Analysis of the Zhou-Gollmann protocol
n Non-Repudiation of Recipient:
evidence.a.{fNRR .a.l.c}SkbÝ in TrÝ a b sent (fNRR .a.l.c)
evidence.a.{fCON.a.b.l.k}Skj in TrÝ a receive.a.j. {fCON .a.b.l.k}Skj in Tr
n Non-Repudiation of Origin:
evidence.b.{fNRO .b.l.c}Ska in TrÝ a a sent (fNRO.b.l.c)
evidence.b.{fCON.a.b.l.k}Skj in TrÝ a a sent (fSUB.b.l.k)
n Again, these properties on traces can be proven
automatically