(herald "Fifth approx to TLS: Both parties get cert, then c sends pms encrypted and hash. CA guarantees privk uncompromised. Session nonces used." (bound 14)) (comment "CPSA 2.2.11") (comment "All input read from tls4.scm") (comment "Strand count bounded at 14") (defprotocol tls4 basic (defrole client (vars (pre_master_secret skey) (server_key client_key akey) (ca server_name client_name name) (ns nc text)) (trace (send nc) (recv ns) (recv (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (send (enc "client_version" pre_master_secret server_key)) (send (enc nc ns (enc "hash_zero" (cat (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pre_master_secret server_key))) (invk client_key)))) (non-orig (privk ca))) (defrole server (vars (pre_master_secret skey) (server_key client_key akey) (ca server_name client_name name) (ns nc text)) (trace (recv nc) (send ns) (recv (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pre_master_secret server_key)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pre_master_secret server_key))) (invk client_key)))) (non-orig (privk ca))) (defrole certificate_auth (vars (subject_name ca name)) (trace (send (cat subject_name (pubk subject_name) (enc (enc "hash_zero" (cat "cert" subject_name (pubk subject_name))) (privk ca))))) (non-orig (privk subject_name)))) (defskeleton tls4 (vars (ns nc text) (ca s client_name name) (pms skey) (k client_key akey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (deflistener pms) (non-orig (invk k) (privk ca)) (uniq-orig pms) (comment "Confidentiality should be OK.") (traces ((send nc) (recv ns) (recv (cat s k (enc (enc "hash_zero" (cat "cert" s k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (send (enc "client_version" pms k)) (send (enc nc ns (enc "hash_zero" (cat (cat s k (enc (enc "hash_zero" (cat "cert" s k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv pms) (send pms))) (label 0) (unrealized (0 2) (0 3) (1 0)) (preskeleton) (comment "Not a skeleton")) (defskeleton tls4 (vars (ns nc text) (ca s client_name name) (pms skey) (k client_key akey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (deflistener pms) (precedes ((0 4) (1 0))) (non-orig (invk k) (privk ca)) (uniq-orig pms) (traces ((send nc) (recv ns) (recv (cat s k (enc (enc "hash_zero" (cat "cert" s k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (send (enc "client_version" pms k)) (send (enc nc ns (enc "hash_zero" (cat (cat s k (enc (enc "hash_zero" (cat "cert" s k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv pms) (send pms))) (label 1) (parent 0) (unrealized (0 2) (0 3) (1 0)) (origs (pms (0 4))) (comment "empty cohort")) (comment "Nothing left to do") (defprotocol tls4 basic (defrole client (vars (pre_master_secret skey) (server_key client_key akey) (ca server_name client_name name) (ns nc text)) (trace (send nc) (recv ns) (recv (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (send (enc "client_version" pre_master_secret server_key)) (send (enc nc ns (enc "hash_zero" (cat (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pre_master_secret server_key))) (invk client_key)))) (non-orig (privk ca))) (defrole server (vars (pre_master_secret skey) (server_key client_key akey) (ca server_name client_name name) (ns nc text)) (trace (recv nc) (send ns) (recv (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pre_master_secret server_key)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pre_master_secret server_key))) (invk client_key)))) (non-orig (privk ca))) (defrole certificate_auth (vars (subject_name ca name)) (trace (send (cat subject_name (pubk subject_name) (enc (enc "hash_zero" (cat "cert" subject_name (pubk subject_name))) (privk ca))))) (non-orig (privk subject_name)))) (defskeleton tls4 (vars (ns nc text) (ca s client_name name) (pms skey) (k client_key akey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (non-orig (invk k) (privk ca)) (uniq-orig pms) (comment "Authenticates CA.") (traces ((send nc) (recv ns) (recv (cat s k (enc (enc "hash_zero" (cat "cert" s k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (send (enc "client_version" pms k)) (send (enc nc ns (enc "hash_zero" (cat (cat s k (enc (enc "hash_zero" (cat "cert" s k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key))))) (label 2) (unrealized (0 2) (0 3)) (origs (pms (0 4))) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca s client_name name) (pms skey) (client_key akey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name client_name) (pre_master_secret pms) (server_key (pubk s)) (client_key client_key)) (defstrand certificate_auth 1 (subject_name s) (ca ca)) (precedes ((1 0) (0 2))) (non-orig (privk ca) (privk s)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)) (0 2)) (traces ((send nc) (recv ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (send (enc "client_version" pms (pubk s))) (send (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk s)))) (invk client_key)))) ((send (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))))) (label 3) (parent 2) (unrealized (0 3)) (comment "2 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca s name) (pms skey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name s) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk s))) (defstrand certificate_auth 1 (subject_name s) (ca ca)) (precedes ((1 0) (0 2))) (non-orig (privk ca) (privk s)) (uniq-orig pms) (operation encryption-test (displaced 2 1 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((send nc) (recv ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (send (enc "client_version" pms (pubk s))) (send (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk s)))) ((send (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))))) (label 4) (parent 3) (unrealized) (shape) (maps ((0) ((pms pms) (k (pubk s)) (ca ca) (s s) (client_key (pubk s)) (client_name s) (ns ns) (nc nc)))) (origs (pms (0 4)))) (defskeleton tls4 (vars (ns nc text) (ca s client_name name) (pms skey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name client_name) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name s) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((1 0) (0 2)) ((2 0) (0 3))) (non-orig (privk ca) (privk s) (privk client_name)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((send nc) (recv ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk s))) (send (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk client_name)))) ((send (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 5) (parent 3) (unrealized) (shape) (maps ((0) ((pms pms) (k (pubk s)) (ca ca) (s s) (client_key (pubk client_name)) (client_name client_name) (ns ns) (nc nc)))) (origs (pms (0 4)))) (comment "Nothing left to do") (defprotocol tls4 basic (defrole client (vars (pre_master_secret skey) (server_key client_key akey) (ca server_name client_name name) (ns nc text)) (trace (send nc) (recv ns) (recv (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (send (enc "client_version" pre_master_secret server_key)) (send (enc nc ns (enc "hash_zero" (cat (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pre_master_secret server_key))) (invk client_key)))) (non-orig (privk ca))) (defrole server (vars (pre_master_secret skey) (server_key client_key akey) (ca server_name client_name name) (ns nc text)) (trace (recv nc) (send ns) (recv (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pre_master_secret server_key)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pre_master_secret server_key))) (invk client_key)))) (non-orig (privk ca))) (defrole certificate_auth (vars (subject_name ca name)) (trace (send (cat subject_name (pubk subject_name) (enc (enc "hash_zero" (cat "cert" subject_name (pubk subject_name))) (privk ca))))) (non-orig (privk subject_name)))) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca s c ca-0 server_name client_name name) (pms skey) (k client_key server_key client_key-0 akey)) (defstrand client 6 (ns ns) (nc nc) (ca ca-0) (server_name s) (client_name c) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key server_key) (client_key client_key-0)) (non-orig (invk k) (privk ca) (privk c) (privk ca-0)) (uniq-orig pms) (comment "Authenticates CA and implicit auth for server.") (traces ((send nc) (recv ns) (recv (cat s k (enc (enc "hash_zero" (cat "cert" s k)) (privk ca-0)))) (recv (cat c client_key (enc (enc "hash_zero" (cat "cert" c client_key)) (privk ca-0)))) (send (enc "client_version" pms k)) (send (enc nc ns (enc "hash_zero" (cat (cat s k (enc (enc "hash_zero" (cat "cert" s k)) (privk ca-0))) (cat c client_key (enc (enc "hash_zero" (cat "cert" c client_key)) (privk ca-0))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca)))) (recv (cat client_name client_key-0 (enc (enc "hash_zero" (cat "cert" client_name client_key-0)) (privk ca)))) (recv (enc "client_version" pms server_key)) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca))) (cat client_name client_key-0 (enc (enc "hash_zero" (cat "cert" client_name client_key-0)) (privk ca))) (enc "client_version" pms server_key))) (invk client_key-0))))) (label 6) (unrealized (0 2) (0 3) (1 2) (1 3) (1 4) (1 5)) (preskeleton) (comment "Not a skeleton")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca s c ca-0 server_name client_name name) (pms skey) (k client_key server_key client_key-0 akey)) (defstrand client 6 (ns ns) (nc nc) (ca ca-0) (server_name s) (client_name c) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key server_key) (client_key client_key-0)) (precedes ((0 4) (1 4))) (non-orig (invk k) (privk ca) (privk c) (privk ca-0)) (uniq-orig pms) (traces ((send nc) (recv ns) (recv (cat s k (enc (enc "hash_zero" (cat "cert" s k)) (privk ca-0)))) (recv (cat c client_key (enc (enc "hash_zero" (cat "cert" c client_key)) (privk ca-0)))) (send (enc "client_version" pms k)) (send (enc nc ns (enc "hash_zero" (cat (cat s k (enc (enc "hash_zero" (cat "cert" s k)) (privk ca-0))) (cat c client_key (enc (enc "hash_zero" (cat "cert" c client_key)) (privk ca-0))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca)))) (recv (cat client_name client_key-0 (enc (enc "hash_zero" (cat "cert" client_name client_key-0)) (privk ca)))) (recv (enc "client_version" pms server_key)) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca))) (cat client_name client_key-0 (enc (enc "hash_zero" (cat "cert" client_name client_key-0)) (privk ca))) (enc "client_version" pms server_key))) (invk client_key-0))))) (label 7) (parent 6) (unrealized (0 2) (0 3) (1 2) (1 3) (1 4) (1 5)) (origs (pms (0 4))) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca s c ca-0 server_name client_name name) (pms skey) (k client_key client_key-0 akey)) (defstrand client 6 (ns ns) (nc nc) (ca ca-0) (server_name s) (client_name c) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((0 4) (1 4)) ((2 0) (1 2))) (non-orig (invk k) (privk ca) (privk c) (privk ca-0) (privk server_name)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (1 2)) (traces ((send nc) (recv ns) (recv (cat s k (enc (enc "hash_zero" (cat "cert" s k)) (privk ca-0)))) (recv (cat c client_key (enc (enc "hash_zero" (cat "cert" c client_key)) (privk ca-0)))) (send (enc "client_version" pms k)) (send (enc nc ns (enc "hash_zero" (cat (cat s k (enc (enc "hash_zero" (cat "cert" s k)) (privk ca-0))) (cat c client_key (enc (enc "hash_zero" (cat "cert" c client_key)) (privk ca-0))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key-0 (enc (enc "hash_zero" (cat "cert" client_name client_key-0)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key-0 (enc (enc "hash_zero" (cat "cert" client_name client_key-0)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 8) (parent 7) (unrealized (0 2) (0 3) (1 3) (1 4) (1 5)) (comment "2 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca s c ca-0 server_name name) (pms skey) (k client_key akey)) (defstrand client 6 (ns ns) (nc nc) (ca ca-0) (server_name s) (client_name c) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((0 4) (1 4)) ((2 0) (1 2))) (non-orig (invk k) (privk ca) (privk c) (privk ca-0) (privk server_name)) (uniq-orig pms) (operation encryption-test (displaced 3 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (1 3)) (traces ((send nc) (recv ns) (recv (cat s k (enc (enc "hash_zero" (cat "cert" s k)) (privk ca-0)))) (recv (cat c client_key (enc (enc "hash_zero" (cat "cert" c client_key)) (privk ca-0)))) (send (enc "client_version" pms k)) (send (enc nc ns (enc "hash_zero" (cat (cat s k (enc (enc "hash_zero" (cat "cert" s k)) (privk ca-0))) (cat c client_key (enc (enc "hash_zero" (cat "cert" c client_key)) (privk ca-0))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 9) (parent 8) (unrealized (0 2) (0 3) (1 4) (1 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca s c ca-0 server_name client_name name) (pms skey) (k client_key akey)) (defstrand client 6 (ns ns) (nc nc) (ca ca-0) (server_name s) (client_name c) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((0 4) (1 4)) ((2 0) (1 2)) ((3 0) (1 3))) (non-orig (invk k) (privk ca) (privk c) (privk ca-0) (privk server_name) (privk client_name)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (1 3)) (traces ((send nc) (recv ns) (recv (cat s k (enc (enc "hash_zero" (cat "cert" s k)) (privk ca-0)))) (recv (cat c client_key (enc (enc "hash_zero" (cat "cert" c client_key)) (privk ca-0)))) (send (enc "client_version" pms k)) (send (enc nc ns (enc "hash_zero" (cat (cat s k (enc (enc "hash_zero" (cat "cert" s k)) (privk ca-0))) (cat c client_key (enc (enc "hash_zero" (cat "cert" c client_key)) (privk ca-0))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 10) (parent 8) (unrealized (0 2) (0 3) (1 4) (1 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca s c ca-0 server_name name) (pms skey) (client_key akey)) (defstrand client 6 (ns ns) (nc nc) (ca ca-0) (server_name s) (client_name c) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((0 4) (1 4)) ((2 0) (1 2))) (non-orig (privk ca) (privk c) (privk ca-0) (privk server_name)) (uniq-orig pms) (operation nonce-test (contracted (k (pubk server_name))) pms (1 4) (enc "client_version" pms (pubk server_name))) (traces ((send nc) (recv ns) (recv (cat s (pubk server_name) (enc (enc "hash_zero" (cat "cert" s (pubk server_name))) (privk ca-0)))) (recv (cat c client_key (enc (enc "hash_zero" (cat "cert" c client_key)) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat s (pubk server_name) (enc (enc "hash_zero" (cat "cert" s (pubk server_name))) (privk ca-0))) (cat c client_key (enc (enc "hash_zero" (cat "cert" c client_key)) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 11) (parent 9) (unrealized (0 2) (0 3) (1 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca s c ca-0 server_name client_name name) (pms skey) (client_key akey)) (defstrand client 6 (ns ns) (nc nc) (ca ca-0) (server_name s) (client_name c) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((0 4) (1 4)) ((2 0) (1 2)) ((3 0) (1 3))) (non-orig (privk ca) (privk c) (privk ca-0) (privk server_name) (privk client_name)) (uniq-orig pms) (operation nonce-test (contracted (k (pubk server_name))) pms (1 4) (enc "client_version" pms (pubk server_name))) (traces ((send nc) (recv ns) (recv (cat s (pubk server_name) (enc (enc "hash_zero" (cat "cert" s (pubk server_name))) (privk ca-0)))) (recv (cat c client_key (enc (enc "hash_zero" (cat "cert" c client_key)) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat s (pubk server_name) (enc (enc "hash_zero" (cat "cert" s (pubk server_name))) (privk ca-0))) (cat c client_key (enc (enc "hash_zero" (cat "cert" c client_key)) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 12) (parent 10) (unrealized (0 2) (0 3) (1 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc text) (c ca name) (pms skey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name c) (client_name c) (pre_master_secret pms) (server_key (pubk c)) (client_key (pubk c))) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name c) (client_name c) (pre_master_secret pms) (server_key (pubk c)) (client_key (pubk c))) (defstrand certificate_auth 1 (subject_name c) (ca ca)) (precedes ((0 4) (1 4)) ((0 5) (1 5)) ((2 0) (1 2))) (non-orig (privk c) (privk ca)) (uniq-orig pms) (operation encryption-test (displaced 3 0 client 6) (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk server_name)) (1 5)) (traces ((send nc) (recv ns) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (send (enc "client_version" pms (pubk c))) (send (enc nc ns (enc "hash_zero" (cat (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk c)))) (privk c)))) ((recv nc) (send ns) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (enc "client_version" pms (pubk c))) (recv (enc nc ns (enc "hash_zero" (cat (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk c)))) (privk c)))) ((send (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))))) (label 13) (parent 11) (unrealized (0 2) (0 3)) (comment "2 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc text) (s c ca name) (pms skey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name c) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk c))) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name c) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk c))) (defstrand certificate_auth 1 (subject_name s) (ca ca)) (defstrand certificate_auth 1 (subject_name c) (ca ca)) (precedes ((0 4) (1 4)) ((0 5) (1 5)) ((2 0) (1 2)) ((3 0) (1 3))) (non-orig (privk s) (privk c) (privk ca)) (uniq-orig pms) (operation encryption-test (displaced 4 0 client 6) (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk client_name)) (1 5)) (traces ((send nc) (recv ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (send (enc "client_version" pms (pubk s))) (send (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk c)))) ((recv nc) (send ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (enc "client_version" pms (pubk s))) (recv (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk c)))) ((send (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))))) ((send (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))))) (label 14) (parent 12) (unrealized (0 2) (0 3)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc text) (c ca name) (pms skey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name c) (client_name c) (pre_master_secret pms) (server_key (pubk c)) (client_key (pubk c))) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name c) (client_name c) (pre_master_secret pms) (server_key (pubk c)) (client_key (pubk c))) (defstrand certificate_auth 1 (subject_name c) (ca ca)) (precedes ((0 4) (1 4)) ((0 5) (1 5)) ((2 0) (0 2)) ((2 0) (1 2))) (non-orig (privk c) (privk ca)) (uniq-orig pms) (operation encryption-test (displaced 3 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)) (0 2)) (traces ((send nc) (recv ns) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (send (enc "client_version" pms (pubk c))) (send (enc nc ns (enc "hash_zero" (cat (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk c)))) (privk c)))) ((recv nc) (send ns) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (enc "client_version" pms (pubk c))) (recv (enc nc ns (enc "hash_zero" (cat (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk c)))) (privk c)))) ((send (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))))) (label 15) (parent 13) (unrealized) (shape) (maps ((0 1) ((pms pms) (k (pubk c)) (ca ca) (s c) (c c) (client_key (pubk c)) (ca-0 ca) (ns ns) (nc nc) (server_key (pubk c)) (client_key-0 (pubk c)) (server_name c) (client_name c) (ns-0 ns) (nc-0 nc)))) (origs (pms (0 4)))) (defskeleton tls4 (vars (ns nc text) (c ca name) (pms skey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name c) (client_name c) (pre_master_secret pms) (server_key (pubk c)) (client_key (pubk c))) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name c) (client_name c) (pre_master_secret pms) (server_key (pubk c)) (client_key (pubk c))) (defstrand certificate_auth 1 (subject_name c) (ca ca)) (defstrand certificate_auth 1 (subject_name c) (ca ca)) (precedes ((0 4) (1 4)) ((0 5) (1 5)) ((2 0) (1 2)) ((3 0) (0 2))) (non-orig (privk c) (privk ca)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)) (0 2)) (traces ((send nc) (recv ns) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (send (enc "client_version" pms (pubk c))) (send (enc nc ns (enc "hash_zero" (cat (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk c)))) (privk c)))) ((recv nc) (send ns) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (enc "client_version" pms (pubk c))) (recv (enc nc ns (enc "hash_zero" (cat (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk c)))) (privk c)))) ((send (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))))) ((send (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))))) (label 16) (parent 13) (unrealized) (shape) (maps ((0 1) ((pms pms) (k (pubk c)) (ca ca) (s c) (c c) (client_key (pubk c)) (ca-0 ca) (ns ns) (nc nc) (server_key (pubk c)) (client_key-0 (pubk c)) (server_name c) (client_name c) (ns-0 ns) (nc-0 nc)))) (origs (pms (0 4)))) (defskeleton tls4 (vars (ns nc text) (s c ca name) (pms skey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name c) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk c))) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name c) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk c))) (defstrand certificate_auth 1 (subject_name s) (ca ca)) (defstrand certificate_auth 1 (subject_name c) (ca ca)) (precedes ((0 4) (1 4)) ((0 5) (1 5)) ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (1 3))) (non-orig (privk s) (privk c) (privk ca)) (uniq-orig pms) (operation encryption-test (displaced 4 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)) (0 2)) (traces ((send nc) (recv ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (send (enc "client_version" pms (pubk s))) (send (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk c)))) ((recv nc) (send ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (enc "client_version" pms (pubk s))) (recv (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk c)))) ((send (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))))) ((send (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))))) (label 17) (parent 14) (seen 15) (unrealized (0 3)) (comment "3 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc text) (c ca name) (pms skey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name c) (client_name c) (pre_master_secret pms) (server_key (pubk c)) (client_key (pubk c))) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name c) (client_name c) (pre_master_secret pms) (server_key (pubk c)) (client_key (pubk c))) (defstrand certificate_auth 1 (subject_name c) (ca ca)) (defstrand certificate_auth 1 (subject_name c) (ca ca)) (precedes ((0 4) (1 4)) ((0 5) (1 5)) ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3))) (non-orig (privk c) (privk ca)) (uniq-orig pms) (operation encryption-test (displaced 4 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)) (0 2)) (traces ((send nc) (recv ns) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (send (enc "client_version" pms (pubk c))) (send (enc nc ns (enc "hash_zero" (cat (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk c)))) (privk c)))) ((recv nc) (send ns) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (enc "client_version" pms (pubk c))) (recv (enc nc ns (enc "hash_zero" (cat (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk c)))) (privk c)))) ((send (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))))) ((send (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))))) (label 18) (parent 14) (seen 16) (unrealized) (comment "1 in cohort - 0 not yet seen")) (defskeleton tls4 (vars (ns nc text) (s c ca name) (pms skey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name c) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk c))) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name c) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk c))) (defstrand certificate_auth 1 (subject_name s) (ca ca)) (defstrand certificate_auth 1 (subject_name c) (ca ca)) (defstrand certificate_auth 1 (subject_name s) (ca ca)) (precedes ((0 4) (1 4)) ((0 5) (1 5)) ((2 0) (1 2)) ((3 0) (1 3)) ((4 0) (0 2))) (non-orig (privk s) (privk c) (privk ca)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)) (0 2)) (traces ((send nc) (recv ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (send (enc "client_version" pms (pubk s))) (send (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk c)))) ((recv nc) (send ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (enc "client_version" pms (pubk s))) (recv (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk c)))) ((send (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))))) ((send (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))))) ((send (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))))) (label 19) (parent 14) (seen 16) (unrealized (0 3)) (comment "4 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc text) (s c ca name) (pms skey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name c) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk c))) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name c) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk c))) (defstrand certificate_auth 1 (subject_name s) (ca ca)) (defstrand certificate_auth 1 (subject_name c) (ca ca)) (precedes ((0 4) (1 4)) ((0 5) (1 5)) ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (0 3)) ((3 0) (1 3))) (non-orig (privk s) (privk c) (privk ca)) (uniq-orig pms) (operation encryption-test (displaced 4 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)) (0 3)) (traces ((send nc) (recv ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (send (enc "client_version" pms (pubk s))) (send (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk c)))) ((recv nc) (send ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (enc "client_version" pms (pubk s))) (recv (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk c)))) ((send (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))))) ((send (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))))) (label 20) (parent 17) (unrealized) (shape) (maps ((0 1) ((pms pms) (k (pubk s)) (ca ca) (s s) (c c) (client_key (pubk c)) (ca-0 ca) (ns ns) (nc nc) (server_key (pubk s)) (client_key-0 (pubk c)) (server_name s) (client_name c) (ns-0 ns) (nc-0 nc)))) (origs (pms (0 4)))) (defskeleton tls4 (vars (ns nc text) (s c ca name) (pms skey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name c) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk c))) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name c) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk c))) (defstrand certificate_auth 1 (subject_name s) (ca ca)) (defstrand certificate_auth 1 (subject_name c) (ca ca)) (defstrand certificate_auth 1 (subject_name c) (ca ca)) (precedes ((0 4) (1 4)) ((0 5) (1 5)) ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (1 3)) ((4 0) (0 3))) (non-orig (privk s) (privk c) (privk ca)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)) (0 3)) (traces ((send nc) (recv ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (send (enc "client_version" pms (pubk s))) (send (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk c)))) ((recv nc) (send ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (enc "client_version" pms (pubk s))) (recv (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk c)))) ((send (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))))) ((send (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))))) ((send (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))))) (label 21) (parent 17) (unrealized) (shape) (maps ((0 1) ((pms pms) (k (pubk s)) (ca ca) (s s) (c c) (client_key (pubk c)) (ca-0 ca) (ns ns) (nc nc) (server_key (pubk s)) (client_key-0 (pubk c)) (server_name s) (client_name c) (ns-0 ns) (nc-0 nc)))) (origs (pms (0 4)))) (defskeleton tls4 (vars (ns nc text) (s ca name) (pms skey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name s) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk s))) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name s) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk s))) (defstrand certificate_auth 1 (subject_name s) (ca ca)) (defstrand certificate_auth 1 (subject_name s) (ca ca)) (precedes ((0 4) (1 4)) ((0 5) (1 5)) ((2 0) (0 3)) ((2 0) (1 2)) ((3 0) (0 2))) (non-orig (privk s) (privk ca)) (uniq-orig pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)) (0 3)) (traces ((send nc) (recv ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (send (enc "client_version" pms (pubk s))) (send (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk s)))) ((recv nc) (send ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (enc "client_version" pms (pubk s))) (recv (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk s)))) ((send (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))))) ((send (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))))) (label 22) (parent 19) (seen 16) (unrealized) (comment "1 in cohort - 0 not yet seen")) (defskeleton tls4 (vars (ns nc text) (s c ca name) (pms skey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name c) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk c))) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name c) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk c))) (defstrand certificate_auth 1 (subject_name s) (ca ca)) (defstrand certificate_auth 1 (subject_name c) (ca ca)) (defstrand certificate_auth 1 (subject_name s) (ca ca)) (precedes ((0 4) (1 4)) ((0 5) (1 5)) ((2 0) (1 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((4 0) (0 2))) (non-orig (privk s) (privk c) (privk ca)) (uniq-orig pms) (operation encryption-test (displaced 5 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)) (0 3)) (traces ((send nc) (recv ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (send (enc "client_version" pms (pubk s))) (send (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk c)))) ((recv nc) (send ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (enc "client_version" pms (pubk s))) (recv (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk c)))) ((send (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))))) ((send (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))))) ((send (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))))) (label 23) (parent 19) (unrealized) (shape) (maps ((0 1) ((pms pms) (k (pubk s)) (ca ca) (s s) (c c) (client_key (pubk c)) (ca-0 ca) (ns ns) (nc nc) (server_key (pubk s)) (client_key-0 (pubk c)) (server_name s) (client_name c) (ns-0 ns) (nc-0 nc)))) (origs (pms (0 4)))) (defskeleton tls4 (vars (ns nc text) (s c ca name) (pms skey)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name c) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk c))) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name s) (client_name c) (pre_master_secret pms) (server_key (pubk s)) (client_key (pubk c))) (defstrand certificate_auth 1 (subject_name s) (ca ca)) (defstrand certificate_auth 1 (subject_name c) (ca ca)) (defstrand certificate_auth 1 (subject_name s) (ca ca)) (defstrand certificate_auth 1 (subject_name c) (ca ca)) (precedes ((0 4) (1 4)) ((0 5) (1 5)) ((2 0) (1 2)) ((3 0) (1 3)) ((4 0) (0 2)) ((5 0) (0 3))) (non-orig (privk s) (privk c) (privk ca)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)) (0 3)) (traces ((send nc) (recv ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (send (enc "client_version" pms (pubk s))) (send (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk c)))) ((recv nc) (send ns) (recv (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca)))) (recv (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))) (recv (enc "client_version" pms (pubk s))) (recv (enc nc ns (enc "hash_zero" (cat (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))) (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))) (enc "client_version" pms (pubk s)))) (privk c)))) ((send (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))))) ((send (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca))))) ((send (cat s (pubk s) (enc (enc "hash_zero" (cat "cert" s (pubk s))) (privk ca))))) ((send (cat c (pubk c) (enc (enc "hash_zero" (cat "cert" c (pubk c))) (privk ca)))))) (label 24) (parent 19) (unrealized) (shape) (maps ((0 1) ((pms pms) (k (pubk s)) (ca ca) (s s) (c c) (client_key (pubk c)) (ca-0 ca) (ns ns) (nc nc) (server_key (pubk s)) (client_key-0 (pubk c)) (server_name s) (client_name c) (ns-0 ns) (nc-0 nc)))) (origs (pms (0 4)))) (comment "Nothing left to do") (defprotocol tls4 basic (defrole client (vars (pre_master_secret skey) (server_key client_key akey) (ca server_name client_name name) (ns nc text)) (trace (send nc) (recv ns) (recv (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (send (enc "client_version" pre_master_secret server_key)) (send (enc nc ns (enc "hash_zero" (cat (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pre_master_secret server_key))) (invk client_key)))) (non-orig (privk ca))) (defrole server (vars (pre_master_secret skey) (server_key client_key akey) (ca server_name client_name name) (ns nc text)) (trace (recv nc) (send ns) (recv (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pre_master_secret server_key)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pre_master_secret server_key))) (invk client_key)))) (non-orig (privk ca))) (defrole certificate_auth (vars (subject_name ca name)) (trace (send (cat subject_name (pubk subject_name) (enc (enc "hash_zero" (cat "cert" subject_name (pubk subject_name))) (privk ca))))) (non-orig (privk subject_name)))) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey) (k client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (deflistener pms) (non-orig (invk k) (privk ca)) (uniq-orig pms) (comment "Confidentiality guarantees to server") (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv pms) (send pms))) (label 25) (unrealized (0 2) (0 3) (0 5)) (origs) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (deflistener pms) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv pms) (send pms)) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 26) (parent 25) (unrealized (0 3) (0 5)) (comment "2 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (deflistener pms) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig pms) (operation encryption-test (displaced 3 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv pms) (send pms)) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 27) (parent 26) (unrealized (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (deflistener pms) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((3 0) (0 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv pms) (send pms)) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 28) (parent 26) (unrealized (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (deflistener pms) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (precedes ((2 0) (0 2)) ((3 4) (0 4)) ((3 4) (1 0)) ((3 5) (0 5))) (non-orig (privk ca) (privk server_name)) (uniq-orig pms) (operation encryption-test (added-strand client 6) (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)) (0 5)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv pms) (send pms)) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name))))) (label 29) (parent 27) (unrealized (1 0) (3 2) (3 3)) (comment "2 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (deflistener pms) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (precedes ((2 0) (0 2)) ((3 0) (0 3)) ((4 4) (0 4)) ((4 4) (1 0)) ((4 5) (0 5))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig pms) (operation encryption-test (added-strand client 6) (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)) (0 5)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv pms) (send pms)) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name))))) (label 30) (parent 28) (unrealized (1 0) (4 2) (4 3)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (deflistener pms) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (precedes ((2 0) (0 2)) ((2 0) (3 2)) ((3 4) (0 4)) ((3 4) (1 0)) ((3 5) (0 5))) (non-orig (privk ca) (privk server_name)) (uniq-orig pms) (operation encryption-test (displaced 4 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (3 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv pms) (send pms)) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name))))) (label 31) (parent 29) (unrealized (1 0)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (deflistener pms) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 2)) ((3 4) (0 4)) ((3 4) (1 0)) ((3 5) (0 5)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (3 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv pms) (send pms)) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 32) (parent 29) (unrealized (1 0)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (deflistener pms) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (precedes ((2 0) (0 2)) ((2 0) (4 2)) ((3 0) (0 3)) ((4 4) (0 4)) ((4 4) (1 0)) ((4 5) (0 5))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (4 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv pms) (send pms)) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name))))) (label 33) (parent 30) (seen 31) (unrealized (1 0) (4 3)) (comment "3 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (deflistener pms) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (precedes ((2 0) (0 2)) ((3 0) (0 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 0)) ((4 5) (0 5))) (non-orig (privk ca) (privk client_name)) (uniq-orig pms) (operation encryption-test (displaced 5 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (4 2)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv pms) (send pms)) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk client_name))) (send (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name))))) (label 34) (parent 30) (unrealized (1 0)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (deflistener pms) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 2)) ((3 0) (0 3)) ((4 4) (0 4)) ((4 4) (1 0)) ((4 5) (0 5)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (4 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv pms) (send pms)) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 35) (parent 30) (seen 32) (unrealized (1 0) (4 3)) (comment "4 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (deflistener pms) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (precedes ((2 0) (0 2)) ((2 0) (4 2)) ((3 0) (0 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 0)) ((4 5) (0 5))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig pms) (operation encryption-test (displaced 5 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (4 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv pms) (send pms)) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name))))) (label 36) (parent 33) (unrealized (1 0)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (deflistener pms) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (4 2)) ((3 0) (0 3)) ((4 4) (0 4)) ((4 4) (1 0)) ((4 5) (0 5)) ((5 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (4 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv pms) (send pms)) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 37) (parent 33) (unrealized (1 0)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (deflistener pms) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 0)) ((3 5) (0 5)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig pms) (operation encryption-test (displaced 6 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (4 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv pms) (send pms)) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 38) (parent 35) (unrealized (1 0)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (deflistener pms) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 2)) ((3 0) (0 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 0)) ((4 5) (0 5)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig pms) (operation encryption-test (displaced 6 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (4 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv pms) (send pms)) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 39) (parent 35) (unrealized (1 0)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (deflistener pms) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((3 0) (0 3)) ((4 4) (0 4)) ((4 4) (1 0)) ((4 5) (0 5)) ((5 0) (4 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (4 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv pms) (send pms)) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 40) (parent 35) (unrealized (1 0)) (comment "empty cohort")) (comment "Nothing left to do") (defprotocol tls4 basic (defrole client (vars (pre_master_secret skey) (server_key client_key akey) (ca server_name client_name name) (ns nc text)) (trace (send nc) (recv ns) (recv (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (send (enc "client_version" pre_master_secret server_key)) (send (enc nc ns (enc "hash_zero" (cat (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pre_master_secret server_key))) (invk client_key)))) (non-orig (privk ca))) (defrole server (vars (pre_master_secret skey) (server_key client_key akey) (ca server_name client_name name) (ns nc text)) (trace (recv nc) (send ns) (recv (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pre_master_secret server_key)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pre_master_secret server_key))) (invk client_key)))) (non-orig (privk ca))) (defrole certificate_auth (vars (subject_name ca name)) (trace (send (cat subject_name (pubk subject_name) (enc (enc "hash_zero" (cat "cert" subject_name (pubk subject_name))) (privk ca))))) (non-orig (privk subject_name)))) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey) (k client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (non-orig (invk k) (privk ca)) (uniq-orig pms) (comment "Auth guarantees to server") (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key))))) (label 41) (unrealized (0 2) (0 3) (0 5)) (origs) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((1 0) (0 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 42) (parent 41) (unrealized (0 3) (0 5)) (comment "2 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((1 0) (0 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig pms) (operation encryption-test (displaced 2 1 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 43) (parent 42) (unrealized (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((1 0) (0 2)) ((2 0) (0 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 44) (parent 42) (unrealized (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (precedes ((1 0) (0 2)) ((2 4) (0 4)) ((2 5) (0 5))) (non-orig (privk ca) (privk server_name)) (uniq-orig pms) (operation encryption-test (added-strand client 6) (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)) (0 5)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name))))) (label 45) (parent 43) (unrealized (2 2) (2 3)) (comment "2 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (precedes ((1 0) (0 2)) ((2 0) (0 3)) ((3 4) (0 4)) ((3 5) (0 5))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig pms) (operation encryption-test (added-strand client 6) (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)) (0 5)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name))))) (label 46) (parent 44) (unrealized (3 2) (3 3)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (precedes ((1 0) (0 2)) ((1 0) (2 2)) ((2 4) (0 4)) ((2 5) (0 5))) (non-orig (privk ca) (privk server_name)) (uniq-orig pms) (operation encryption-test (displaced 3 1 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (2 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name))))) (label 47) (parent 45) (unrealized) (shape) (maps ((0) ((pms pms) (k (pubk server_name)) (client_key (pubk server_name)) (ca ca) (server_name server_name) (client_name server_name) (ns ns) (nc nc)))) (origs (pms (2 4)))) (defskeleton tls4 (vars (ns nc text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((1 0) (0 2)) ((2 4) (0 4)) ((2 5) (0 5)) ((3 0) (2 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (2 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 48) (parent 45) (unrealized) (shape) (maps ((0) ((pms pms) (k (pubk server_name)) (client_key (pubk server_name)) (ca ca) (server_name server_name) (client_name server_name) (ns ns) (nc nc)))) (origs (pms (2 4)))) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (precedes ((1 0) (0 2)) ((1 0) (3 2)) ((2 0) (0 3)) ((3 4) (0 4)) ((3 5) (0 5))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig pms) (operation encryption-test (displaced 4 1 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (3 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name))))) (label 49) (parent 46) (seen 47) (unrealized (3 3)) (comment "3 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (precedes ((1 0) (0 2)) ((2 0) (0 3)) ((2 0) (3 2)) ((3 4) (0 4)) ((3 5) (0 5))) (non-orig (privk ca) (privk client_name)) (uniq-orig pms) (operation encryption-test (displaced 4 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (3 2)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk client_name))) (send (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name))))) (label 50) (parent 46) (seen 48) (unrealized) (comment "1 in cohort - 0 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((1 0) (0 2)) ((2 0) (0 3)) ((3 4) (0 4)) ((3 5) (0 5)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (3 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 51) (parent 46) (seen 48) (unrealized (3 3)) (comment "4 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (precedes ((1 0) (0 2)) ((1 0) (3 2)) ((2 0) (0 3)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 5) (0 5))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig pms) (operation encryption-test (displaced 4 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (3 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name))))) (label 52) (parent 49) (unrealized) (shape) (maps ((0) ((pms pms) (k (pubk server_name)) (client_key (pubk client_name)) (ca ca) (server_name server_name) (client_name client_name) (ns ns) (nc nc)))) (origs (pms (3 4)))) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((1 0) (0 2)) ((1 0) (3 2)) ((2 0) (0 3)) ((3 4) (0 4)) ((3 5) (0 5)) ((4 0) (3 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (3 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 53) (parent 49) (unrealized) (shape) (maps ((0) ((pms pms) (k (pubk server_name)) (client_key (pubk client_name)) (ca ca) (server_name server_name) (client_name client_name) (ns ns) (nc nc)))) (origs (pms (3 4)))) (defskeleton tls4 (vars (ns nc text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((1 0) (0 2)) ((1 0) (2 3)) ((2 4) (0 4)) ((2 5) (0 5)) ((3 0) (2 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig pms) (operation encryption-test (displaced 5 1 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (3 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 54) (parent 51) (seen 48) (unrealized) (comment "1 in cohort - 0 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((1 0) (0 2)) ((2 0) (0 3)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 5) (0 5)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (3 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 55) (parent 51) (unrealized) (shape) (maps ((0) ((pms pms) (k (pubk server_name)) (client_key (pubk client_name)) (ca ca) (server_name server_name) (client_name client_name) (ns ns) (nc nc)))) (origs (pms (3 4)))) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((1 0) (0 2)) ((2 0) (0 3)) ((3 4) (0 4)) ((3 5) (0 5)) ((4 0) (3 2)) ((5 0) (3 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (3 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 56) (parent 51) (unrealized) (shape) (maps ((0) ((pms pms) (k (pubk server_name)) (client_key (pubk client_name)) (ca ca) (server_name server_name) (client_name client_name) (ns ns) (nc nc)))) (origs (pms (3 4)))) (comment "Nothing left to do") (defprotocol tls4 basic (defrole client (vars (pre_master_secret skey) (server_key client_key akey) (ca server_name client_name name) (ns nc text)) (trace (send nc) (recv ns) (recv (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (send (enc "client_version" pre_master_secret server_key)) (send (enc nc ns (enc "hash_zero" (cat (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pre_master_secret server_key))) (invk client_key)))) (non-orig (privk ca))) (defrole server (vars (pre_master_secret skey) (server_key client_key akey) (ca server_name client_name name) (ns nc text)) (trace (recv nc) (send ns) (recv (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pre_master_secret server_key)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name server_key (enc (enc "hash_zero" (cat "cert" server_name server_key)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pre_master_secret server_key))) (invk client_key)))) (non-orig (privk ca))) (defrole certificate_auth (vars (subject_name ca name)) (trace (send (cat subject_name (pubk subject_name) (enc (enc "hash_zero" (cat "cert" subject_name (pubk subject_name))) (privk ca))))) (non-orig (privk subject_name)))) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey) (k client_key server_key client_key-0 akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key server_key) (client_key client_key-0)) (non-orig (invk k) (privk ca) (privk ca-0)) (uniq-orig ns pms) (comment "Session property?") (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 server_key (enc (enc "hash_zero" (cat "cert" server_name-0 server_key)) (privk ca-0)))) (recv (cat client_name-0 client_key-0 (enc (enc "hash_zero" (cat "cert" client_name-0 client_key-0)) (privk ca-0)))) (recv (enc "client_version" pms server_key)) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 server_key (enc (enc "hash_zero" (cat "cert" server_name-0 server_key)) (privk ca-0))) (cat client_name-0 client_key-0 (enc (enc "hash_zero" (cat "cert" client_name-0 client_key-0)) (privk ca-0))) (enc "client_version" pms server_key))) (invk client_key-0))))) (label 57) (unrealized (0 2) (0 3) (0 5) (1 2) (1 3) (1 5)) (origs (ns (0 1))) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey) (k client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (non-orig (invk k) (privk ca)) (uniq-orig ns pms) (operation collapsed 1 0) (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key))))) (label 58) (parent 57) (unrealized (0 2) (0 3) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey) (k client_key client_key-0 akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key client_key-0)) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (precedes ((2 0) (1 2))) (non-orig (invk k) (privk ca) (privk ca-0) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (1 2)) (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 client_key-0 (enc (enc "hash_zero" (cat "cert" client_name-0 client_key-0)) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 client_key-0 (enc (enc "hash_zero" (cat "cert" client_name-0 client_key-0)) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (invk client_key-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))))) (label 59) (parent 57) (unrealized (0 2) (0 3) (0 5) (1 3) (1 5)) (comment "2 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((1 0) (0 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 60) (parent 58) (unrealized (0 3) (0 5)) (origs (ns (0 1))) (comment "2 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 name) (pms skey) (k client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (precedes ((2 0) (1 2))) (non-orig (invk k) (privk ca) (privk ca-0) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 3 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (1 3)) (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))))) (label 61) (parent 59) (unrealized (0 2) (0 3) (0 5) (1 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey) (k client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (precedes ((2 0) (1 2)) ((3 0) (1 3))) (non-orig (invk k) (privk ca) (privk ca-0) (privk server_name-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (1 3)) (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))))) (label 62) (parent 59) (unrealized (0 2) (0 3) (0 5) (1 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((1 0) (0 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (displaced 2 1 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 63) (parent 60) (unrealized (0 5)) (origs (ns (0 1))) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((1 0) (0 2)) ((2 0) (0 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 64) (parent 60) (unrealized (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 name) (pms skey) (k client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (precedes ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5))) (non-orig (invk k) (privk ca) (privk ca-0) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand client 6) (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)) (1 5)) (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0))))) (label 65) (parent 61) (unrealized (0 2) (0 3) (0 4) (0 5) (3 2) (3 3)) (comment "2 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey) (k client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (invk k) (privk ca) (privk ca-0) (privk server_name-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand client 6) (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)) (1 5)) (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0))))) (label 66) (parent 62) (unrealized (0 2) (0 3) (0 4) (0 5) (4 2) (4 3)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (precedes ((0 1) (2 1)) ((1 0) (0 2)) ((2 4) (0 4)) ((2 5) (0 5))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (added-strand client 6) (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)) (0 5)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name))))) (label 67) (parent 63) (unrealized (2 2) (2 3)) (comment "2 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (precedes ((0 1) (3 1)) ((1 0) (0 2)) ((2 0) (0 3)) ((3 4) (0 4)) ((3 5) (0 5))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (added-strand client 6) (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)) (0 5)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name))))) (label 68) (parent 64) (unrealized (3 2) (3 3)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 name) (pms skey) (k client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (precedes ((2 0) (1 2)) ((2 0) (3 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5))) (non-orig (invk k) (privk ca) (privk ca-0) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 4 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (3 2)) (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0))))) (label 69) (parent 65) (unrealized (0 2) (0 3) (0 4) (0 5)) (comment "2 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 name) (pms skey) (k client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (precedes ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2))) (non-orig (invk k) (privk ca) (privk ca-0) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (3 2)) (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))))) (label 70) (parent 65) (unrealized (0 2) (0 3) (0 4) (0 5)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey) (k client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (invk k) (privk ca) (privk ca-0) (privk server_name-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (4 2)) (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0))))) (label 71) (parent 66) (seen 69) (unrealized (0 2) (0 3) (0 4) (0 5) (4 3)) (comment "3 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 client_name-0 name) (pms skey) (k client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name client_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name client_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name-0))) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (invk k) (privk ca) (privk ca-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 5 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (4 2)) (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk client_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name-0))))) (label 72) (parent 66) (unrealized (0 2) (0 3) (0 4) (0 5)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey) (k client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2))) (non-orig (invk k) (privk ca) (privk ca-0) (privk server_name-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (4 2)) (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))))) (label 73) (parent 66) (seen 70) (unrealized (0 2) (0 3) (0 4) (0 5) (4 3)) (comment "4 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (precedes ((0 1) (2 1)) ((1 0) (0 2)) ((1 0) (2 2)) ((2 4) (0 4)) ((2 5) (0 5))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (displaced 3 1 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (2 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name))))) (label 74) (parent 67) (unrealized) (shape) (maps ((0 0) ((pms pms) (k (pubk server_name)) (ns ns) (client_key (pubk server_name)) (ca ca) (server_name server_name) (client_name server_name) (nc nc) (server_key (pubk server_name)) (client_key-0 (pubk server_name)) (ca-0 ca) (server_name-0 server_name) (client_name-0 server_name) (ns-0 ns) (nc-0 nc)))) (origs (pms (2 4)) (ns (0 1)))) (defskeleton tls4 (vars (ns nc text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((0 1) (2 1)) ((1 0) (0 2)) ((2 4) (0 4)) ((2 5) (0 5)) ((3 0) (2 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (2 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 75) (parent 67) (unrealized) (shape) (maps ((0 0) ((pms pms) (k (pubk server_name)) (ns ns) (client_key (pubk server_name)) (ca ca) (server_name server_name) (client_name server_name) (nc nc) (server_key (pubk server_name)) (client_key-0 (pubk server_name)) (ca-0 ca) (server_name-0 server_name) (client_name-0 server_name) (ns-0 ns) (nc-0 nc)))) (origs (pms (2 4)) (ns (0 1)))) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (precedes ((0 1) (3 1)) ((1 0) (0 2)) ((1 0) (3 2)) ((2 0) (0 3)) ((3 4) (0 4)) ((3 5) (0 5))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 4 1 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (3 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name))))) (label 76) (parent 68) (seen 74) (unrealized (3 3)) (comment "3 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (precedes ((0 1) (3 1)) ((1 0) (0 2)) ((2 0) (0 3)) ((2 0) (3 2)) ((3 4) (0 4)) ((3 5) (0 5))) (non-orig (privk ca) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 4 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (3 2)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk client_name))) (send (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name))))) (label 77) (parent 68) (seen 75) (unrealized) (comment "1 in cohort - 0 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((0 1) (3 1)) ((1 0) (0 2)) ((2 0) (0 3)) ((3 4) (0 4)) ((3 5) (0 5)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (3 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 78) (parent 68) (seen 75) (unrealized (3 3)) (comment "4 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((2 0) (3 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (displaced 4 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name))))) (label 79) (parent 69) (unrealized (0 3) (0 5)) (comment "2 in cohort - 2 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (3 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk ca-0) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 80) (parent 69) (unrealized (0 3) (0 4) (0 5)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 81) (parent 70) (unrealized (0 3) (0 5)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 4 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 82) (parent 70) (unrealized (0 3) (0 5)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk ca-0) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 83) (parent 70) (unrealized (0 3) (0 4) (0 5)) (comment "4 in cohort - 4 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey) (k client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (invk k) (privk ca) (privk ca-0) (privk server_name-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 5 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (4 3)) (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0))))) (label 84) (parent 71) (unrealized (0 2) (0 3) (0 4) (0 5)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey) (k client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3))) (non-orig (invk k) (privk ca) (privk ca-0) (privk server_name-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (4 3)) (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))))) (label 85) (parent 71) (unrealized (0 2) (0 3) (0 4) (0 5)) (comment "4 in cohort - 4 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name-0))) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (privk ca) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk client_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name-0))))) (label 86) (parent 72) (unrealized (0 3) (0 5)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name-0))) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (privk ca) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 5 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk client_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name-0))))) (label 87) (parent 72) (unrealized (0 3) (0 5)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name client_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name client_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk ca-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk client_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 88) (parent 72) (unrealized (0 3) (0 4) (0 5)) (comment "4 in cohort - 4 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 name) (pms skey) (k client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (precedes ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2))) (non-orig (invk k) (privk ca) (privk ca-0) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 6 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (4 3)) (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))))) (label 89) (parent 73) (unrealized (0 2) (0 3) (0 4) (0 5)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey) (k client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2))) (non-orig (invk k) (privk ca) (privk ca-0) (privk server_name-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 6 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (4 3)) (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))))) (label 90) (parent 73) (unrealized (0 2) (0 3) (0 4) (0 5)) (comment "4 in cohort - 4 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey) (k client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key k) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3))) (non-orig (invk k) (privk ca) (privk ca-0) (privk server_name-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (4 3)) (traces ((recv nc) (send ns) (recv (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms k)) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name k (enc (enc "hash_zero" (cat "cert" server_name k)) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms k))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))))) (label 91) (parent 73) (unrealized (0 2) (0 3) (0 4) (0 5)) (comment "5 in cohort - 5 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (precedes ((0 1) (3 1)) ((1 0) (0 2)) ((1 0) (3 2)) ((2 0) (0 3)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 5) (0 5))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 4 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (3 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name))))) (label 92) (parent 76) (unrealized) (shape) (maps ((0 0) ((pms pms) (k (pubk server_name)) (ns ns) (client_key (pubk client_name)) (ca ca) (server_name server_name) (client_name client_name) (nc nc) (server_key (pubk server_name)) (client_key-0 (pubk client_name)) (ca-0 ca) (server_name-0 server_name) (client_name-0 client_name) (ns-0 ns) (nc-0 nc)))) (origs (pms (3 4)) (ns (0 1)))) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((0 1) (3 1)) ((1 0) (0 2)) ((1 0) (3 2)) ((2 0) (0 3)) ((3 4) (0 4)) ((3 5) (0 5)) ((4 0) (3 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (3 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 93) (parent 76) (unrealized) (shape) (maps ((0 0) ((pms pms) (k (pubk server_name)) (ns ns) (client_key (pubk client_name)) (ca ca) (server_name server_name) (client_name client_name) (nc nc) (server_key (pubk server_name)) (client_key-0 (pubk client_name)) (ca-0 ca) (server_name-0 server_name) (client_name-0 client_name) (ns-0 ns) (nc-0 nc)))) (origs (pms (3 4)) (ns (0 1)))) (defskeleton tls4 (vars (ns nc text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((0 1) (2 1)) ((1 0) (0 2)) ((1 0) (2 3)) ((2 4) (0 4)) ((2 5) (0 5)) ((3 0) (2 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 1 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (3 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 94) (parent 78) (seen 75) (unrealized) (comment "1 in cohort - 0 not yet seen")) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((0 1) (3 1)) ((1 0) (0 2)) ((2 0) (0 3)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 5) (0 5)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (3 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 95) (parent 78) (unrealized) (shape) (maps ((0 0) ((pms pms) (k (pubk server_name)) (ns ns) (client_key (pubk client_name)) (ca ca) (server_name server_name) (client_name client_name) (nc nc) (server_key (pubk server_name)) (client_key-0 (pubk client_name)) (ca-0 ca) (server_name-0 server_name) (client_name-0 client_name) (ns-0 ns) (nc-0 nc)))) (origs (pms (3 4)) (ns (0 1)))) (defskeleton tls4 (vars (ns nc text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((0 1) (3 1)) ((1 0) (0 2)) ((2 0) (0 3)) ((3 4) (0 4)) ((3 5) (0 5)) ((4 0) (3 2)) ((5 0) (3 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (3 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc) (recv ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 96) (parent 78) (unrealized) (shape) (maps ((0 0) ((pms pms) (k (pubk server_name)) (ns ns) (client_key (pubk client_name)) (ca ca) (server_name server_name) (client_name client_name) (nc nc) (server_key (pubk server_name)) (client_key-0 (pubk client_name)) (ca-0 ca) (server_name-0 server_name) (client_name-0 client_name) (ns-0 ns) (nc-0 nc)))) (origs (pms (3 4)) (ns (0 1)))) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((2 0) (3 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (displaced 4 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name))))) (label 97) (parent 79) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((2 0) (3 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 98) (parent 79) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca server_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name-0))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((2 0) (3 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name-0)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 99) (parent 80) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name ca-0 server_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (3 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk ca-0) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 5 4 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 100) (parent 80) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (3 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2)) ((5 0) (0 3))) (non-orig (privk ca) (privk server_name) (privk client_name) (privk ca-0) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 101) (parent 80) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 102) (parent 81) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 3)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 4 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 103) (parent 81) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 104) (parent 81) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 105) (parent 82) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 4 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 106) (parent 82) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2)) ((4 0) (3 2)) ((5 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 107) (parent 82) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca server_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name-0))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 6 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name-0)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 108) (parent 83) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca server_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name-0))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 3)) ((4 0) (3 2)) ((5 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 6 4 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name-0)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 109) (parent 83) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name ca-0 server_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk ca-0) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 6 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 110) (parent 83) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 2)) ((6 0) (0 3))) (non-orig (privk ca) (privk server_name) (privk client_name) (privk ca-0) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 111) (parent 83) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0))))) (label 112) (parent 84) (unrealized (0 3) (0 5)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 5 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0))))) (label 113) (parent 84) (unrealized (0 3) (0 4) (0 5)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk ca-0) (privk server_name-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 114) (parent 84) (unrealized (0 3) (0 4) (0 5)) (comment "4 in cohort - 4 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 6 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))))) (label 115) (parent 85) (unrealized (0 3) (0 5)) (comment "4 in cohort - 4 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 6 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))))) (label 116) (parent 85) (unrealized (0 3) (0 4) (0 5)) (comment "4 in cohort - 4 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((5 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 6 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))))) (label 117) (parent 85) (unrealized (0 3) (0 4) (0 5)) (comment "4 in cohort - 4 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3)) ((6 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk ca-0) (privk server_name-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 118) (parent 85) (unrealized (0 3) (0 4) (0 5)) (comment "5 in cohort - 5 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (privk ca) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk client_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name))))) (label 119) (parent 86) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (privk ca) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk client_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name))))) (label 120) (parent 86) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk client_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name-0)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 121) (parent 86) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (privk ca) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk client_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name))))) (label 122) (parent 87) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (privk ca) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk client_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name))))) (label 123) (parent 87) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk client_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name-0)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 124) (parent 87) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk client_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 125) (parent 88) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk client_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 126) (parent 88) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name ca-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk ca-0) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (send (enc "client_version" pms (pubk client_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 127) (parent 88) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name client_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name client_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((6 0) (0 3))) (non-orig (privk ca) (privk server_name) (privk client_name) (privk ca-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk client_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 128) (parent 88) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 129) (parent 89) (unrealized (0 3) (0 5)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 4 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 130) (parent 89) (unrealized (0 3) (0 5)) (comment "3 in cohort - 3 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk ca-0) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 131) (parent 89) (unrealized (0 3) (0 4) (0 5)) (comment "4 in cohort - 4 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 6 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 132) (parent 90) (unrealized (0 3) (0 5)) (comment "4 in cohort - 4 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 6 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 133) (parent 90) (unrealized (0 3) (0 4) (0 5)) (comment "4 in cohort - 4 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 6 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 134) (parent 90) (unrealized (0 3) (0 5)) (comment "4 in cohort - 4 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk ca-0) (privk server_name-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 135) (parent 90) (unrealized (0 3) (0 4) (0 5)) (comment "5 in cohort - 5 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 7 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))))) (label 136) (parent 91) (unrealized (0 3) (0 5)) (comment "5 in cohort - 5 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 7 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))))) (label 137) (parent 91) (unrealized (0 3) (0 4) (0 5)) (comment "5 in cohort - 5 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((5 0) (4 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 7 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))))) (label 138) (parent 91) (unrealized (0 3) (0 5)) (comment "5 in cohort - 5 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 7 6 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)) (0 2)) (traces ((recv nc) (send ns) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))))) (label 139) (parent 91) (unrealized (0 3) (0 4) (0 5)) (comment "5 in cohort - 5 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey) (client_key akey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key client_key)) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3)) ((7 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk ca-0) (privk server_name-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)) (0 2)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name client_key (enc (enc "hash_zero" (cat "cert" client_name client_key)) (privk ca))) (enc "client_version" pms (pubk server_name)))) (invk client_key)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 140) (parent 91) (unrealized (0 3) (0 4) (0 5)) (comment "6 in cohort - 6 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((2 0) (3 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 141) (parent 99) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca ca-0 server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (3 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2))) (non-orig (privk ca) (privk ca-0) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 142) (parent 100) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca client_name ca-0 server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (3 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2)) ((5 0) (0 3))) (non-orig (privk ca) (privk client_name) (privk ca-0) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 143) (parent 101) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 144) (parent 108) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 3)) ((4 0) (3 2)) ((5 0) (0 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 145) (parent 109) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca ca-0 server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 2))) (non-orig (privk ca) (privk ca-0) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 146) (parent 110) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca client_name ca-0 server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 2)) ((6 0) (0 3))) (non-orig (privk ca) (privk client_name) (privk ca-0) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 147) (parent 111) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name))))) (label 148) (parent 112) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name))))) (label 149) (parent 112) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 150) (parent 112) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name))))) (label 151) (parent 113) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name))))) (label 152) (parent 113) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 153) (parent 113) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca server_name-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name-0))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk server_name-0) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name-0)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 154) (parent 114) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca server_name-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk server_name-0) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 155) (parent 114) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name ca-0 server_name-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk ca-0) (privk server_name-0) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 156) (parent 114) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((6 0) (0 3))) (non-orig (privk ca) (privk server_name) (privk client_name) (privk ca-0) (privk server_name-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 157) (parent 114) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 158) (parent 115) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 159) (parent 115) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3)) ((5 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 160) (parent 115) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3)) ((6 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 161) (parent 115) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 162) (parent 116) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 163) (parent 116) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3)) ((5 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 164) (parent 116) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3)) ((6 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 165) (parent 116) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((5 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 166) (parent 117) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((5 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 167) (parent 117) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((5 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 168) (parent 117) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((5 0) (4 3)) ((6 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 169) (parent 117) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca server_name-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name-0))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3)) ((6 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk server_name-0) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name-0)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 170) (parent 118) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca server_name-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3)) ((6 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk server_name-0) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 171) (parent 118) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca server_name-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3)) ((5 0) (4 3)) ((6 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk server_name-0) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 172) (parent 118) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name ca-0 server_name-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3)) ((6 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk ca-0) (privk server_name-0) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 6 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 173) (parent 118) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3)) ((6 0) (0 2)) ((7 0) (0 3))) (non-orig (privk ca) (privk server_name) (privk client_name) (privk ca-0) (privk server_name-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 174) (parent 118) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2))) (non-orig (privk ca) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name client_name)) pms (0 4) (enc "client_version" pms (pubk client_name))) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk client_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 175) (parent 125) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2))) (non-orig (privk ca) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name client_name)) pms (0 4) (enc "client_version" pms (pubk client_name))) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk client_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 176) (parent 126) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca ca-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2))) (non-orig (privk ca) (privk ca-0) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name client_name)) pms (0 4) (enc "client_version" pms (pubk client_name))) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (send (enc "client_version" pms (pubk client_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 177) (parent 127) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca client_name ca-0 client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name client_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name client_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 2)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((6 0) (0 3))) (non-orig (privk ca) (privk client_name) (privk ca-0) (privk client_name-0)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name client_name-0)) pms (0 4) (enc "client_version" pms (pubk client_name-0))) (traces ((recv nc) (send ns) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk client_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 178) (parent 128) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 179) (parent 129) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 3)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 4 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 180) (parent 129) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 181) (parent 129) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 182) (parent 130) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2)) ((4 0) (3 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (displaced 5 4 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 183) (parent 130) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2)) ((4 0) (3 2)) ((5 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 184) (parent 130) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca server_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name-0))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 6 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name-0)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 185) (parent 131) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca server_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name-0))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 3)) ((4 0) (3 2)) ((5 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 6 4 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name-0)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 186) (parent 131) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name ca-0 server_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk ca-0) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (displaced 6 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 187) (parent 131) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk server_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 2)) ((6 0) (0 3))) (non-orig (privk ca) (privk server_name) (privk client_name) (privk ca-0) (privk server_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk server_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 188) (parent 131) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 189) (parent 132) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 190) (parent 132) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 191) (parent 132) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 192) (parent 132) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 193) (parent 133) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 194) (parent 133) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 195) (parent 133) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 196) (parent 133) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 197) (parent 134) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 198) (parent 134) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 6 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 199) (parent 134) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((5 0) (4 2)) ((6 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 200) (parent 134) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca server_name-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name-0))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk server_name-0) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name-0)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 201) (parent 135) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca server_name-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk server_name-0) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 202) (parent 135) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca server_name-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name-0))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3)) ((5 0) (4 2)) ((6 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk server_name-0) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name-0)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 203) (parent 135) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name ca-0 server_name-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk ca-0) (privk server_name-0) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 6 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 204) (parent 135) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 2)) ((7 0) (0 3))) (non-orig (privk ca) (privk server_name) (privk client_name) (privk ca-0) (privk server_name-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 205) (parent 135) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 206) (parent 136) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 207) (parent 136) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3)) ((5 0) (4 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 208) (parent 136) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 3)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 6 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 209) (parent 136) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 2)) ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3)) ((7 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 210) (parent 136) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 211) (parent 137) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 212) (parent 137) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3)) ((5 0) (4 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 213) (parent 137) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 3)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 6 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 214) (parent 137) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3)) ((7 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 215) (parent 137) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((5 0) (4 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 216) (parent 138) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((5 0) (4 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 217) (parent 138) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((5 0) (4 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 218) (parent 138) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((5 0) (4 2)) ((6 0) (0 3)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 6 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 219) (parent 138) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((5 0) (4 2)) ((6 0) (4 3)) ((7 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 220) (parent 138) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 221) (parent 139) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 222) (parent 139) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3)) ((5 0) (4 2)) ((6 0) (0 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 223) (parent 139) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 7 6 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 224) (parent 139) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name client_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk client_name-0)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 2)) ((6 0) (4 3)) ((7 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk client_name-0))) (recv (enc nc ns (enc "hash_zero" (cat (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk client_name-0)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 225) (parent 139) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca server_name-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name-0))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3)) ((7 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk server_name-0) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 8 2 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name-0)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 226) (parent 140) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca server_name-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3)) ((7 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk server_name-0) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 8 3 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 227) (parent 140) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca server_name-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name-0))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3)) ((5 0) (4 2)) ((6 0) (4 3)) ((7 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk server_name-0) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 8 5 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name-0)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 228) (parent 140) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (server_name ca server_name-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 3)) ((6 0) (4 3)) ((7 0) (0 2))) (non-orig (privk server_name) (privk ca) (privk server_name-0) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 8 6 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 229) (parent 140) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name ca-0 server_name-0 client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3)) ((7 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk ca-0) (privk server_name-0) (privk client_name)) (uniq-orig ns pms) (operation encryption-test (displaced 8 7 certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 230) (parent 140) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name ca-0 server_name-0 client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name-0) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name-0)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3)) ((7 0) (0 2)) ((8 0) (0 3))) (non-orig (privk ca) (privk server_name) (privk client_name) (privk ca-0) (privk server_name-0) (privk client_name-0)) (uniq-orig ns pms) (operation encryption-test (added-strand certificate_auth 1) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)) (0 3)) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name-0))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name-0))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name-0)))) (privk client_name-0)))) ((send (cat server_name-0 (pubk server_name-0) (enc (enc "hash_zero" (cat "cert" server_name-0 (pubk server_name-0))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 231) (parent 140) (unrealized (0 4) (0 5)) (comment "1 in cohort - 1 not yet seen")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name))))) (label 232) (parent 151) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name))))) (label 233) (parent 152) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 234) (parent 153) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 235) (parent 154) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 236) (parent 155) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca ca-0 server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2))) (non-orig (privk ca) (privk ca-0) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 237) (parent 156) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca client_name ca-0 server_name client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((6 0) (0 3))) (non-orig (privk ca) (privk client_name) (privk ca-0) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 238) (parent 157) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name))))) (label 239) (parent 162) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name))))) (label 240) (parent 163) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3)) ((5 0) (4 3))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 241) (parent 164) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 242) (parent 165) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((2 0) (3 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2)) ((4 0) (3 3))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 243) (parent 166) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 2)) ((5 0) (4 3))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 244) (parent 167) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (3 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2)) ((4 0) (3 3))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 245) (parent 168) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (3 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 2)) ((4 0) (3 3)) ((5 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 246) (parent 169) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3)) ((6 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 247) (parent 170) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3)) ((6 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 248) (parent 171) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3)) ((5 0) (4 3)) ((6 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 249) (parent 172) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca ca-0 server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name client_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3)) ((6 0) (0 2))) (non-orig (privk ca) (privk ca-0) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 250) (parent 173) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca client_name ca-0 server_name client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (4 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 3)) ((6 0) (0 2)) ((7 0) (0 3))) (non-orig (privk ca) (privk client_name) (privk ca-0) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 251) (parent 174) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 252) (parent 185) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 3)) ((4 0) (3 2)) ((5 0) (0 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 253) (parent 186) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca ca-0 server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 2))) (non-orig (privk ca) (privk ca-0) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 254) (parent 187) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca client_name ca-0 server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((2 0) (3 3)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 2)) ((6 0) (0 3))) (non-orig (privk ca) (privk client_name) (privk ca-0) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 255) (parent 188) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 256) (parent 193) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 257) (parent 194) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 258) (parent 195) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 259) (parent 196) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 260) (parent 201) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 261) (parent 202) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3)) ((5 0) (4 2)) ((6 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 262) (parent 203) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca ca-0 server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 2))) (non-orig (privk ca) (privk ca-0) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 263) (parent 204) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca client_name ca-0 server_name client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((3 0) (4 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 2)) ((7 0) (0 3))) (non-orig (privk ca) (privk client_name) (privk ca-0) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 264) (parent 205) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 265) (parent 211) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 266) (parent 212) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3)) ((5 0) (4 2))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 267) (parent 213) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 3)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 268) (parent 214) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 269) (parent 215) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 2)) ((5 0) (3 3))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 270) (parent 221) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 2)) ((6 0) (4 3))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 271) (parent 222) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (0 3)) ((4 0) (3 2)) ((5 0) (0 2)) ((5 0) (3 3))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 272) (parent 223) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 2)) ((5 0) (3 3))) (non-orig (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 273) (parent 224) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (client_name ca server_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 4) (0 4)) ((3 4) (1 4)) ((3 5) (1 5)) ((4 0) (3 2)) ((5 0) (0 2)) ((5 0) (3 3)) ((6 0) (0 3))) (non-orig (privk client_name) (privk ca) (privk server_name)) (uniq-orig ns pms) (operation nonce-test (contracted (client_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 274) (parent 225) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (0 3)) ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3)) ((7 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 275) (parent 226) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (0 3)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3)) ((7 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 276) (parent 227) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (0 3)) ((5 0) (4 2)) ((6 0) (4 3)) ((7 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 277) (parent 228) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (0 3)) ((6 0) (4 3)) ((7 0) (0 2))) (non-orig (privk ca) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 278) (parent 229) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca ca-0 server_name client_name name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name server_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk server_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3)) ((7 0) (0 2))) (non-orig (privk ca) (privk ca-0) (privk server_name) (privk client_name)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk server_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))))) (label 279) (parent 230) (unrealized (0 5)) (comment "empty cohort")) (defskeleton tls4 (vars (ns nc ns-0 nc-0 text) (ca client_name ca-0 server_name client_name-0 name) (pms skey)) (defstrand server 6 (ns ns) (nc nc) (ca ca) (server_name server_name) (client_name client_name) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name))) (defstrand server 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand client 6 (ns ns-0) (nc nc-0) (ca ca-0) (server_name server_name) (client_name client_name-0) (pre_master_secret pms) (server_key (pubk server_name)) (client_key (pubk client_name-0))) (defstrand certificate_auth 1 (subject_name server_name) (ca ca-0)) (defstrand certificate_auth 1 (subject_name client_name-0) (ca ca-0)) (defstrand certificate_auth 1 (subject_name server_name) (ca ca)) (defstrand certificate_auth 1 (subject_name client_name) (ca ca)) (precedes ((2 0) (1 2)) ((3 0) (1 3)) ((4 4) (0 4)) ((4 4) (1 4)) ((4 5) (1 5)) ((5 0) (4 2)) ((6 0) (4 3)) ((7 0) (0 2)) ((8 0) (0 3))) (non-orig (privk ca) (privk client_name) (privk ca-0) (privk server_name) (privk client_name-0)) (uniq-orig ns pms) (operation nonce-test (contracted (server_name-0 server_name)) pms (0 4) (enc "client_version" pms (pubk server_name))) (traces ((recv nc) (send ns) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca)))) (recv (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc ns (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))) (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca))) (enc "client_version" pms (pubk server_name)))) (privk client_name)))) ((recv nc-0) (send ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (recv (enc "client_version" pms (pubk server_name))) (recv (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send nc-0) (recv ns-0) (recv (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0)))) (recv (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0)))) (send (enc "client_version" pms (pubk server_name))) (send (enc nc-0 ns-0 (enc "hash_zero" (cat (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))) (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))) (enc "client_version" pms (pubk server_name)))) (privk client_name-0)))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca-0))))) ((send (cat client_name-0 (pubk client_name-0) (enc (enc "hash_zero" (cat "cert" client_name-0 (pubk client_name-0))) (privk ca-0))))) ((send (cat server_name (pubk server_name) (enc (enc "hash_zero" (cat "cert" server_name (pubk server_name))) (privk ca))))) ((send (cat client_name (pubk client_name) (enc (enc "hash_zero" (cat "cert" client_name (pubk client_name))) (privk ca)))))) (label 280) (parent 231) (unrealized (0 5)) (comment "empty cohort")) (comment "Nothing left to do")