| Algorithm 9 Declaration and Queries |
| (* Channel specification *) free sch: channel [private]. free usch: channel. (* 5G functions *) fun f1, f2, f3, f4, f5. (* Secrecy verification *) Q0: query attacker (SUPI). Q1: query attacker (kseaf). (* Security requirements verification *) Q2: supi: bitstring, : pubKey, : pubKey; inj-event(endUE_HN_SUPI(supi, , )) ==> inj-event(beginUE_HN_SUPI(supi, , hnpk)). Q3: supi: bitstring, K: key, rand: pubKey, sqn: seq; inj-event(endUE_HN_MAC(supi, K, rand, sqn)) ==> inj-event(beginHN_UE_MAC(supi, K, rand, sqn)). Q4: supi: bitstring, K: key, rand: pubKey, sqn: seq, res’: bitstring, kseaf: key; inj-event(endSN_ANCHOR_KEY(supi, )) ==> (inj-event(middleHN_RES(supi, K, rand, sqn)) ==> (inj-event(middleSN_RES(res’, rand)) ==> inj-event(beginUE_RES(supi, K, rand, sqn)) |