[Imprint][Data Privacy Statement][E-Mail]

Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Lemma dependency for Specification gen-RMATrans

A lemma (entry) may depend on lemmas (entries) below its position, but never on lemmas above its position. This means the list is a topological order of the dependency graph. An entry 'all subs proved' means that all used lemmas are (transitively) proved.

Name: Status: Subs proved? Used:
Securityprovedall subs proved lemma1, RMA-1, test,
lemma1provedall subs proved eqd-reflexivity, lemma1-gen, execl,
eqd-reflexivityprovedall subs proved eqd-def,
lemma1-genprovedall subs proved alter-observe-respects-policy, RMA-3, policy-respects-observe, RMA-2-weaker, eqd-def, purge-rec, run-rec, purge-base, run-base,
eqd-transitivityprovedall subs proved eqd-def,
eqd-symmetryprovedall subs proved eqd-def,
run-baseaxiom
purge-baseaxiom
run-recaxiom
purge-recaxiom
RMA-2-weakeraxiom
policy-respects-observeaxiom
RMA-3axiom
alter-observe-respects-policyaxiom
execlaxiom
eqd-defaxiom
testaxiom
RMA-1axiom