(* Denning-Sacco
   In this model, I separate the keys for encryption and the
   keys for signature, which complicates the model. *)

free c: channel.

fun priv_constr(bitstring):bitstring [private, data].

(* Queries *)

free a: bitstring [private].
query attacker(a).



process 
	out(c, priv_constr(a))

(* EXPECTPV
Error: a function cannot be declared both data or typeConverter and private.
xtime: error in child process (status : 2)
END *)
