Initial revision

spdl/tmn.spdl

@@ -0,0 +1,54 @@
+const pk: Function;
+secret sk: Function;
+inversekeys(pk,sk);
+
+protocol tmn(A,B,S)
+{
+	role A
+	{
+		const Ka: Key;
+		var Kb: Key;
+
+		send_1(A,S, B,{Ka}pk(S) );
+		read_4(S,A, B,{Kb}Ka );
+
+		claim(A,Ka,Kb);
+	}	
+	
+	role B
+	{
+		const Kb: Key;
+
+		read_2(S,B, A );
+		send_3(B,S, A, { Kb }pk(S) );
+
+		claim(B,Kb);
+	}
+
+	role S
+	{
+		var Ka,Kb: Key;
+
+		read_1(A,S, B,{Ka}pk(S) );
+		send_2(S,B, A );
+		read_3(B,S, A, { Kb }pk(S) );
+		send_4(S,A, B,{Kb}Ka );
+
+		//claim(S,Ka);
+	}
+}
+
+const Alice,Bob,Eve: Agent;
+const Simon: Server;
+
+untrusted Eve;
+compromised sk(Eve);
+
+run tmn.A (Agent,Agent,Simon);
+run tmn.A (Agent,Agent,Simon);
+run tmn.B (Agent,Agent,Simon);
+run tmn.B (Agent,Agent,Simon);
+run tmn.S (Agent,Agent,Simon);
+run tmn.S (Agent,Agent,Simon);
+
+