claim needhamschroederpk-Lowe,R Nisynch_R3 - Fail [at least 3 attacks] claim needhamschroederpk-Lowe,R Secret_R2 Ni Ok [proof of correctness] claim needhamschroederpk-Lowe,R Secret_R1 Nr Ok [proof of correctness] claim needhamschroederpk-Lowe,I Nisynch_I3 - Fail [at least 3 attacks] claim needhamschroederpk-Lowe,I Secret_I2 Nr Ok [proof of correctness] claim needhamschroederpk-Lowe,I Secret_I1 Ni Ok [proof of correctness] claim spliceAS,R Nisynch_12 - Fail [at least 1 attack] claim spliceAS,R Niagree_11 - Fail [at least 1 attack] claim spliceAS,R Secret_8 N2 Ok [proof of correctness] claim spliceAS,I Nisynch_10 - Fail [at least 1 attack] claim spliceAS,I Niagree_9 - Fail [at least 1 attack] claim spliceAS,I Secret_7 N2 Ok [proof of correctness] claim kaochow-2,R Secret_R3 kir Ok [no attack within bounds] claim kaochow-2,R Niagree_R2 - Fail [at least 2 attacks] claim kaochow-2,R Nisynch_R1 - Fail [at least 2 attacks] claim kaochow-2,I Secret_I3 kir Ok [proof of correctness] claim kaochow-2,I Niagree_I2 - Fail [at least 2 attacks] claim kaochow-2,I Nisynch_I1 - Fail [at least 2 attacks] claim yahalom-Lowe,R Nisynch_R2 - Ok [proof of correctness] claim yahalom-Lowe,R Secret_R1 Kir Ok [proof of correctness] claim yahalom-Lowe,I Nisynch_I2 - Ok [proof of correctness] claim yahalom-Lowe,I Secret_I1 Kir Ok [proof of correctness] claim otwayrees,R Nisynch_R2 - Fail [at least 1 attack] claim otwayrees,R Secret_R1 Kir Ok [proof of correctness] claim otwayrees,I Nisynch_I2 - Fail [at least 1 attack] claim otwayrees,I Secret_I1 Kir Ok [proof of correctness] claim smartright,R Nisynch_R1 - Fail [at least 1 attack] claim needhamschroedersk,R Nisynch_R3 - Fail [at least 2 attacks] claim needhamschroedersk,R Secret_R1 Kir Fail [at least 2 attacks] claim needhamschroedersk,I Nisynch_I3 - Ok [no attack within bounds] claim needhamschroedersk,I Secret_I2 Kir Ok [no attack within bounds] claim kaochow,R Secret_R3 kir Fail [at least 5 attacks] claim kaochow,R Niagree_R2 - Fail [at least 6 attacks] claim kaochow,R Nisynch_R1 - Fail [at least 6 attacks] claim kaochow,I Secret_I3 kir Ok [proof of correctness] claim kaochow,I Niagree_I2 - Fail [at least 2 attacks] claim kaochow,I Nisynch_I1 - Fail [at least 2 attacks] claim spliceAS-HC,R Nisynch_12 - Fail [at least 1 attack] claim spliceAS-HC,R Niagree_11 - Fail [at least 1 attack] claim spliceAS-HC,R Secret_8 N2 Ok [proof of correctness] claim spliceAS-HC,I Nisynch_10 - Fail [at least 1 attack] claim spliceAS-HC,I Niagree_9 - Fail [at least 1 attack] claim spliceAS-HC,I Secret_7 N2 Ok [proof of correctness] claim ccitt509-1,R Nisynch_3 - Ok [proof of correctness] claim ccitt509-3,R Secret_R3 Yb Ok [proof of correctness] claim ccitt509-3,R Secret_R2 Ya Ok [proof of correctness] claim ccitt509-3,R Nisynch_R1 - Fail [at least 4 attacks] claim ccitt509-3,I Secret_I3 Yb Ok [proof of correctness] claim ccitt509-3,I Secret_I2 Ya Ok [proof of correctness] claim ccitt509-3,I Nisynch_I1 - Ok [proof of correctness] claim denningSacco-Lowe,R Secret_R3 Kir Ok [no attack within bounds] claim denningSacco-Lowe,R Nisynch_R2 - Fail [at least 1 attack] claim denningSacco-Lowe,R Niagree_R1 - Ok [no attack within bounds] claim denningSacco-Lowe,I Secret_I3 Kir Ok [no attack within bounds] claim denningSacco-Lowe,I Nisynch_I2 - Fail [at least 1 attack] claim denningSacco-Lowe,I Niagree_I1 - Ok [no attack within bounds] claim yahalom-Paulson,R Nisynch_R2 - Fail [at least 1 attack] claim yahalom-Paulson,R Secret_R1 Kir Ok [proof of correctness] claim yahalom-Paulson,I Nisynch_I2 - Fail [exactly 1 attack] claim yahalom-Paulson,I Secret_I1 Kir Ok [proof of correctness] claim woolam,R Nisynch_R2 - Fail [at least 2 attacks] claim woolam,R Secret_R1 Kir Ok [proof of correctness] claim woolam,I Nisynch_I2 - Fail [at least 2 attacks] claim woolam,I Secret_I1 Kir Ok [proof of correctness] claim neustub-Hwang,R Nisynch_R3 - Fail [at least 1 attack] claim neustub-Hwang,R Niagree_R2 - Fail [at least 1 attack] claim neustub-Hwang,R Secret_R1 Kir Ok [proof of correctness] claim neustub-Hwang,I Nisynch_I3 - Fail [at least 1 attack] claim neustub-Hwang,I Niagree_I2 - Fail [at least 1 attack] claim neustub-Hwang,I Secret_I1 Kir Ok [proof of correctness] claim kaochow-3,R Secret_R3 kir Ok [no attack within bounds] claim kaochow-3,R Niagree_R2 - Fail [at least 2 attacks] claim kaochow-3,R Nisynch_R1 - Fail [at least 2 attacks] claim kaochow-3,I Secret_I3 kir Ok [proof of correctness] claim kaochow-3,I Niagree_I2 - Fail [at least 2 attacks] claim kaochow-3,I Nisynch_I1 - Fail [at least 2 attacks] claim woolamPi,R Nisynch_R1 - Fail [at least 4 attacks] claim ccitt509-ban3,R Nisynch_5 - Ok [proof of correctness] claim ccitt509-ban3,I Nisynch_4 - Ok [proof of correctness] claim ksl,R Nisynch_R3 - Fail [at least 1 attack] claim ksl,R Niagree_R2 - Fail [at least 1 attack] claim ksl,R Secret_R1 Kir Ok [proof of correctness] claim ksl,I Nisynch_I3 - Fail [at least 1 attack] claim ksl,I Niagree_I2 - Fail [at least 1 attack] claim ksl,I Secret_I1 Kir Ok [proof of correctness] claim ksl-Lowe,R Nisynch_R3 - Fail [at least 1 attack] claim ksl-Lowe,R Niagree_R2 - Fail [at least 1 attack] claim ksl-Lowe,R Secret_R1 Kir Ok [proof of correctness] claim ksl-Lowe,I Nisynch_I3 - Fail [at least 1 attack] claim ksl-Lowe,I Niagree_I2 - Fail [at least 1 attack] claim ksl-Lowe,I Secret_I1 Kir Ok [proof of correctness] claim neustub,R Nisynch_R3 - Fail [at least 2 attacks] claim neustub,R Niagree_R2 - Fail [at least 2 attacks] claim neustub,R Secret_R1 Kir Ok [proof of correctness] claim neustub,I Nisynch_I3 - Ok [proof of correctness] claim neustub,I Niagree_I2 - Ok [proof of correctness] claim neustub,I Secret_I1 Kir Ok [proof of correctness] claim neustub^Repeat,R Nisynch_R3 - Fail [at least 3 attacks] claim neustub^Repeat,R Niagree_R2 - Fail [at least 3 attacks] claim neustub^Repeat,R Secret_R1 Kir Ok [proof of correctness] claim neustub^Repeat,I Nisynch_I3 - Fail [at least 1 attack] claim neustub^Repeat,I Niagree_I2 - Fail [at least 1 attack] claim neustub^Repeat,I Secret_I1 Kir Ok [proof of correctness] claim woolamPi-f,R Nisynch_R1 - Fail [at least 1 attack] claim ccitt509-1c,R Nisynch_3 - Ok [proof of correctness] claim denningSacco,R Secret_R3 Kir Ok [no attack within bounds] claim denningSacco,R Nisynch_R2 - Fail [at least 1 attack] claim denningSacco,R Niagree_R1 - Ok [no attack within bounds] claim denningSacco,I Secret_I3 Kir Ok [no attack within bounds] claim denningSacco,I Nisynch_I2 - Fail [at least 1 attack] claim denningSacco,I Niagree_I1 - Ok [no attack within bounds] claim spliceAS-CJ,R Nisynch_12 - Fail [at least 1 attack] claim spliceAS-CJ,R Niagree_11 - Fail [at least 1 attack] claim spliceAS-CJ,R Secret_8 N2 Ok [proof of correctness] claim spliceAS-CJ,I Nisynch_10 - Fail [at least 1 attack] claim spliceAS-CJ,I Niagree_9 - Fail [at least 1 attack] claim spliceAS-CJ,I Secret_7 N2 Ok [proof of correctness] claim needhamschroedersk-amend,R Nisynch_R3 - Fail [at least 1 attack] claim needhamschroedersk-amend,R Secret_R1 Nr Ok [no attack within bounds] claim needhamschroedersk-amend,I Nisynch_I3 - Fail [at least 1 attack] claim needhamschroedersk-amend,I Secret_I2 Kir Ok [no attack within bounds] claim needhamschroedersk,R Nisynch_R3 - Fail [at least 2 attacks] claim needhamschroedersk,R Secret_R1 Kir Fail [at least 2 attacks] claim needhamschroedersk,I Nisynch_I3 - Ok [no attack within bounds] claim needhamschroedersk,I Secret_I2 Kir Ok [no attack within bounds] claim andrew-Concrete,R Nisynch_R2 - Fail [exactly 1 attack] claim andrew-Concrete,R Secret_R1 kir Ok [proof of correctness] claim andrew-Concrete,I Nisynch_I2 - Fail [exactly 1 attack] claim andrew-Concrete,I Secret_I1 kir Ok [proof of correctness] claim andrew-Ban,R Secret_R4 k(I,R) Ok [proof of correctness] claim andrew-Ban,R Secret_R3 kir Ok [proof of correctness] claim andrew-Ban,R Niagree_R2 - Ok [proof of correctness] claim andrew-Ban,R Nisynch_R1 - Ok [proof of correctness] claim andrew-Ban,I Secret_I4 k(I,R) Ok [proof of correctness] claim andrew-Ban,I Secret_I3 kir Ok [proof of correctness] claim andrew-Ban,I Niagree_I2 - Ok [proof of correctness] claim andrew-Ban,I Nisynch_I1 - Ok [proof of correctness] claim woolamPi-2,R Nisynch_R1 - Fail [at least 3 attacks] claim yahalom-BAN,R Nisynch_R2 - Fail [at least 2 attacks] claim yahalom-BAN,R Secret_R1 Kir Ok [proof of correctness] claim yahalom-BAN,I Nisynch_I2 - Fail [at least 1 attack] claim yahalom-BAN,I Secret_I1 Kir Ok [proof of correctness] claim tmn,R Nisynch_R2 - Fail [exactly 1 attack] claim tmn,R Secret_R1 Kr Fail [at least 5 attacks] claim tmn,I Nisynch_I2 - Fail [at least 2 attacks] claim tmn,I Secret_I1 Kr Fail [at least 6 attacks] claim woolamPi-1,R Nisynch_R1 - Fail [at least 2 attacks] claim andrew,R Niagree_R3 - Ok [proof of correctness] claim andrew,R Nisynch_R2 - Ok [proof of correctness] claim andrew,R Secret_R1 kir Ok [proof of correctness] claim andrew,I Niagree_I3 - Fail [at least 2 attacks] claim andrew,I Nisynch_I2 - Fail [at least 2 attacks] claim andrew,I Secret_I1 kir Fail [exactly 1 attack] claim woolamPi-3,R Nisynch_R1 - Fail [at least 2 attacks] claim andrew-LoweBan,R Secret_R2 kir Ok [proof of correctness] claim andrew-LoweBan,R Nisynch_R1 - Ok [proof of correctness] claim andrew-LoweBan,I Secret_I2 kir Ok [proof of correctness] claim andrew-LoweBan,I Nisynch_I1 - Ok [proof of correctness] claim wmf,R Nisynch_R2 - Fail [at least 5 attacks] claim wmf,R Secret_R1 Kir Ok [no attack within bounds] claim wmf,I Secret_I1 Kir Ok [proof of correctness] claim yahalom,R Nisynch_R2 - Fail [at least 1 attack] claim yahalom,R Secret_R1 Kir Ok [proof of correctness] claim yahalom,I Nisynch_I2 - Fail [at least 1 attack] claim yahalom,I Secret_I1 Kir Ok [proof of correctness] claim wmf-Lowe,R Nisynch_R2 - Fail [at least 5 attacks] claim wmf-Lowe,R Secret_R1 Kir Ok [no attack within bounds] claim wmf-Lowe,I Nisynch_I2 - Fail [at least 5 attacks] claim wmf-Lowe,I Secret_I1 Kir Ok [no attack within bounds] claim needhamschroederpk,R Nisynch_R3 - Fail [at least 3 attacks] claim needhamschroederpk,R Secret_R2 Ni Fail [at least 11 attacks] claim needhamschroederpk,R Secret_R1 Nr Fail [at least 11 attacks] claim needhamschroederpk,I Nisynch_I3 - Fail [at least 3 attacks] claim needhamschroederpk,I Secret_I2 Nr Ok [proof of correctness] claim needhamschroederpk,I Secret_I1 Ni Ok [proof of correctness] claim neustub,R Nisynch_R3 - Fail [at least 2 attacks] claim neustub,R Niagree_R2 - Fail [at least 2 attacks] claim neustub,R Secret_R1 Kir Ok [proof of correctness] claim neustub,I Nisynch_I3 - Fail [exactly 1 attack] claim neustub,I Niagree_I2 - Fail [exactly 1 attack] claim neustub,I Secret_I1 Kir Ok [proof of correctness] claim neustub^Repeat,R Nisynch_R3 - Fail [at least 3 attacks] claim neustub^Repeat,R Niagree_R2 - Fail [at least 3 attacks] claim neustub^Repeat,R Secret_R1 Kir Ok [proof of correctness] claim neustub^Repeat,I Nisynch_I3 - Fail [at least 1 attack] claim neustub^Repeat,I Niagree_I2 - Fail [at least 1 attack] claim neustub^Repeat,I Secret_I1 Kir Ok [proof of correctness] claim neustub,R Nisynch_R3 - Fail [at least 1 attack] claim neustub,R Niagree_R2 - Fail [at least 1 attack] claim neustub,R Secret_R1 Kir Ok [proof of correctness] claim neustub,I Nisynch_I3 - Ok [proof of correctness] claim neustub,I Niagree_I2 - Ok [proof of correctness] claim neustub,I Secret_I1 Kir Ok [proof of correctness] claim neustub^Repeat,R Nisynch_R3 - Ok [proof of correctness] claim neustub^Repeat,R Niagree_R2 - Ok [proof of correctness] claim neustub^Repeat,R Secret_R1 Kir Ok [proof of correctness] claim neustub^Repeat,I Nisynch_I3 - Ok [proof of correctness] claim neustub^Repeat,I Niagree_I2 - Ok [proof of correctness] claim neustub^Repeat,I Secret_I1 Kir Ok [proof of correctness] claim neustub-GuttmanHwang,R Nisynch_R3 - Ok [proof of correctness] claim neustub-GuttmanHwang,R Niagree_R2 - Ok [proof of correctness] claim neustub-GuttmanHwang,R Secret_R1 Kir Ok [proof of correctness] claim neustub-GuttmanHwang,I Nisynch_I3 - Ok [proof of correctness] claim neustub-GuttmanHwang,I Niagree_I2 - Ok [proof of correctness] claim neustub-GuttmanHwang,I Secret_I1 Kir Ok [proof of correctness] claim neustub-GuttmanHwang^Repeat,R Nisynch_R3 - Ok [proof of correctness] claim neustub-GuttmanHwang^Repeat,R Niagree_R2 - Ok [proof of correctness] claim neustub-GuttmanHwang^Repeat,R Secret_R1 Kir Ok [proof of correctness] claim neustub-GuttmanHwang^Repeat,I Nisynch_I3 - Ok [proof of correctness] claim neustub-GuttmanHwang^Repeat,I Niagree_I2 - Ok [proof of correctness] claim neustub-GuttmanHwang^Repeat,I Secret_I1 Kir Ok [proof of correctness] claim r5bound,R Secret_6 k2 Ok [proof of correctness] claim andrewBan,R Secret_10 k(I,R) Ok [proof of correctness] claim andrewBan,R Secret_9 kir Ok [proof of correctness] claim andrewBan,R Niagree_8b - Ok [proof of correctness] claim andrewBan,R Nisynch_8 - Ok [proof of correctness] claim andrewBan,I Secret_7 k(I,R) Ok [proof of correctness] claim andrewBan,I Secret_6 kir Ok [proof of correctness] claim andrewBan,I Niagree_5b - Ok [proof of correctness] claim andrewBan,I Nisynch_5 - Ok [proof of correctness] claim nsl3,R Nisynch_r4 - Ok [proof of correctness] claim nsl3,R Niagree_r3 - Ok [proof of correctness] claim nsl3,R Secret_r2 nr Ok [proof of correctness] claim nsl3,R Secret_r1 ni Ok [proof of correctness] claim nsl3,I Nisynch_i4 - Ok [proof of correctness] claim nsl3,I Niagree_i3 - Ok [proof of correctness] claim nsl3,I Secret_i2 nr Ok [proof of correctness] claim nsl3,I Secret_i1 ni Ok [proof of correctness] claim bkebroken,R Secret_5 kir Fail [at least 2 attacks] claim bkebroken,I Secret_4 kir Ok [proof of correctness] claim spliceAS,S Nisynch_12 - Fail [at least 1 attack] claim spliceAS,S Niagree_11 - Fail [at least 1 attack] claim spliceAS,S Secret_8 N2 Fail [at least 8 attacks] claim spliceAS,C Nisynch_10 - Fail [at least 1 attack] claim spliceAS,C Niagree_9 - Fail [at least 1 attack] claim spliceAS,C Secret_7 N2 Fail [at least 10 attacks] claim bkeONE,R Secret_5 kir Ok [proof of correctness] claim bkeONE,I Secret_4 kir Ok [proof of correctness] claim carkeyni,R Nisynch_2 - Ok [proof of correctness] claim nsl7,R Secret_5 nr Ok [proof of correctness] claim nsl7,R Secret_4 ni Ok [proof of correctness] claim ns3brutus,R Secret_5 ni Fail [exactly 1 attack] claim ns3brutus,I Secret_4 nr Ok [proof of correctness] claim woolampif,B Nisynch_7 - Fail [at least 1 attack] claim woolampif,B Niagree_6 - Fail [exactly 1 attack] claim yahalomBan,B Secret_6 kab Fail [at least 2 attacks] claim yahalomBan,A Secret_5 kab Fail [at least 1 attack] claim boyd,R Nisynch_12 - Fail [at least 2 attacks] claim boyd,R Niagree_11 - Fail [at least 2 attacks] claim boyd,R Secret_10 m(ks,ni,nr) Ok [proof of correctness] claim boyd,I Nisynch_8 - Fail [at least 2 attacks] claim boyd,I Niagree_7 - Fail [at least 2 attacks] claim boyd,I Secret_6 m(ks,ni,nr) Ok [proof of correctness] claim f4,I Niagree_i1 - Ok [does not occur] claim onetrace,I Secret_4 input Fail [exactly 1 attack] claim spliceAShc,S Nisynch_12 - Fail [at least 1 attack] claim spliceAShc,S Niagree_11 - Fail [at least 1 attack] claim spliceAShc,S Secret_8 N2 Fail [at least 8 attacks] claim spliceAShc,C Nisynch_10 - Fail [at least 1 attack] claim spliceAShc,C Niagree_9 - Fail [at least 1 attack] claim spliceAShc,C Secret_7 N2 Fail [at least 10 attacks] claim isoiec11770213,R Secret_6 kir Ok [proof of correctness] claim isoiec11770213,I Secret_5 kir Ok [proof of correctness] claim gongnonceb,R Niagree_13 - Fail [at least 2 attacks] claim gongnonceb,R Nisynch_12 - Fail [at least 2 attacks] claim gongnonceb,R Secret_11 kr Ok [proof of correctness] claim gongnonceb,R Secret_10 ki Ok [proof of correctness] claim gongnonceb,I Niagree_9 - Fail [at least 2 attacks] claim gongnonceb,I Nisynch_8 - Fail [at least 2 attacks] claim gongnonceb,I Secret_7 kr Ok [proof of correctness] claim gongnonceb,I Secret_6 ki Ok [proof of correctness] claim yahalompaulson,R Niagree_13 - Fail [at least 1 attack] claim yahalompaulson,R Nisynch_12 - Fail [at least 1 attack] claim yahalompaulson,R Secret_11 kir Ok [proof of correctness] claim yahalompaulson,I Niagree_10 - Fail [exactly 1 attack] claim yahalompaulson,I Nisynch_9 - Fail [exactly 1 attack] claim yahalompaulson,I Secret_8 kir Ok [proof of correctness] claim ksl,B Nisynch_B3 - Fail [at least 1 attack] claim ksl,B Niagree_B2 - Fail [at least 1 attack] claim ksl,B Secret_B1 Kab Ok [proof of correctness] claim ksl,A Nisynch_A3 - Fail [at least 1 attack] claim ksl,A Niagree_A2 - Fail [at least 1 attack] claim ksl,A Secret_A1 Kab Ok [proof of correctness] claim denningsaccosh,B Niagree_9 - Ok [no attack within bounds] claim denningsaccosh,B Nisynch_8 - Fail [at least 1 attack] claim denningsaccosh,B Secret_7 kab Ok [no attack within bounds] claim denningsaccosh,A Niagree_6 - Ok [no attack within bounds] claim denningsaccosh,A Nisynch_5 - Fail [at least 1 attack] claim denningsaccosh,A Secret_4 kab Ok [no attack within bounds] claim woolamcmv,S Secret_14 Kab Ok [proof of correctness] claim woolamcmv,B Nisynch_13 - Fail [at least 2 attacks] claim woolamcmv,B Niagree_12 - Fail [at least 2 attacks] claim woolamcmv,B Secret_11 Kab Ok [proof of correctness] claim woolamcmv,A Nisynch_10 - Fail [at least 2 attacks] claim woolamcmv,A Niagree_9 - Fail [at least 2 attacks] claim woolamcmv,A Secret_8 Kab Ok [proof of correctness] claim f4,I Niagree_i1 - Ok [does not occur] claim carkeybrokenlim,R Nisynch_2 - Fail [exactly 1 attack] claim andrewLoweBan,R Secret_10 k(I,R) Ok [proof of correctness] claim andrewLoweBan,R Secret_9 kir Ok [proof of correctness] claim andrewLoweBan,R Niagree_8b - Ok [proof of correctness] claim andrewLoweBan,R Nisynch_8 - Ok [proof of correctness] claim andrewLoweBan,I Secret_7 k(I,R) Ok [proof of correctness] claim andrewLoweBan,I Secret_6 kir Ok [proof of correctness] claim andrewLoweBan,I Niagree_5b - Fail [exactly 1 attack] claim andrewLoweBan,I Nisynch_5 - Fail [exactly 1 attack] claim course2r890year0405ex3,I Nisynch_i2 - Ok [proof of correctness] claim course2r890year0405ex3,I Niagree_i1 - Ok [proof of correctness] claim ccitt509,R Niagree_11 - Ok [proof of correctness] claim ccitt509,R Nisynch_10 - Ok [proof of correctness] claim ccitt509,R Secret_9 yr Ok [proof of correctness] claim ccitt509,R Secret_8 yi Ok [proof of correctness] claim ccitt509,I Niagree_7 - Ok [proof of correctness] claim ccitt509,I Nisynch_6 - Ok [proof of correctness] claim ccitt509,I Secret_5 yr Ok [proof of correctness] claim ccitt509,I Secret_4 yi Ok [proof of correctness] claim simplest,I Secret_3 n Fail [exactly 1 attack] claim sophkx,I Secret_4 kir Ok [proof of correctness] claim bunava23,R2 Nisynch_C2 - Fail [at least 3 attacks] claim bunava23,R2 Niagree_C1 - Fail [at least 3 attacks] claim bunava23,R1 Nisynch_B2 - Fail [at least 2 attacks] claim bunava23,R1 Niagree_B1 - Fail [at least 2 attacks] claim bunava23,R0 Nisynch_A2 - Fail [at least 1 attack] claim bunava23,R0 Niagree_A1 - Fail [at least 1 attack] claim wmfbrutus,B Secret_3 kab Ok [proof of correctness] claim kaochow2,R Secret_10 kir Ok [no attack within bounds] claim kaochow2,R Niagree_9 - Fail [at least 2 attacks] claim kaochow2,R Nisynch_8 - Fail [at least 2 attacks] claim kaochow2,I Secret_7 kir Ok [proof of correctness] claim kaochow2,I Niagree_6 - Fail [at least 2 attacks] claim kaochow2,I Nisynch_5 - Fail [at least 2 attacks] claim otwayrees,B Nisynch_6b - Fail [at least 1 attack] claim otwayrees,B Niagree_6a - Fail [at least 1 attack] claim otwayrees,B Secret_6 kab Ok [proof of correctness] claim otwayrees,A Nisynch_5c - Fail [at least 1 attack] claim otwayrees,A Niagree_5b - Fail [at least 1 attack] claim otwayrees,A Secret_5 kab Ok [proof of correctness] claim kaochowPalm,R Secret_10 kir Ok [no attack within bounds] claim kaochowPalm,R Niagree_9 - Ok [no attack within bounds] claim kaochowPalm,R Nisynch_8 - Ok [no attack within bounds] claim kaochowPalm,I Secret_7 kir Ok [no attack within bounds] claim kaochowPalm,I Niagree_6 - Fail [at least 1 attack] claim kaochowPalm,I Nisynch_5 - Fail [at least 1 attack] claim as3a,I Nisynch_i1 - Ok [proof of correctness] claim samascbroken,R Secret_4 kir Ok [proof of correctness] claim tmn,B Secret_6 Kb Fail [at least 3 attacks] claim tmn,S Secret_7 Ka Fail [at least 5 attacks] claim tmn,B Secret_6 Kb Fail [at least 3 attacks] claim tmn,A Secret_8 Kb Fail [at least 5 attacks] claim tmn,A Secret_5 Ka Fail [at least 5 attacks] claim nssymmetricamended,B Nisynch_9b - Fail [at least 1 attack] claim nssymmetricamended,B Niagree_9a - Fail [at least 1 attack] claim nssymmetricamended,B Secret_9 kab Ok [no attack within bounds] claim nssymmetricamended,A Nisynch_8b - Fail [at least 1 attack] claim nssymmetricamended,A Niagree_8a - Fail [at least 1 attack] claim nssymmetricamended,A Secret_8 kab Ok [no attack within bounds] claim nssymmetric,B Secret_7 kab Ok [no attack within bounds] claim nssymmetric,A Secret_6 kab Ok [no attack within bounds] claim gongnonce,R Niagree_13 - Fail [at least 1 attack] claim gongnonce,R Nisynch_12 - Fail [at least 1 attack] claim gongnonce,R Secret_11 kr Ok [proof of correctness] claim gongnonce,R Secret_10 ki Ok [proof of correctness] claim gongnonce,I Niagree_9 - Fail [at least 1 attack] claim gongnonce,I Nisynch_8 - Fail [at least 1 attack] claim gongnonce,I Secret_7 kr Ok [proof of correctness] claim gongnonce,I Secret_6 ki Ok [proof of correctness] claim course2r890year0405ex3,I Nisynch_i2 - Fail [exactly 1 attack] claim course2r890year0405ex3,I Niagree_i1 - Ok [proof of correctness] claim kaochow,R Secret_10 kir Ok [no attack within bounds] claim kaochow,R Niagree_9 - Fail [at least 2 attacks] claim kaochow,R Nisynch_8 - Fail [at least 2 attacks] claim kaochow,I Secret_7 kir Ok [proof of correctness] claim kaochow,I Niagree_6 - Fail [at least 2 attacks] claim kaochow,I Nisynch_5 - Fail [at least 2 attacks] claim lcbreakerS1,R Secret_r2 nr Ok [no attack within bounds] claim lcbreakerS1,R Secret_r1 ni Ok [no attack within bounds] claim lcbreakerS1,R Secret_r0 ni2 Fail [at least 3 attacks] claim lcbreakerS1,I Secret_i2 nr Ok [no attack within bounds] claim lcbreakerS1,I Secret_i1 ni Ok [no attack within bounds] claim lcbreakerS1,I Secret_i0 ni2 Fail [at least 1 attack] claim bkevariation,R Nisynch_9 - Fail [at least 1 attack] claim bkevariation,R Niagree_8 - Fail [at least 1 attack] claim bkevariation,R Secret_7 kir Ok [proof of correctness] claim bkevariation,I Nisynch_6 - Ok [proof of correctness] claim bkevariation,I Niagree_5 - Ok [proof of correctness] claim bkevariation,I Secret_4 kir Ok [proof of correctness] claim yahalomlowe,R Niagree_13 - Ok [proof of correctness] claim yahalomlowe,R Nisynch_12 - Ok [proof of correctness] claim yahalomlowe,R Secret_11 kir Ok [proof of correctness] claim yahalomlowe,I Nisynch_10 - Ok [proof of correctness] claim yahalomlowe,I Niagree_9 - Ok [proof of correctness] claim yahalomlowe,I Secret_8 kir Ok [proof of correctness] claim broken1,R Secret_4 PlainSight Fail [at least 1 attack] claim bke,R Nisynch_9 - Ok [proof of correctness] claim bke,R Niagree_8 - Ok [proof of correctness] claim bke,R Secret_7 kir Ok [proof of correctness] claim bke,I Nisynch_6 - Ok [proof of correctness] claim bke,I Niagree_5 - Ok [proof of correctness] claim bke,I Secret_4 kir Ok [proof of correctness] claim spliceAShcCJ,S Nisynch_12 - Fail [at least 1 attack] claim spliceAShcCJ,S Niagree_11 - Fail [at least 1 attack] claim spliceAShcCJ,S Secret_8 N2 Ok [proof of correctness] claim spliceAShcCJ,C Nisynch_10 - Fail [at least 1 attack] claim spliceAShcCJ,C Niagree_9 - Fail [at least 1 attack] claim spliceAShcCJ,C Secret_7 N2 Ok [no attack within bounds] claim carkeyni2,R Nisynch_4 - Fail [exactly 1 attack] claim soph,I Niagree_3 - Ok [proof of correctness] claim bunava13,R2 Nisynch_C2 - Fail [at least 2 attacks] claim bunava13,R2 Niagree_C1 - Fail [at least 2 attacks] claim bunava13,R1 Nisynch_B2 - Fail [at least 2 attacks] claim bunava13,R1 Niagree_B1 - Fail [at least 2 attacks] claim bunava13,R0 Nisynch_A2 - Fail [at least 1 attack] claim bunava13,R0 Niagree_A1 - Fail [at least 1 attack] claim bunava24,A Nisynch_A2 - Fail [at least 1 attack] claim bunava24,A Niagree_A1 - Fail [at least 1 attack] claim kaochow3,R Secret_10 kir Ok [no attack within bounds] claim kaochow3,R Niagree_9 - Fail [at least 2 attacks] claim kaochow3,R Nisynch_8 - Fail [at least 2 attacks] claim kaochow3,I Secret_7 kir Ok [proof of correctness] claim kaochow3,I Niagree_6 - Fail [at least 2 attacks] claim kaochow3,I Nisynch_5 - Fail [at least 2 attacks] claim unknown2,R Secret_r3 kir Ok [proof of correctness] claim unknown2,R Niagree_r2 - Fail [at least 2 attacks] claim unknown2,R Nisynch_r1 - Fail [at least 2 attacks] claim unknown2,I Secret_i3 kir Ok [proof of correctness] claim unknown2,I Niagree_i2 - Fail [at least 1 attack] claim unknown2,I Nisynch_i1 - Fail [at least 1 attack] claim localclaims,R Secret_r1 ni Fail [exactly 1 attack] claim localclaims,I Secret_i1 ni Ok [proof of correctness] claim woolamce,B Secret_8 authToken Ok [proof of correctness] claim ns3speedtest,R Secret_5 ni Fail [exactly 1 attack] claim ns3speedtest,I Secret_4 nr Ok [proof of correctness] claim yahalom,B Secret_6 kab Ok [proof of correctness] claim yahalom,A Secret_5 kab Ok [proof of correctness] claim ns3,R Nisynch_r4 - Fail [exactly 1 attack] claim ns3,R Niagree_r3 - Fail [exactly 1 attack] claim ns3,R Secret_r2 nr Fail [exactly 1 attack] claim ns3,R Secret_r1 ni Fail [exactly 1 attack] claim ns3,I Nisynch_i4 - Ok [proof of correctness] claim ns3,I Niagree_i3 - Ok [proof of correctness] claim ns3,I Secret_i2 nr Ok [proof of correctness] claim ns3,I Secret_i1 ni Ok [proof of correctness] claim lcbreaker,R Secret_r2 nr Ok [no attack within bounds] claim lcbreaker,R Secret_r1 ni Ok [no attack within bounds] claim lcbreaker,I Secret_i2 nr Ok [no attack within bounds] claim lcbreaker,I Secret_i1 ni Ok [no attack within bounds] claim carkeybroken,R Nisynch_2 - Fail [exactly 1 attack] claim nsl3rep,R Nisynch_8 - Fail [at least 1 attack] claim nsl3rep,R Niagree_5 - Ok [proof of correctness] claim nsl3rep,I Nisynch_7 - Fail [at least 1 attack] claim nsl3rep,I Niagree_4 - Ok [proof of correctness] claim bunava14,D Nisynch_D2 - Fail [at least 2 attacks] claim bunava14,D Niagree_D1 - Fail [at least 2 attacks] claim bunava14,C Nisynch_C2 - Fail [at least 2 attacks] claim bunava14,C Niagree_C1 - Fail [at least 2 attacks] claim bunava14,B Nisynch_B2 - Fail [at least 2 attacks] claim bunava14,B Niagree_B1 - Fail [at least 2 attacks] claim bunava14,A Nisynch_A2 - Fail [at least 1 attack] claim bunava14,A Niagree_A1 - Fail [at least 1 attack] claim boydNS,R Nisynch_r4 - Fail [at least 1 attack] claim boydNS,R Niagree_r3 - Fail [at least 1 attack] claim boydNS,R Secret_r2 nr Ok [proof of correctness] claim boydNS,R Secret_r1 ni Fail [exactly 1 attack] claim boydNS,I Nisynch_i4 - Fail [at least 2 attacks] claim boydNS,I Niagree_i3 - Fail [at least 2 attacks] claim boydNS,I Secret_i2 nr Fail [exactly 1 attack] claim boydNS,I Secret_i1 ni Ok [proof of correctness] claim tlspaulson,b Secret_10b hash(sid,hash(pms,na,nb),na,pa,a,nb,pb,b,false) Ok [proof of correctness] claim tlspaulson,b Secret_10a hash(sid,hash(pms,na,nb),na,pa,a,nb,pb,b,true) Ok [proof of correctness] claim tlspaulson,a Secret_9b hash(sid,hash(pms,na,nb),na,pa,a,nb,pb,b,false) Ok [proof of correctness] claim tlspaulson,a Secret_9a hash(sid,hash(pms,na,nb),na,pa,a,nb,pb,b,true) Ok [proof of correctness] claim ibe,S Secret_s1 ibesecret(param(S),R) Ok [proof of correctness] claim ibe,R Nisynch_r4 - Ok [proof of correctness] claim ibe,R Niagree_r3 - Ok [proof of correctness] claim ibe,R Secret_r2 nr Ok [proof of correctness] claim ibe,R Secret_r1 ni Ok [proof of correctness] claim ibe,I Nisynch_i4 - Ok [proof of correctness] claim ibe,I Niagree_i3 - Ok [proof of correctness] claim ibe,I Secret_i2 nr Ok [proof of correctness] claim ibe,I Secret_i1 ni Ok [proof of correctness] claim ibe,R Secret_r1 ni Fail [at least 1 attack] claim ibe,I Secret_i1 ni Ok [proof of correctness] claim tlspaulson-avispa,b Niagree_10c - Ok [proof of correctness] claim tlspaulson-avispa,b Secret_10b keygen(a,na,nb,hash(pms,na,nb)) Ok [proof of correctness] claim tlspaulson-avispa,b Secret_10a keygen(b,na,nb,hash(pms,na,nb)) Ok [proof of correctness] claim tlspaulson-avispa,a Niagree_9c - Fail [at least 1 attack] claim tlspaulson-avispa,a Secret_9b keygen(a,na,nb,hash(pms,na,nb)) Ok [proof of correctness] claim tlspaulson-avispa,a Secret_9a keygen(b,na,nb,hash(pms,na,nb)) Ok [proof of correctness] claim nsl3th2,R Nisynch_r - Ok [proof of correctness] claim nsl3th2,I Nisynch_i - Ok [proof of correctness] claim nsl3th1,R Nisynch_r - Ok [proof of correctness] claim nsl3th1,I Nisynch_i - Ok [proof of correctness] claim nsl3th3,R Nisynch_r2 - Fail [at least 1 attack] claim nsl3th3,I Nisynch_i2 - Fail [at least 1 attack] claim nsl3th1,R Nisynch_r - Ok [proof of correctness] claim nsl3th1,I Nisynch_i - Ok [proof of correctness] claim nsl3th3nr,R Nisynch_r2 - Fail [at least 1 attack] claim nsl3th3nr,I Nisynch_i2 - Fail [at least 1 attack] claim nsl3th2,R Nisynch_r - Ok [proof of correctness] claim nsl3th2,I Nisynch_i - Ok [proof of correctness] claim nsl3th3ni,R Nisynch_r2 - Ok [no attack within bounds] claim nsl3th3ni,I Nisynch_i2 - Ok [proof of correctness] claim nsl3,R Nisynch_r4 - Ok [proof of correctness] claim nsl3,R Niagree_r3 - Ok [proof of correctness] claim nsl3,R Secret_r2 nr Ok [proof of correctness] claim nsl3,R Secret_r1 ni Ok [proof of correctness] claim nsl3,I Nisynch_i4 - Ok [proof of correctness] claim nsl3,I Niagree_i3 - Ok [proof of correctness] claim nsl3,I Secret_i2 nr Ok [proof of correctness] claim nsl3,I Secret_i1 ni Ok [proof of correctness] claim ns3,R Nisynch_r4 - Fail [exactly 1 attack] claim ns3,R Niagree_r3 - Fail [exactly 1 attack] claim ns3,R Secret_r2 nr Fail [exactly 1 attack] claim ns3,R Secret_r1 ni Fail [exactly 1 attack] claim ns3,I Nisynch_i4 - Ok [proof of correctness] claim ns3,I Niagree_i3 - Ok [proof of correctness] claim ns3,I Secret_i2 nr Ok [proof of correctness] claim ns3,I Secret_i1 ni Ok [proof of correctness]