(70,plain,
% 0.19/0.41      ((c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg))) <=> (c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg)))),
% 0.19/0.41      inference(rewrite,[status(thm)],[])).
% 0.19/0.41  tff(71,plain,
% 0.19/0.41      (((~![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))) | (c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg)))) <=> ((~![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))) | (c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg))))),
% 0.19/0.41      inference(monotonicity,[status(thm)],[70])).
% 0.19/0.41  tff(72,plain,
% 0.19/0.41      (((~![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))) | (c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg)))) <=> ((~![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg)))),
% 0.19/0.41      inference(transitivity,[status(thm)],[71, 69])).
% 0.19/0.41  tff(73,plain,
% 0.19/0.41      ((~![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))) | (c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg)))),
% 0.19/0.41      inference(quant_inst,[status(thm)],[])).
% 0.19/0.41  tff(74,plain,
% 0.19/0.41      ((~![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg))),
% 0.19/0.41      inference(modus_ponens,[status(thm)],[73, 72])).
% 0.19/0.41  tff(75,plain,
% 0.19/0.41      (c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)),
% 0.19/0.41      inference(unit_resolution,[status(thm)],[74, 68, 58])).
% 0.19/0.41  tff(76,plain,
% 0.19/0.41      (c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)),
% 0.19/0.41      inference(unit_resolution,[status(thm)],[75, 1])).
% 0.19/0.41  tff(77,plain,
% 0.19/0.41      (^[V_H: $i, V_X: $i, V_K: $i] : refl((c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg))) <=> (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg))))),
% 0.19/0.41      inference(bind,[status(th)],[])).
% 0.19/0.41  tff(78,plain,
% 0.19/0.41      (![V_H: $i, V_X: $i, V_K: $i] : (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg))) <=> ![V_H: $i, V_X: $i, V_K: $i] : (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)))),
% 0.19/0.41      inference(quant_intro,[status(thm)],[77])).
% 0.19/0.41  tff(79,plain,
% 0.19/0.41      (![V_H: $i, V_X: $i, V_K: $i] : (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg))) <=> ![V_H: $i, V_X: $i, V_K: $i] : (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)))),
% 0.19/0.41      inference(rewrite,[status(thm)],[])).
% 0.19/0.41  tff(80,plain,
% 0.19/0.41      (^[V_H: $i, V_X: $i, V_K: $i] : rewrite((((~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg)) <=> (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg))))),
% 0.19/0.41      inference(bind,[status(th)],[])).
% 0.19/0.41  tff(81,plain,
% 0.19/0.41      (![V_H: $i, V_X: $i, V_K: $i] : (((~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg)) <=> ![V_H: $i, V_X: $i, V_K: $i] : (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)))),
% 0.19/0.41      inference(quant_intro,[status(thm)],[80])).
% 0.19/0.41  tff(82,axiom,(![V_H: $i, V_X: $i, V_K: $i] : (((~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg))), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_Message_OCrypt__synth_0')).
% 0.19/0.41  tff(83,plain,
% 0.19/0.41      (![V_H: $i, V_X: $i, V_K: $i] : (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)))),
% 0.19/0.41      inference(modus_ponens,[status(thm)],[82, 81])).
% 0.19/0.41  tff(84,plain,
% 0.19/0.41      (![V_H: $i, V_X: $i, V_K: $i] : (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)))),
% 0.19/0.41      inference(modus_ponens,[status(thm)],[83, 79])).
% 0.19/0.41  tff(85,plain,(
% 0.19/0.41      ![V_H: $i, V_X: $i, V_K: $i] : (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)))),
% 0.19/0.41      inference(skolemize,[status(sab)],[84])).
% 0.19/0.41  tff(86,plain,
% 0.19/0.41      (![V_H: $i, V_X: $i, V_K: $i] : (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)))),
% 0.19/0.41      inference(modus_ponens,[status(thm)],[85, 78])).
% 0.19/0.41  tff(87,plain,
% 0.19/0.41      (((~![V_H: $i, V_X: $i, V_K: $i] : (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)))) | (c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)))) <=> ((~![V_H: $i, V_X: $i, V_K: $i] : (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)))) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)))),
% 0.19/0.41      inference(rewrite,[status(thm)],[])).
% 0.19/0.41  tff(88,plain,
% 0.19/0.41      ((c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg))) <=> (c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)))),
% 0.19/0.41      inference(rewrite,[status(thm)],[])).
% 0.19/0.41  tff(89,plain,
% 0.19/0.41      (((~![V_H: $i, V_X: $i, V_K: $i] : (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)))) | (c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)))) <=> ((~![V_H: $i, V_X: $i, V_K: $i] : (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)))) | (c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg))))),
% 0.19/0.42      inference(monotonicity,[status(thm)],[88])).
% 0.19/0.42  tff(90,plain,
% 0.19/0.42      (((~![V_H: $i, V_X: $i, V_K: $i] : (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)))) | (c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)))) <=> ((~![V_H: $i, V_X: $i, V_K: $i] : (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)))) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)))),
% 0.19/0.42      inference(transitivity,[status(thm)],[89, 87])).
% 0.19/0.42  tff(91,plain,
% 0.19/0.42      ((~![V_H: $i, V_X: $i, V_K: $i] : (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)))) | (c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)))),
% 0.19/0.42      inference(quant_inst,[status(thm)],[])).
% 0.19/0.42  tff(92,plain,
% 0.19/0.42      ((~![V_H: $i, V_X: $i, V_K: $i] : (c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg) | c_in(c_Message_Omsg_OCrypt(V_K, V_X), V_H, tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(V_K, V_X), c_Message_Osynth(V_H), tc_Message_Omsg)))) | c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_B)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg))),
% 0.19/0.42      inference(modus_ponens,[status(thm)],[91, 90])).
% 0.19/0.42  tff(93,plain,
% 0.19/0.42      ($false),
% 0.19/0.42      inference(unit_resolution,[status(thm)],[92, 86, 76, 38, 12])).
% 0.19/0.42  tff(94,plain,(c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)), inference(lemma,lemma(discharge,[]))).
% 0.19/0.42  tff(95,plain,
% 0.19/0.42      (^[V_U: $i] : refl(((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent))) <=> ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent))))),
% 0.19/0.42      inference(bind,[status(th)],[])).
% 0.19/0.42  tff(96,plain,
% 0.19/0.42      (![V_U: $i] : ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent))) <=> ![V_U: $i] : ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))),
% 0.19/0.42      inference(quant_intro,[status(thm)],[95])).
% 0.19/0.42  tff(97,plain,
% 0.19/0.42      (![V_U: $i] : ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent))) <=> ![V_U: $i] : ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))),
% 0.19/0.42      inference(rewrite,[status(thm)],[])).
% 0.19/0.42  tff(98,plain,
% 0.19/0.42      (^[V_U: $i] : trans(monotonicity(iff_false(asserted(~c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer, v_B, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OCrypt(c_Public_OshrK(v_A), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OKey(v_K))), c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K)))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)), (c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer, v_B, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OCrypt(c_Public_OshrK(v_A), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OKey(v_K))), c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K)))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) <=> $false)), ((c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer, v_B, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OCrypt(c_Public_OshrK(v_A), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OKey(v_K))), c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K)))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent))) <=> ($false | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent))))), rewrite(($false | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent))) <=> ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))), ((c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer, v_B, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OCrypt(c_Public_OshrK(v_A), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OKey(v_K))), c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K)))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent))) <=> ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))))),
% 0.19/0.42      inference(bind,[status(th)],[])).
% 0.19/0.42  tff(99,plain,
% 0.19/0.42      (![V_U: $i] : (c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer, v_B, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OCrypt(c_Public_OshrK(v_A), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OKey(v_K))), c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K)))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent))) <=> ![V_U: $i] : ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))),
% 0.19/0.42      inference(quant_intro,[status(thm)],[98])).
% 0.19/0.42  tff(100,plain,
% 0.19/0.42      (^[V_U: $i] : trans(monotonicity(rewrite((c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer, v_B, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OCrypt(c_Public_OshrK(v_A), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OKey(v_K))), c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K)))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent))) <=> (c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer, v_B, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OCrypt(c_Public_OshrK(v_A), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OKey(v_K))), c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K)))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))), (((c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer, v_B, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OCrypt(c_Public_OshrK(v_A), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OKey(v_K))), c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K)))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent))) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))) <=> ((c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer, v_B, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OCrypt(c_Public_OshrK(v_A), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OKey(v_K))), c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K)))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent))) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))))), rewrite(((c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer, v_B, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OCrypt(c_Public_OshrK(v_A), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OKey(v_K))), c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K)))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent))) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))) <=> (c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer, v_B, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OCrypt(c_Public_OshrK(v_A), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OKey(v_K))), c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K)))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))), (((c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer, v_B, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OCrypt(c_Public_OshrK(v_A), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OKey(v_K))), c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K)))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent))) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))) <=> (c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer, v_B, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OCrypt(c_Public_OshrK(v_A), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OKey(v_K))), c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K)))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))))),
% 0.19/0.43      inference(bind,[status(th)],[])).
% 0.19/0.43  tff(101,plain,
% 0.19/0.43      (![V_U: $i] : ((c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer, v_B, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OCrypt(c_Public_OshrK(v_A), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OKey(v_K))), c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K)))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent))) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))) <=> ![V_U: $i] : (c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer, v_B, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OCrypt(c_Public_OshrK(v_A), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OKey(v_K))), c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K)))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))),
% 0.19/0.43      inference(quant_intro,[status(thm)],[100])).
% 0.19/0.43  tff(102,axiom,(![V_U: $i] : ((c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer, v_B, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OCrypt(c_Public_OshrK(v_A), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OKey(v_K))), c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K)))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent))) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)))), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_conjecture_8')).
% 0.19/0.43  tff(103,plain,
% 0.19/0.43      (![V_U: $i] : (c_in(c_Event_Oevent_OSays(c_Message_Oagent_OServer, v_B, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OCrypt(c_Public_OshrK(v_A), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OKey(v_K))), c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K)))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))),
% 0.19/0.43      inference(modus_ponens,[status(thm)],[102, 101])).
% 0.19/0.43  tff(104,plain,
% 0.19/0.43      (![V_U: $i] : ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))),
% 0.19/0.43      inference(modus_ponens,[status(thm)],[103, 99])).
% 0.19/0.43  tff(105,plain,
% 0.19/0.43      (![V_U: $i] : ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))),
% 0.19/0.43      inference(modus_ponens,[status(thm)],[104, 97])).
% 0.19/0.43  tff(106,plain,(
% 0.19/0.43      ![V_U: $i] : ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))),
% 0.19/0.43      inference(skolemize,[status(sab)],[105])).
% 0.19/0.43  tff(107,plain,
% 0.19/0.43      (![V_U: $i] : ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))),
% 0.19/0.43      inference(modus_ponens,[status(thm)],[106, 96])).
% 0.19/0.43  tff(108,assumption,(c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)), introduced(assumption)).
% 0.19/0.43  tff(109,plain,
% 0.19/0.43      (((~![V_U: $i] : ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))) | ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))) <=> ((~![V_U: $i] : ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))),
% 0.19/0.44      inference(rewrite,[status(thm)],[])).
% 0.19/0.44  tff(110,plain,
% 0.19/0.44      ((~![V_U: $i] : ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))) | ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))),
% 0.19/0.44      inference(quant_inst,[status(thm)],[])).
% 0.19/0.44  tff(111,plain,
% 0.19/0.44      ((~![V_U: $i] : ((~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(V_U, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)))) | (~c_in(c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OKey(v_K))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | (~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent))),
% 0.19/0.44      inference(modus_ponens,[status(thm)],[110, 109])).
% 0.19/0.44  tff(112,plain,
% 0.19/0.44      ($false),
% 0.19/0.44      inference(unit_resolution,[status(thm)],[111, 108, 107, 94])).
% 0.19/0.44  tff(113,plain,(~c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent)), inference(lemma,lemma(discharge,[]))).
% 0.19/0.44  tff(114,plain,
% 0.19/0.44      ((c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (v_B = c_Message_Oagent_OSpy)) <=> (c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (v_B = c_Message_Oagent_OSpy))),
% 0.19/0.44      inference(rewrite,[status(thm)],[])).
% 0.19/0.44  tff(115,axiom,(c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (v_B = c_Message_Oagent_OSpy)), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_conjecture_5')).
% 0.19/0.44  tff(116,plain,
% 0.19/0.44      (c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (v_B = c_Message_Oagent_OSpy)),
% 0.19/0.44      inference(modus_ponens,[status(thm)],[115, 114])).
% 0.19/0.44  tff(117,plain,
% 0.19/0.44      (c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (v_B = c_Message_Oagent_OSpy)),
% 0.19/0.44      inference(modus_ponens,[status(thm)],[116, 114])).
% 0.19/0.44  tff(118,plain,
% 0.19/0.44      (c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (v_B = c_Message_Oagent_OSpy)),
% 0.19/0.44      inference(modus_ponens,[status(thm)],[117, 114])).
% 0.19/0.44  tff(119,plain,
% 0.19/0.44      (c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (v_B = c_Message_Oagent_OSpy)),
% 0.19/0.44      inference(modus_ponens,[status(thm)],[118, 114])).
% 0.19/0.44  tff(120,plain,
% 0.19/0.44      (c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (v_B = c_Message_Oagent_OSpy)),
% 0.19/0.44      inference(modus_ponens,[status(thm)],[119, 114])).
% 0.19/0.44  tff(121,plain,
% 0.19/0.44      (c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (v_B = c_Message_Oagent_OSpy)),
% 0.19/0.44      inference(modus_ponens,[status(thm)],[120, 114])).
% 0.19/0.44  tff(122,plain,
% 0.19/0.44      (c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (v_B = c_Message_Oagent_OSpy)),
% 0.19/0.44      inference(modus_ponens,[status(thm)],[121, 114])).
% 0.19/0.44  tff(123,plain,
% 0.19/0.44      (c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (v_B = c_Message_Oagent_OSpy)),
% 0.19/0.44      inference(modus_ponens,[status(thm)],[122, 114])).
% 0.19/0.44  tff(124,plain,
% 0.19/0.44      (c_in(c_Event_Oevent_OSays(v_B, c_Message_Oagent_OServer, c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_B), c_Message_Omsg_OMPair(v_x, c_Message_Omsg_OCrypt(c_Public_OshrK(v_B), c_Message_Omsg_OMPair(v_NA, c_Message_Omsg_OMPair(v_NB, c_Message_Omsg_OMPair(c_Message_Omsg_OAgent(v_A), c_Message_Omsg_OAgent(v_B)))))))))), c_List_Oset(v_evsf, tc_Event_Oevent), tc_Event_Oevent) | (v_B = c_Message_Oagent_OSpy)),
% 0.19/0.44      inference(modus_ponens,[status(thm)],[123, 114])).
% 0.19/0.44  tff(125,plain,
% 0.19/0.44      (v_B = c_Message_Oagent_OSpy),
% 0.19/0.44      inference(unit_resolution,[status(thm)],[124, 113])).
% 0.19/0.44  tff(126,plain,
% 0.19/0.44      (c_in(v_B, c_Event_Obad, tc_Message_Oagent) <=> c_in(c_Message_Oagent_OSpy, c_Event_Obad, tc_Message_Oagent)),
% 0.19/0.44      inference(monotonicity,[status(thm)],[125])).
% 0.19/0.44  tff(127,plain,
% 0.19/0.44      (c_in(c_Message_Oagent_OSpy, c_Event_Obad, tc_Message_Oagent) <=> c_in(v_B, c_Event_Obad, tc_Message_Oagent)),
% 0.19/0.44      inference(symmetry,[status(thm)],[126])).
% 0.19/0.44  tff(128,plain,
% 0.19/0.44      (c_in(c_Message_Oagent_OSpy, c_Event_Obad, tc_Message_Oagent) <=> c_in(c_Message_Oagent_OSpy, c_Event_Obad, tc_Message_Oagent)),
% 0.19/0.44      inference(rewrite,[status(thm)],[])).
% 0.19/0.44  tff(129,axiom,(c_in(c_Message_Oagent_OSpy, c_Event_Obad, tc_Message_Oagent)), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_Event_OSpy_A_58_Abad_0')).
% 0.19/0.44  tff(130,plain,
% 0.19/0.44      (c_in(c_Message_Oagent_OSpy, c_Event_Obad, tc_Message_Oagent)),
% 0.19/0.44      inference(modus_ponens,[status(thm)],[129, 128])).
% 0.19/0.44  tff(131,plain,
% 0.19/0.44      (c_in(v_B, c_Event_Obad, tc_Message_Oagent)),
% 0.19/0.44      inference(modus_ponens,[status(thm)],[130, 127])).
% 0.19/0.44  tff(132,plain,
% 0.19/0.44      ($false),
% 0.19/0.44      inference(unit_resolution,[status(thm)],[29, 131])).
% 0.19/0.44  % SZS output end Proof
%------------------------------------------------------------------------------