Index: examples/Makefile
===================================================================
--- examples/Makefile	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/Makefile	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,26 @@
+
+
+DIRECTORY=creddy_tests creddy_prover_tests
+.PHONY : runcheck clean 
+
+all: runcheck
+
+clean:
+	@printf "\n ==> make CLEAN \n" 
+	@for i in $(DIRECTORY); do \
+	here=`pwd`; \
+	cd $$i; \
+	make -s clean; \
+	cd $$here; \
+	done; 
+
+runcheck: 
+	@make -s clean
+	@printf "\n ==> make TESTS \n"
+	@for i in $(DIRECTORY); do \
+	here=`pwd`; \
+	cd $$i; \
+	make -s runcheck; \
+	cd $$here; \
+	done; 
+
Index: examples/acme_rockets/Acme_ID.pem
===================================================================
--- examples/acme_rockets/Acme_ID.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,19 +1,0 @@
------BEGIN CERTIFICATE-----
-MIIDBDCCAeygAwIBAgIJAPcs9Y6AAW/SMA0GCSqGSIb3DQEBBQUAMA8xDTALBgNV
-BAMTBEFjbWUwHhcNMTAwNzIyMDIwMTMxWhcNMTMwNzA2MDIwMTMxWjAPMQ0wCwYD
-VQQDEwRBY21lMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6hkgFaT
-ABHcjmduXo/bs6ldY+AYQStqyUgUSVXB08zgN+h6iycB6LOz2SbF6UjAUN+hkG/4
-Gse7ew8plDyx7jTl/qndE/CLgXmDg6gHJE4EpZAN+CM3iSJGjvEvrsALkZDdfR6L
-dG4MWd+m0Fkiwqoav+PeTQVoevahIpkSWogxwSYLOS8fcJPZmzZuF8n+ABF2Lfvh
-GjrcjnBxxpjWHUYL+TvnS21F20NUCDh+9vUM/q4dNiZHiNBCtDtrtsc3UDSYh5d/
-2ceBHXH+dmUL3PEIZDZCR8j9PARxLkZh/iUIomWoRtrUqgZnjXUbV1jIGtvpiYA0
-b9iKOuJyRV9ZTQIDAQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQE
-AwIBBjAdBgNVHQ4EFgQUuy8vNUTapE+fjztc0tjXH23Cl00wHwYDVR0jBBgwFoAU
-uy8vNUTapE+fjztc0tjXH23Cl00wDQYJKoZIhvcNAQEFBQADggEBAFW/sezE4xHy
-17FcjFCR7yeTTL73oOOvFg7bpYFEQxDtikYYMh6W4ddxTrZt+zsEkV7WqiXoIUTZ
-+XCo2lj0WNqh+JrWiO6hmluRHeV4XiEhwGi7rpTpv+L2CmwnfSmRI+BGPWnxxxKy
-GFcGVlBHHb81HnKP5wCJ0z1Lwsm9wVBmkLg3/hLr0zhMU6JZ/GLGfHxVAWp4wjji
-BXvOHQrFq8cNR5uZcEeTGspYFk1ePbVinCSczX9c7vET84zcsn+I9ZsBkovDYL++
-Ld6TVDgVS19uVywH+V4UxOTC/bdP12iEcxHzDK4DlZa+P8RkjpsSaAXeyahGeM/X
-EJIY8WKc1WU=
------END CERTIFICATE-----
Index: examples/acme_rockets/Acme_private.pem
===================================================================
--- examples/acme_rockets/Acme_private.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,27 +1,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEogIAAoIBAQCvqGSAVpMAEdyOZ25ej9uzqV1j4BhBK2rJSBRJVcHTzOA36HqL
-JwHos7PZJsXpSMBQ36GQb/gax7t7DymUPLHuNOX+qd0T8IuBeYODqAckTgSlkA34
-IzeJIkaO8S+uwAuRkN19Hot0bgxZ36bQWSLCqhq/495NBWh69qEimRJaiDHBJgs5
-Lx9wk9mbNm4Xyf4AEXYt++EaOtyOcHHGmNYdRgv5O+dLbUXbQ1QIOH729Qz+rh02
-JkeI0EK0O2u2xzdQNJiHl3/Zx4Edcf52ZQvc8QhkNkJHyP08BHEuRmH+JQiiZahG
-2tSqBmeNdRtXWMga2+mJgDRv2Io64nJFX1lNAgMBAAECggEABdDWTFYmys9MlUhr
-uTobxOXcH4o+s1Wr1PCL1Lu/+Ee7EA7PPoaIQ9CYqUgP2xVGDMdtXXoKOwoW39BU
-3kFo22FT+2uwqVAtsO05g0/lC04r+DaonRO+wHhqi/avT01bdLKDqs3/7FcXwJgC
-OWQMyGjXtuJlV057suqHKOfsLs7FH9mrU7T+CVw/PrPLsTUNI1re7BM/YWPFO9WI
-Rq+ZDZC7vVJjqqbeJjNHrtNAy8H7Owt5QKaFX1RIcJQF3kKnOFohaOErZyaRI6N/
-Yy75y3BRh420lKH87fQcsn4OS1jef9X4++4OCA65WTixWMxk1V+JYI8h11jloyGs
-6sqADwKBgQDpQivraSXohmr3Vulimm//VKWkYSO6g6BJbGQJ/395HIq/fONoCfr2
-WAUtS2+6ftMTizhcuJN+m3hoEw9U78jH6i/v6LoNmc1jBOz5ol8+r7JHQ0hf2DWg
-59FnbPW+n5Hd5XAXlPELZd58wGWW98j3Ut6yndqBHxcdKVd16DdhSwKBgQDAyJUc
-fAPlcjzKZrUY5l2XgYRdxZaO7TlDzD6c9is6nJczJwyyBapL7QV+pA4WP69qdFcj
-1fzjBMiSvH1EOcmK3i4jOMMuh7aZFjj1BFopJ0EKBFSSTmUk2F96yeXUxph0c8te
-aDWnHfVzr4BbtccdFWt/Y50UdLY4OqlwXP0oxwKBgEXvOf3Fs8DodC+eFjEi/os+
-FL+ZBD5KcocxATliKhTkstDAn+m0fFLZhwvSfzgaCCzm48og6M/fyxThCgq8LaWK
-mD7EtuuW/lY+xtH9lbLUuI3XJV7fEw0gE89/gppZe0FdJeNcG30AWNlsUckWl2FX
-rj89RqLJ8IMkvv0x11DLAoGBAIVMbCYE7iDBi50bxU6RQteWe3LnQ4JSLw1c9VJM
-uHlPexCoiJOzbRwQqIL3ZrIlmOIPzYz+0lwam6EyaZ86Icw+ckJyZisPNcfGYN2y
-A7F+7e7CLcP4JuGCJwrc/WjRZOrogg8mGSsTgPtbt3IyT5ohjHHJ6/wP80sP7Ma/
-1WBTAoGAetG74CYquLCqoJ4o/s74YEB5zYi1UirFSiT81I12VkSSV5kH+XkgRXMu
-1VGW170v8kMrWLxtkRQ71CzPIIok86Lr0wob7htiL2fqXDhL8SgOP+UneYb3LBQ8
-37DB+WTuSLG1YcBQkSFRnM0y/JmPGRt0AGenc801+K92cfBm0AE=
------END RSA PRIVATE KEY-----
Index: examples/acme_rockets/Coyote_ID.pem
===================================================================
--- examples/acme_rockets/Coyote_ID.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,19 +1,0 @@
------BEGIN CERTIFICATE-----
-MIIDCDCCAfCgAwIBAgIJANG3XXugQWuxMA0GCSqGSIb3DQEBBQUAMBExDzANBgNV
-BAMTBkNveW90ZTAeFw0xMDA3MjIwMjAyMTRaFw0xMzA3MDYwMjAyMTRaMBExDzAN
-BgNVBAMTBkNveW90ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN85
-+TU4HwmFWkqiP5TCs5uVLby0DxoO2lQgPFKkUKgpFPgVQiqDP1NPNpiwQMKB+6CU
-gSv1NcvNx8y6bpmnF7RyaDzk5JWNv4XjzacbdF6VYcKMR93C7fKg420Npv4+OYYV
-7fuOxlKBuKGGcnlms38nHgXn4lBnWYgg3M2nIJiOvAhkL6VI1zXt6D16CIjzUsO9
-D5cX01bXiDDOaydmFzyMaiqEUbf2ne659PNTHuSfUmfbUKZVajH2Jyj/KEGb5Eik
-hGaFmM5UWB/xkaycE1jv6j4lT9YpLXR9dnClmGVNnq68KFAsLLS4zUrAoFy/5OFB
-Wkt5moyNXSEb0Oh2GgMCAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8B
-Af8EBAMCAQYwHQYDVR0OBBYEFJssHQlJ5meiJksgBgKrpfNWDoQEMB8GA1UdIwQY
-MBaAFJssHQlJ5meiJksgBgKrpfNWDoQEMA0GCSqGSIb3DQEBBQUAA4IBAQAaWjUg
-BlYpupkEyfFUO5g6+hcksMYY46i7Ny8tB0gPsieC/D5cHhAngFV1D32wLlL+/SlC
-m/MaE885CaCXSHML2zBvJkQUTGdrecazvIVVOUVspyi5PWTlT2CpS7wIeEcOFsJ2
-KEOmxQTcGTbOb2HMWEDGecBvP28xR9qxwBfDUbttBDxDqhnf+ICjGqV89V2a721F
-1v8QvnvHugz3Ma5h5SjejYMQhDXccw1MCqQ3NsZ+i6gmp/AMEMe6NYorWb3L4IAO
-KmMbV7wl0LnjStFAqFYxUuKt3wEyQW0cDigjojmetd3MuBUf+tC9ha2H1i6lkcuj
-eVnr2o8TMqj64EzP
------END CERTIFICATE-----
Index: examples/acme_rockets/Coyote_private.pem
===================================================================
--- examples/acme_rockets/Coyote_private.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,27 +1,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEoQIAAoIBAQDfOfk1OB8JhVpKoj+UwrOblS28tA8aDtpUIDxSpFCoKRT4FUIq
-gz9TTzaYsEDCgfuglIEr9TXLzcfMum6Zpxe0cmg85OSVjb+F482nG3RelWHCjEfd
-wu3yoONtDab+PjmGFe37jsZSgbihhnJ5ZrN/Jx4F5+JQZ1mIINzNpyCYjrwIZC+l
-SNc17eg9egiI81LDvQ+XF9NW14gwzmsnZhc8jGoqhFG39p3uufTzUx7kn1Jn21Cm
-VWox9ico/yhBm+RIpIRmhZjOVFgf8ZGsnBNY7+o+JU/WKS10fXZwpZhlTZ6uvChQ
-LCy0uM1KwKBcv+ThQVpLeZqMjV0hG9DodhoDAgMBAAECggEANrLjAQp2eIPHw0AM
-qmwnTLl6UqIgjTcUgsa/YVTIOtyOOdgjtX0huE1RyIpv4/mr6gZZvKbCfuU2z1Dj
-px0NrvbV2g4QgSERzEIs84TDuCWMpfpv5cRNQEXyVJei0uv2dofLH/g1WqRU1Ke4
-R01GMKMqNTJD/4XDp5q94FrSnu7trS3q5FV7Fc41+NVuTZr+xMZVzKa0hEekPJYj
-opqZltAqFRqr595Tsn5UYo7hCdWa3kxb7SJDeWybtJoajA+gVBH8BZYfu8gnsxZH
-GGGpvU63nCS3ndEMZr4nyINd+hA42d6uK9zxVTzKjxj0HEgX/CNyzo8uUTqrdb3y
-/lhFeQKBgQD1KgqQMSjpTHOGTcka/l5vU1IpQgHNjbS4jVbnurBO5hdm+BSGwXDy
-2bOLGyEuvKnl3i2O7/xuMwG4Ege+ZA13qsc1H1qkbjv3xnJH8ENCvfgV0AGK7MLJ
-QWsStle60t8j8SdwnBLFXpy3f2JvrJVjL82y8PK0c8l55N4djw5e7wKBgQDpF7aL
-B2ZRrvwp3s2OXycouSvwT9E/4C84l4VYyTaVo1hyjt4nWYNtcLfv0Pgwg+3jdfjF
-wOXMo7jPzT3KqGvnxHQEN7fq7HmwmATfXYxh/V2t919YaEP4iS1q3+xMJjxAAvsD
-AEvi6OkPf9ihoL9ksUDp6He9nY5ELuhbA6c2LQKBgC4BR54rO2wcBomrSxOfrATj
-88T+N+xkrQb8rtQpOjB0COwvnVp0LkfEBmcSHjXw/Ui/Wnk6G3pqY+Ywq/dUOxq7
-l0omqhG1BdfHC2bodRavI0CkmcWCDENL3VXTlb7fFzRdanM9NmCHEo10f/pIvnew
-Xr83a7PlDmerROrzD1VNAoGAXCrOOWcxpDbm6r941ET3vPiLUTieav2AboYrahIW
-DVFLlfC8Ex8oAsxBTwh4OubP19M8DSXbN/G9EB39wvaZxEk//rLxfGkJLTTPKGtb
-KRwAQNvBzblctxe2572nN+0egckr6+HgH9cs4L4SsMZZJ72XB2augkGckYVixypI
-ofkCgYB34F3pA/e6AT3h3tMhGtM/rwfVPSa5lz7/kQd2350xYrcW55ARlVSRHY0K
-ndQOqcplSj0ZK6WKt1tWDKfLMpRH8AineGUuECRIBHKFIskM0K3Iw6wTOoR8nKpj
-KpQI1xMH+xJDY/QnkhAK5nIVWShjCO/gUSENfVxsVmigtHqMDA==
------END RSA PRIVATE KEY-----
Index: examples/acme_rockets/README
===================================================================
--- examples/acme_rockets/README	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,16 +1,0 @@
-Acme.buy_rockets <- Acme.preferred_customer
-Acme.preferred_customer <- Coyote
-
-creddy --generate --cn Acme
-
-creddy --generate --cn Coyote
-
-creddy --attribute \
-       --issuer Acme_ID.pem --key Acme_private.pem --role buy_rockets \
-       --subject-cert Acme_ID.pem --subject-role preferred_customer \
-       --out Acme_buy_rockets__Acme_preferred_customer_attr.der
-
-creddy --attribute \
-       --issuer Acme_ID.pem --key Acme_private.pem --role preferred_customer \
-       --subject-cert Coyote_ID.pem \
-       --out Acme_preferred_customer__Coyote_attr.der
Index: examples/acme_rockets_intersection/Acme_ID.pem
===================================================================
--- examples/acme_rockets_intersection/Acme_ID.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,19 +1,0 @@
------BEGIN CERTIFICATE-----
-MIIDBDCCAeygAwIBAgIJALWq1UVLzJZ4MA0GCSqGSIb3DQEBBQUAMA8xDTALBgNV
-BAMTBEFjbWUwHhcNMTAwOTE3MjAzNjI4WhcNMTMwOTAxMjAzNjI4WjAPMQ0wCwYD
-VQQDEwRBY21lMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+LqEHGFo
-AhgLZqYm3vfKMxMZ1KQbWM8lFqv+jp1zF15r4MBxPJ8KwzW5bK/D1+VpWGcdrM4l
-8JTHoPBJdYBqrDkPYdBEUEU4+yc7gQOupdrXVDOaeOS3+SUkT0Zh9gCuWC6KE8yR
-ddR4uj8qb+qYDX8Wo8CoOVvBza8BxGMpSbBeHU+gBTOquMnOZ647yoaHruFn3QkS
-ysrIH3sCAZ3sQWK64iaZwlauQJ9jjT/fi+78tmXR8CYhffbwmbZ6Ds2fNQl77ZQl
-Pk1XG8jKN/KCs72E6wmOXUbk+m6Oqa6H8ZF4F7w819jCsg5uSpTsagyaRbabISGt
-RonxaKR3MiS1bQIDAQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQE
-AwIBBjAdBgNVHQ4EFgQUIewSm++fyGoa8gm+erAP+cbYtXMwHwYDVR0jBBgwFoAU
-IewSm++fyGoa8gm+erAP+cbYtXMwDQYJKoZIhvcNAQEFBQADggEBAM7G2FbjocdJ
-Hq/fT8dwgnrDh1zUSUOAcTSs/OBQ+7hj2p+X7Fs9whTyMqPlkbIthqbebGY72QtD
-wRC7Y07rnwONQ+VkG/7/Uxpyxlzf3M27v+cn1e9QXBote193c3i03TeJcKkr6TMP
-3x6nJbB5wPKuWao3hjoKUzRcmCfpwcVnOUbNlPINecZGcidRsYCzLS6h/Ro59KWU
-D70fygIVYR9zKCNg4u9xIYc7sDE6TzBwD++vjhlmlVDuLU+hYqRY879VyMfIinVn
-dmf1DV94HR7TfJyNnvvhmOFeBgWRyQU4LrTR3YrRDyyyy8b4KmnX8vBtYGLTnEEP
-cfXpsyZZxXs=
------END CERTIFICATE-----
Index: examples/acme_rockets_intersection/Acme_private.pem
===================================================================
--- examples/acme_rockets_intersection/Acme_private.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,27 +1,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEogIAAoIBAQD4uoQcYWgCGAtmpibe98ozExnUpBtYzyUWq/6OnXMXXmvgwHE8
-nwrDNblsr8PX5WlYZx2sziXwlMeg8El1gGqsOQ9h0ERQRTj7JzuBA66l2tdUM5p4
-5Lf5JSRPRmH2AK5YLooTzJF11Hi6Pypv6pgNfxajwKg5W8HNrwHEYylJsF4dT6AF
-M6q4yc5nrjvKhoeu4WfdCRLKysgfewIBnexBYrriJpnCVq5An2ONP9+L7vy2ZdHw
-JiF99vCZtnoOzZ81CXvtlCU+TVcbyMo38oKzvYTrCY5dRuT6bo6profxkXgXvDzX
-2MKyDm5KlOxqDJpFtpshIa1GifFopHcyJLVtAgMBAAECggEAMb8AGDsFFdIgSZ32
-jUaq2q85zdUqoQcBCHlK1tQ3xhc85T0oCLNYcDWJCetXdJEuEh/BiCPM48Kl8JLO
-ZmFSNHLPGEWSvCk0Hcs5c/K8FfDgezc88GvyPbLHgdF2W0DEnd9k/1O9Tf86TCnA
-/5RAaAagjQzFuH8ZEl2rsU8R3WozX2zjpvGgnzq9dbGeTS2VPVTESlCgLMoQx1sX
-+gBkKeghcV4VSTj8qFqJrIVbPkHrgnQ/5bphd2lc9lTPq9biZ7aL+z1bPp5z57NT
-4Ngpld/gSyN8XOO5keHqNX3R0qekmFsiOJVYRp6I/tE0HpX6q4iCeNyiqFkGD1wy
-AFYD4wKBgQD+toaj+OOFEUDsp3fsKxo5ogEwmCQvOGCRdqT75u0bCKLUNrggMXwK
-8FtGE406xuJdM/8qrMjjRv28pGCPDrS6uxIm8waWAQpN3zaj8sxQlgAINzHWUPS2
-3e2cwF4t6Xk6717UjLiphrDb/51M7B2xsHNx3L7xaxkhU+993OvozwKBgQD5/D/M
-du0f58ix7lKmeu6Yst42LH3zub7H0uDqYOCRHaKWl+j1lJlAS6SqRZRMIH/Ff87f
-ZSWnkWUGdSFNS8Srv0+qfR6a99D0yOyp2ISg6ef7nQZ0xFapyb4BmLCuZTpdNS6w
-Lp5vognSNdTAg0riQ7y9hyjOGWsLE3E0bDgVAwKBgQDMZM/aWOjKaTP+M8zJ2TSs
-NtJZmly+/7COSfTOp1pxLRbs0BQk0VDGvmWf8CSOm/Yd8JG8PvbdWqRWclmBsr1Y
-crF4S+BnEuKf5pTELxvBNv1DmncFkeUtsRzxgnSQxx+fKWKhkWLFtu3JPG+PwJF7
-eyrInekjdVuvINm32EX+hQKBgHS7iOMmaaYravlDa47X+tCNPdyYPBxykRbobySj
-Jlo9N24Q87Sxtjpi2Dq2kQBXcLK98tE4fzPXXhB845cfmXAFvuLC2GbO7+FObc0G
-ETC+6RgChEBEap+QWEyQi3h0RqO9sNaOfmdsiB+ECZv38yDjNqBeG/zZu7WJV6R+
-IFYXAoGAOHM2/N7bswfzXN4BkHCxhp41wCLXC6ifI3VjOHFsDRd/jnjyfNYqbiQ8
-CCRDdWBKezRE6qqEyQuzizRZPCRQgWLQOKYiImsKCfzyVSL9zkZ4q+pZU4aKgBbJ
-bNwiGS6+Ji++GNDMqSu8JDRQMKdA7jJfEY0IDFRrti2ZvmAKVeg=
------END RSA PRIVATE KEY-----
Index: examples/acme_rockets_intersection/Batman_ID.pem
===================================================================
--- examples/acme_rockets_intersection/Batman_ID.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,19 +1,0 @@
------BEGIN CERTIFICATE-----
-MIIDBzCCAe+gAwIBAgIIOxJa5YgASj4wDQYJKoZIhvcNAQEFBQAwETEPMA0GA1UE
-AxMGQmF0bWFuMB4XDTEwMDkxNzIwMzcxOVoXDTEzMDkwMTIwMzcxOVowETEPMA0G
-A1UEAxMGQmF0bWFuMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ngr
-ZRYcJBhJaB1wt7z79A707NgUAJyx0yb2P4VyHTqerUveyixwjG6aG4fKn0W4QjtS
-WMy4+SOB3LXm2tTDre0SVYcqXTPydBnIkjrNMe8a52XTsuG6GU6n3/tGhQrx2cRs
-XORcNzTOhhBAhKFA0sdHCig4e2bdef3WlagqDDURGunDFSXR2j4aeTIHFKYVUJOh
-pvUxhOnZyegiQA1g9H/DfRrfLvoMvD6WeVmTdWj/yMXzl9+EpqEwdQeBKiO1o1qr
-3gC5UYFMzwDmkn/6b+1+AzOclUd2U8gstWnqT02Lwfs/ee+aNloeE1S0QO4LTcnE
-xDq1i8pLhQmeAs8FEwIDAQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB
-/wQEAwIBBjAdBgNVHQ4EFgQUmaSKn/zMyWdMUX/anfufCJey3mwwHwYDVR0jBBgw
-FoAUmaSKn/zMyWdMUX/anfufCJey3mwwDQYJKoZIhvcNAQEFBQADggEBAGw6n7jY
-sU0W+6o/WMyVp6+3EIC8tusVXm2rn9udlM+I6WAJx5hh2GZMTcR+Zp7QHBs9ncm7
-sMsMsd9sUWb11GUk7PXCDulmKLD7MF8UWRn5xfCr1hMFUbrWGWBKeTXQqBIQDfeL
-3FGyq8raDdKYeO/3JMQE6XEC8pcDdrsGQJBb87BGlx+i6K5q+qjM4tAMosXjdhYk
-E2BbyPahoGBdK1fQOKYsDAJAJ1i9L0NuQ6lb3qhCfWT0Xb08szDnPpvpNLX0NoZY
-MXriRRgHnw65GkZTUtySXeXeTcezY2NXaH9e/sHPtLAnzbEyDLViFiT/cT5FVg50
-IxN8W+CReATNfk0=
------END CERTIFICATE-----
Index: examples/acme_rockets_intersection/Batman_private.pem
===================================================================
--- examples/acme_rockets_intersection/Batman_private.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,27 +1,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEpAIAAoIBAQDY2CtlFhwkGEloHXC3vPv0DvTs2BQAnLHTJvY/hXIdOp6tS97K
-LHCMbpobh8qfRbhCO1JYzLj5I4Hcteba1MOt7RJVhypdM/J0GciSOs0x7xrnZdOy
-4boZTqff+0aFCvHZxGxc5Fw3NM6GEECEoUDSx0cKKDh7Zt15/daVqCoMNREa6cMV
-JdHaPhp5MgcUphVQk6Gm9TGE6dnJ6CJADWD0f8N9Gt8u+gy8PpZ5WZN1aP/IxfOX
-34SmoTB1B4EqI7WjWqveALlRgUzPAOaSf/pv7X4DM5yVR3ZTyCy1aepPTYvB+z95
-75o2Wh4TVLRA7gtNycTEOrWLykuFCZ4CzwUTAgMBAAECggEAQDj10UCVIROYWh+u
-DJ0KOiRb4fG1KuE9wX3enL2XKJT9/fFkkJhM1SrEtbaoCjgJ9IPBRc+MUS10/rtZ
-HiK5ub9nGLGpmGUUP9KLFtQXhdx9KV99LZOxHGGxUqMHJcwyCP8l4PU5YphfOlGB
-6kYf/s1KevWilNnIaqMFdNmTan2ZHfLs2GLMY2u2FJ0OTGCEDevLfUh7QITnpXp1
-FkAXuhqrHfINOwr62FIEM/y6vEfTPRO1AhV/CnBiooRj+bZFwLxuSsEtbaxbJuDX
-ECuLCZtjIbuT3f1ewZJCSv/YH+pKJdjeBvFa2Wl1J09uoT9/ggv7YCdaPDW3YSgW
-y5dVwQKBgQD9dT8M+LFMk5QOzUx0Y/+4JivY8mRfEtbkS6z0RxGi+AzCLBqTwqRP
-BNi0+9KEXmlOk6d+qpoFj/k48F9yvWQcyT3kb5/z1ssntYxDtpsMJbuxYQzpDJt4
-1Hvi6nE8I3Nx3B0D7bfsoKTsxeGI5OYvqxppX17t4qtiORueZfAN8QKBgQDbBOr1
-RQDKF//+ANiHuWWMD2wrqXX9CHrwgKgWaFYdLqsEKDtCuvcmhqqJSCA6NG3u0KHR
-n1f/wxJBtUIE5qN8Kme0r+HI2DLS1gh8i2gRLEauXOYvhFRaJruvW8kh0PlHgQLS
-HeLE/5yuCOKk7WznFvC0DJZtNzhzZq8j1Y5PQwKBgQC1hjhO+Po6ZuO+KijcnxXx
-dF0o9okOUnbXcJ+BIDkwZ8jzdBTgyKFW+pieHlDqfpebMELghBzlaPTMY9NoYN4H
-g9Ww+oUrZSWA3hSEFo87BvdDFcfiTSY4Rq4nmVLaCGXRIR0iyClW7sLP1PUvTwjR
-ERFMcIKTiyjFozL1ofpocQKBgQDB8QPh9p1xV3k+wh77aIdsVAfUTfYF/2ll6Hdv
-iCqhIr8bKkj3mTnbqqn+cJjhEaY7MBHq3q/88g8LkmcIkfc4rxAwJwLHZ/LxUcgo
-CQY5FrzsD6VhdEuBnQTbjmp3gGYNFEecKgyxpytlzMZthzTFGUJCHVdjFN/vCIGU
-OLoQowKBgQDbcDLIef/l0EH9DG+sV/SZbhRJ3EO/gQXQRbhOBixJoRYNkRUJT8XV
-yHeFAE5crsPlknfzXh5FofGGA8gBLxzCZNN4aiA1FC8t29+NG6DTMYBQcttm2Rdm
-YlfBGDOPPWAV0TyVaQpy7VauuVXWPHPMteSzjoK6RJkLOqFYrc+Vrg==
------END RSA PRIVATE KEY-----
Index: examples/acme_rockets_intersection/Coyote_ID.pem
===================================================================
--- examples/acme_rockets_intersection/Coyote_ID.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,19 +1,0 @@
------BEGIN CERTIFICATE-----
-MIIDCDCCAfCgAwIBAgIJAJt9V0HP3H/5MA0GCSqGSIb3DQEBBQUAMBExDzANBgNV
-BAMTBkNveW90ZTAeFw0xMDA5MTcyMDM3MDJaFw0xMzA5MDEyMDM3MDJaMBExDzAN
-BgNVBAMTBkNveW90ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALjN
-0hzJp5ltUe4TD+b7eLz6bbqgc+Ei4sGIfqLkJmwhKhaC1mOW0F7bai4vPNe6NN0+
-IeeCvrs5uEhZzkdTePshff4ynaSTUq4lhf8DurnpP/21FeeaTKqMmhwIktEOxXQk
-af6TfWeIy/rjfbIvwtadozGGeYcPyGgQxlh6SruYcaCJP9bhsVZQKP5kJfBQjRUC
-fOhYQXXTQ2HSKzmsRwS0eNJzBTqCu8XaWel1VmjRoQqYxhhy1RFv8IQNSOrMuY/B
-TbBeUfjxT60qOg9vhdmGtWf2T89jWwos8WuDOhGpg5SyhechNyIt4QO/n2MA41o3
-3VKtMTgHvk7wLbPF+0ECAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8B
-Af8EBAMCAQYwHQYDVR0OBBYEFKizfTlgbN6zsCzBL0gVhNrKR892MB8GA1UdIwQY
-MBaAFKizfTlgbN6zsCzBL0gVhNrKR892MA0GCSqGSIb3DQEBBQUAA4IBAQCWnTnP
-HItCbZlpouCoA5frg1P86NzUw3U6imY/ePLF0Q8lHt5iGrq6tppz467kc0bWUH1R
-uCT4XCBSgn70YY9d2QdaDZezfeE20EdgyxLsBh3jPRVSFx1ERwjVgWQYpHaCQSyf
-KBdhPH3mUw3s1bAkJxbg3ch2CZCTSuhwegjnsJ54w3P3GFkJYxjiMC/jwJawsmut
-CmNbuZ+2yxFpEw1yCNkT0q9HW4aYCyzzKFCjB9TVzbbET1RznPAlHcnrysJhkF1Z
-hRjAjFHa/7i1rSiCrk8HfONgJPMLtHz3+cSamKznDXlOXsXQ0i3pvq3H9QL0t4mG
-3W5gXm1meQO57+h1
------END CERTIFICATE-----
Index: examples/acme_rockets_intersection/Coyote_private.pem
===================================================================
--- examples/acme_rockets_intersection/Coyote_private.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,27 +1,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEoQIAAoIBAQC4zdIcyaeZbVHuEw/m+3i8+m26oHPhIuLBiH6i5CZsISoWgtZj
-ltBe22ouLzzXujTdPiHngr67ObhIWc5HU3j7IX3+Mp2kk1KuJYX/A7q56T/9tRXn
-mkyqjJocCJLRDsV0JGn+k31niMv6432yL8LWnaMxhnmHD8hoEMZYekq7mHGgiT/W
-4bFWUCj+ZCXwUI0VAnzoWEF100Nh0is5rEcEtHjScwU6grvF2lnpdVZo0aEKmMYY
-ctURb/CEDUjqzLmPwU2wXlH48U+tKjoPb4XZhrVn9k/PY1sKLPFrgzoRqYOUsoXn
-ITciLeEDv59jAONaN91SrTE4B75O8C2zxftBAgMBAAECggEADc09UG4VCMXb1RJy
-YRdN1JtFX6dFED7ZPYfyoTq1zeSKLqU12rk0NalgXDOl8RyUfyN5R7+BfB0a8LhY
-SgZnZiYBsV7ZXCWuipf90mZWZzUO1OVVzfa9nA0lI0vWnythvsNLcTpVpspWJZYg
-2JJtlDawre2znM0mc/MwxQHZG/ptnk87XivxC2qDcqHMa83TAjFz7ZXvkoeP8OtR
-4+LO3ARizw8cS3o/ezecFXnZbufssM6qn2Qgr0AInHeQ62nxF8djm2S913lLGGNf
-muLSORzD+dq5r4WxFIS/5HlrKXs/V6uTGCK7mQVIHAPuzjyIcTTY8pVNFynMxpmy
-tNdtAwKBgQDe/O7GC/lIl1BItC77ikVPNAN+Zx6o5m+VCbx8Cv4d+PdQZgqQbHtb
-z4FEpG4RfOKJ5W4f1YIOf90wHgKvxd8IICiZ60aKo/j47IxM284HOEiJnjju+Mpl
-rQHbC6VMXkmHwSrcXMb5WcShaDTQT1RLEMF7drX2FKeC3grQYTLrewKBgQDUKb5s
-2j4mTUMlS//QK2YTpI+vjOwFe/OYj4NL5jq9VfHjmETRqk2e6ViEpUvy2Ao0bE6V
-8JNOHq1NijM3yDpD5o/eb1KpAr3iz91zHIrrgNdjzIcIYULBurIxOH3/H33A783r
-F44dQ04Eg99kqAQC0R9yE7VYdMrN0V8PGbapcwKBgH46ekQcRRplpanybeIwzLlg
-PVYRs9Zy09lvcIZbhqya4g1eJj7JWi+H0Kp11mUJ6Aedm/BjYcMpeKGja2vrPC0S
-X0l6WS1kUy0+YtGjYAbQQqe8rIgCyDg0bqd7+S+49DDoFYY28t/2hAvGvJbrQVFZ
-A94LPkg2OvknDsIVM8j/AoGAIVxC/hi/BwTFFxtBKTl5voL0uPTes+oOnqGKUqfr
-+pOGCnSJ9bHirKcibREUxSWlTSLupHMEppb6RyQA87d/OegKHT7B76Nnuj9XId+O
-FIPY2m9xmCa6+X1iwYyRe0k3W9wZM+srRHytytX1jX1BzDOXzzc8H6GVthFC8jvn
-1fMCgYBlGdZ2Gc+EWVvjcF1WaVU1ZqU0h/VMOxCU36KBEGrQGVoVPjKXf+g5eLlA
-sep957e9rA3LvZ5Kl2V0Xq0f0vgZ8yprPg8rhqHsdHQL4S1WtIeHdp65FWrSy6XR
-fvjK/6X/SomgKb8y407FJcSJOGb8tSXjegrjqFRzhikQEFJUjw==
------END RSA PRIVATE KEY-----
Index: examples/acme_rockets_intersection/README
===================================================================
--- examples/acme_rockets_intersection/README	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,46 +1,0 @@
-This example demonstrates intersections.
-
-In order to buy rockets from Acme, you must be BOTH a preferred customer
-AND a WarnerBros character. In this example, the following query will be
-successful:
-
-    Acme.buy_rockets <-?- Coyote
-
-The following query will fail (because Batman does not have the
-attribute WarnerBros.character):
-
-    Acme.buy_rockets <-?- Batman
-
-Acme.buy_rockets <- Acme.preferred_customer & WarnerBros.character
-Acme.preferred_customer <- Coyote
-Acme.preferred_customer <- Batman
-WarnerBros.character <- Coyote
-
-creddy --generate --cn Acme
-
-creddy --generate --cn WarnerBros
-
-creddy --generate --cn Coyote
-
-creddy --generate --cn Batman
-
-creddy --attribute \
-       --issuer Acme_ID.pem --key Acme_private.pem --role buy_rockets \
-       --subject-cert Acme_ID.pem --subject-role preferred_customer \
-       --subject-cert WarnerBros_ID.pem --subject-role character \
-       --out Acme_buy_rockets__Acme_preferred_customer_and_WarnerBros_character_attr.der
-
-creddy --attribute \
-       --issuer Acme_ID.pem --key Acme_private.pem --role preferred_customer \
-       --subject-cert Coyote_ID.pem \
-       --out Acme_preferred_customer__Coyote_attr.der
-
-creddy --attribute \
-       --issuer Acme_ID.pem --key Acme_private.pem --role preferred_customer \
-       --subject-cert Batman_ID.pem \
-       --out Acme_preferred_customer__Batman_attr.der
-
-creddy --attribute \
-       --issuer WarnerBros_ID.pem --key WarnerBros_private.pem --role character \
-       --subject-cert Coyote_ID.pem \
-       --out WarnerBros_character__Coyote_attr.der
Index: examples/acme_rockets_intersection/WarnerBros_ID.pem
===================================================================
--- examples/acme_rockets_intersection/WarnerBros_ID.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,19 +1,0 @@
------BEGIN CERTIFICATE-----
-MIIDDzCCAfegAwIBAgIIam44l3UdZ5UwDQYJKoZIhvcNAQEFBQAwFTETMBEGA1UE
-AxMKV2FybmVyQnJvczAeFw0xMDA5MTcyMDM2NDVaFw0xMzA5MDEyMDM2NDVaMBUx
-EzARBgNVBAMTCldhcm5lckJyb3MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
-AoIBAQCpgqFydgXSIOEg/H1szr5ZVh0rKpXtrPLGzm2NvfJlTxJrX1MY1oLZ96Q+
-E702GYvXjP3SNZe91dWwYbGZ8Cm9OilCV5GyXPTNkVh1cFogp+0efJ0ws5ZYW29T
-RwCqD+W44xTmX4+/VqBQqsm1WPfgMioUSEzV/AA/Cb7P0IgJRLKddWI9rufF1eXs
-4f4M5/z5MoituLng89Oqe/6Ea5O8UVwCQ62VCL5HijIxOG1qtvMriSmfUGXUDzQc
-BTCw5t+oOjxkmuQjiy0lQv68rspW8nb4+hgn+/SDIAgXMkvldC+a7pAaRWSva9rF
-83SirjhKGpawIrEax3glTupSMW0hAgMBAAGjYzBhMA8GA1UdEwEB/wQFMAMBAf8w
-DgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBT9slPQ4bzw1gqHhNWzDcjgBkYH0DAf
-BgNVHSMEGDAWgBT9slPQ4bzw1gqHhNWzDcjgBkYH0DANBgkqhkiG9w0BAQUFAAOC
-AQEATTtGBPyGnXx/4LdJYi3h4THMDvBLS1ZDYpiKHcU3GJvgN0WJVAZQb7sHSlGq
-/ObZPS7bUilwEIwdKlz9oByR0aQmW1UiERTq2gEsfnj+uJCShHZx9qNzp8yWp5Tj
-I2ceXyntZ2E3k2ckWkt+sTKqOhLwnz/9D8NhzCi8+rMOld+MxUvCLe1yZHTD5KDN
-yEviVhSXYUW015Daa24lRLXZMCo+v669p8iuIUwtS1yOWkeWUXgLEgk91Nu00jNH
-5E9rSVa062Vp0FzPwZpDuAqOYPdQuMe0GX9LyhRzThgOQI2f/iBHsRJ+ePLzwLW6
-clx0ijr3jWLXMIsifhDKtSVkSQ==
------END CERTIFICATE-----
Index: examples/acme_rockets_intersection/WarnerBros_private.pem
===================================================================
--- examples/acme_rockets_intersection/WarnerBros_private.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,27 +1,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEoAIAAoIBAQCpgqFydgXSIOEg/H1szr5ZVh0rKpXtrPLGzm2NvfJlTxJrX1MY
-1oLZ96Q+E702GYvXjP3SNZe91dWwYbGZ8Cm9OilCV5GyXPTNkVh1cFogp+0efJ0w
-s5ZYW29TRwCqD+W44xTmX4+/VqBQqsm1WPfgMioUSEzV/AA/Cb7P0IgJRLKddWI9
-rufF1eXs4f4M5/z5MoituLng89Oqe/6Ea5O8UVwCQ62VCL5HijIxOG1qtvMriSmf
-UGXUDzQcBTCw5t+oOjxkmuQjiy0lQv68rspW8nb4+hgn+/SDIAgXMkvldC+a7pAa
-RWSva9rF83SirjhKGpawIrEax3glTupSMW0hAgMBAAECggEAICRoDrc4dVbMuZ+G
-/Pna+D+u+j9x/IZ95prABU+ORg2PVZLWw+/xEfm2SBsgFsETVkUi4BhPdKy2f2KW
-9bSnhX0g07adJvAfb1dvKZ2rSWPuP4irmc+D46861dSx2I15JuzQSrq2HDcF4SXx
-Z5S+M+HvPrdS8oR9W3aymt9U3ES+TeOIiSdW25DQbW00BZ1HJ+0h/gfxsufT/LQ1
-Lio94yRHiwqgpyJrUgl6zxVlk2HOZQSDfOK5Of9+QZF6FxH/lxuldRBXYIh7MLr9
-aznQvAovYGpYzYP/FFCsPEbnEVYTR7K2ZPM2Hh2ZbEp7Y7sj0zXS+eOpI/2wvpr0
-wlcKXQKBgQDgVYCVUrIA4Z/ewnS7Q/UJ251rsKOBm+TqOLKpk01OQ0noO1tj1dpY
-qpp8xvKJG8Y7UUiAVZQVe/4XCpl9WOca90/fwCILragjdg45FnARCJtDp56eA7ci
-tEzzO6HHh1Vk5Ebn82oL01NbYzP6OTXjj8FWWFTkw0PhEryZhUT2OwKBgQDBcAb2
-ECyM2XbmA88P2BrLnt0yBKT+seuF1L8N/JrCCPB9Sadsi63SMBaler+/6YRiwZ3T
-eB+FyXTqsvQFExGS8GvdRtkKNntnRGkSuzYX2AOdzxt3rCcPepMLXKnuRNc7+oh3
-UL7QdVjiED7lzAgWy9MuQwaScQqRm3zCnG9IUwJ/MDIubeZWV9ohfrpIWfM/sd58
-86X/etkDVU7ZE5WSBj5uonYeLFTFlEcS6bvUX6CX9iaAbRH1vqfk7w5X65YuEJ0R
-jAC7T8b/WJ8Ebz9i1EYFFYPtkAU8UzhpT9h/6V4p+oMQuMSTA/di8T9e62NfMISy
-BNr1YjCRZMmhu1nmdwKBgH3yYiXujAM9SIQlMLmhPHkdu+noSkGnOLGPvsHtmhoC
-VgtNXJx5Kbj0JJqkHJtpARCH/ioFSYkDjYOO9wEi1Et3DNQrX/+dT6YCTeOrT2Ig
-/OHQSpMV3OzgI0O/lskTu4xK6HW/di4mabPvXfSjbxTgq2SwsWPCBF6f/ZB86JwP
-AoGBAJbjAgvBODyspNBJIEm3FswqL7KHMKAAXDrPL/waVskpFVR/LpOnCyK8WsEN
-PGo133wirEZ5EqdhGgho1OdxgQQ//KLDXc/7Rvy9AuLotqvbdjXOEog5i0ntNLKv
-Aw6BZLwd8lIn0Ax4N7r+AmUP9ADU6T1CWeGkA19NNMoH00gA
------END RSA PRIVATE KEY-----
Index: examples/creddy_prover_tests/Makefile
===================================================================
--- examples/creddy_prover_tests/Makefile	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/Makefile	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,32 @@
+
+DIRECTORY= acme_rockets_intersection_rt0 acme_rockets_rt0 experiment_create_rt0
+
+.PHONY : setup runcheck clean 
+runcheck: $(DIRECTORY)
+
+clean:
+	@for i in $(DIRECTORY); do \
+	here=`pwd`; \
+	cd $$i; \
+	rm -rf *.xml *.pem *.out *.log; \
+	cd $$here; \
+	done 
+	@rm -rf result
+
+runcheck: 
+	@echo 'running libabac CREDDY/ABAC_PROVER testing...' 
+	@rm -rf result
+	@for i in $(DIRECTORY); do \
+	here=`pwd`; \
+	cd $$i; \
+	printf "\n ==> RUN on %s\n" "$$i" >> ../result; \
+	./README >> ../result 2>/dev/null; \
+	./run_query >> ../result 2>/dev/null; \
+	cd $$here; \
+	done
+## since can not check the everchanging keyid values, we just do a char count check..
+	@if test -f result && test `diff result.save result |wc -c ` -eq 6750 ; \
+	then echo "   PASSED"; \
+	else echo "   ERROR:got changes!!!"; \
+	fi
+
Index: examples/creddy_prover_tests/acme_rockets_intersection_rt0/Acme_ID.pem
===================================================================
--- examples/creddy_prover_tests/acme_rockets_intersection_rt0/Acme_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_intersection_rt0/Acme_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
Index: examples/creddy_prover_tests/acme_rockets_intersection_rt0/Acme_buy_rockets__Acme_preferred_customer_and_WarnerBros_character_attr.xml
===================================================================
--- examples/creddy_prover_tests/acme_rockets_intersection_rt0/Acme_buy_rockets__Acme_preferred_customer_and_WarnerBros_character_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_intersection_rt0/Acme_buy_rockets__Acme_preferred_customer_and_WarnerBros_character_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<signed-credential>
+    <credential xml:id="ref0">
+	<type>abac</type>
+	<version>1.0</version>
+	<expires>2014-05-06T21:52:21Z</expires>
+	<rt0>d3b44e2e48e6d9acf5062c37f55adce2235a447b.buy_rockets&lt;-d3b44e2e48e6d9acf5062c37f55adce2235a447b.preferred_customer &amp; ef2e4e246b041f51396bfb6af90576dddf11a555.character</rt0>
+    </credential>
+    <signatures>
+	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+	    <SignedInfo>
+		<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+		<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<Reference URI="#ref0">
+		    <Transforms>
+			<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+		    </Transforms>
+		    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		    <DigestValue>oYWWN07EMDcgcNuwWnQxgGFiuIA=</DigestValue>
+		</Reference>
+	    </SignedInfo>
+	    <SignatureValue>NdY91aCnFOIHDloG+UczhWpPXi4E+yK0RP/rxq8kKJ+o/ovFNZyLeZJiBYN63Zkz
+JVmbbUZy23tc7BqKsRsi8gkD8c61vygrKEMaYtK8irIUPoFuU13QjHl70RTd4cGa
+37204lF09SEKlxob3y3/HmS2k+5ApgowdkUAoEBZ2l5jVKVbJkseNGEsABscDhSi
+co8NyMZTfhoetxoaqQJ454A2K6zQl3edw3/71UKliuxXey1p5sY0N+G/kF2RzdPA
+PnhbdtzMZEsaOMrhxJ7dcP4TgR6m1HLevy5F59xtt8RjnMttL1+v2h5J3ogt1A6s
+qYELlDoplPUiFxDCPmdpYA==</SignatureValue>
+	    <KeyInfo>
+	      <KeyValue>
+<RSAKeyValue>
+<Modulus>
+2ogAG9RbEPLP9Gjz7cslLSuEWJhaJq6ZwrKkkEsXIcimUXcvyVE3gDSf34KidUok
+UlSUYzOkiRmMjF0WUxPvEdqsimjfs1DkceEQ1uMN3YjoPUHJJuvQcOO9SfT70F2L
+ogSBFu0mgGvMN2gCcey9+prEUelWZIjbzSqki7IxE/Yhigvs3KvcZntN3uhUuVFb
+sSc/7HKr7Z5jqsv6kIBE2ulhupazVMZJUl4nJhDhcPP+ag3jJqawDWzh10/8uR9e
+TvUAuYit5JcSJMmBI3nQidv9yBPQqdOFKvUqmmyQ2OKMT9BDf+ywWv+wfIn1OJdd
+bG5lrCvvLLE38iiiwz3MCw==
+</Modulus>
+<Exponent>
+AQAB
+</Exponent>
+</RSAKeyValue>
+</KeyValue>
+		<X509Data>
+		    
+		    
+		    
+		<X509Certificate>MIIDBDCCAeygAwIBAgIJAITrR9d/RezoMA0GCSqGSIb3DQEBBQUAMA8xDTALBgNV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</X509Certificate>
+<X509SubjectName>CN=Acme</X509SubjectName>
+<X509IssuerSerial>
+<X509IssuerName>CN=Acme</X509IssuerName>
+<X509SerialNumber>9577828023412321512</X509SerialNumber>
+</X509IssuerSerial>
+</X509Data>
+	    </KeyInfo>
+	</Signature>
+    </signatures>
+</signed-credential>
Index: examples/creddy_prover_tests/acme_rockets_intersection_rt0/Acme_preferred_customer__Batman_attr.xml
===================================================================
--- examples/creddy_prover_tests/acme_rockets_intersection_rt0/Acme_preferred_customer__Batman_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_intersection_rt0/Acme_preferred_customer__Batman_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<signed-credential>
+    <credential xml:id="ref0">
+	<type>abac</type>
+	<version>1.0</version>
+	<expires>2014-05-06T21:52:22Z</expires>
+	<rt0>d3b44e2e48e6d9acf5062c37f55adce2235a447b.preferred_customer&lt;-e512543f8a53d70080c39a95bf1b3382d2e568a6</rt0>
+    </credential>
+    <signatures>
+	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+	    <SignedInfo>
+		<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+		<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<Reference URI="#ref0">
+		    <Transforms>
+			<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+		    </Transforms>
+		    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		    <DigestValue>EOv1Y1TnZXdhrS83LM6f3kGnJqQ=</DigestValue>
+		</Reference>
+	    </SignedInfo>
+	    <SignatureValue>M72x5WvrIqF45ROZ1ioEH4EIdd4GVC7+cDJQ12TIGZpNBhjmdrlbA9boYQfiGMB3
+yAh6MoRTQIJdssB/aDCBz87X/sKfpA9T8zpzHqKCjpqmj1cQuS+1wHJGKfFDljmy
+Z8wWf3goRSFqlTFGdvoA5eyRkpEqWEkuhUVfZ3ziFLuusubBHoJWh5QR3As7tFzO
+9wy261sEanX5+J3ToF/QKNYM2HEE5ZRy7bhUC413VSqH7agyOxRg136GN1neCcFO
+codqqNyz1oaARrrASclSrd8AuhwMvFCYT3VxLoVjBOspGRnpbLT6gNC5j48+6cJU
+Yn+WX9BgZHnN4xrq74WT5Q==</SignatureValue>
+	    <KeyInfo>
+	      <KeyValue>
+<RSAKeyValue>
+<Modulus>
+2ogAG9RbEPLP9Gjz7cslLSuEWJhaJq6ZwrKkkEsXIcimUXcvyVE3gDSf34KidUok
+UlSUYzOkiRmMjF0WUxPvEdqsimjfs1DkceEQ1uMN3YjoPUHJJuvQcOO9SfT70F2L
+ogSBFu0mgGvMN2gCcey9+prEUelWZIjbzSqki7IxE/Yhigvs3KvcZntN3uhUuVFb
+sSc/7HKr7Z5jqsv6kIBE2ulhupazVMZJUl4nJhDhcPP+ag3jJqawDWzh10/8uR9e
+TvUAuYit5JcSJMmBI3nQidv9yBPQqdOFKvUqmmyQ2OKMT9BDf+ywWv+wfIn1OJdd
+bG5lrCvvLLE38iiiwz3MCw==
+</Modulus>
+<Exponent>
+AQAB
+</Exponent>
+</RSAKeyValue>
+</KeyValue>
+		<X509Data>
+		    
+		    
+		    
+		<X509Certificate>MIIDBDCCAeygAwIBAgIJAITrR9d/RezoMA0GCSqGSIb3DQEBBQUAMA8xDTALBgNV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</X509Certificate>
+<X509SubjectName>CN=Acme</X509SubjectName>
+<X509IssuerSerial>
+<X509IssuerName>CN=Acme</X509IssuerName>
+<X509SerialNumber>9577828023412321512</X509SerialNumber>
+</X509IssuerSerial>
+</X509Data>
+	    </KeyInfo>
+	</Signature>
+    </signatures>
+</signed-credential>
Index: examples/creddy_prover_tests/acme_rockets_intersection_rt0/Acme_preferred_customer__Coyote_attr.xml
===================================================================
--- examples/creddy_prover_tests/acme_rockets_intersection_rt0/Acme_preferred_customer__Coyote_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_intersection_rt0/Acme_preferred_customer__Coyote_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<signed-credential>
+    <credential xml:id="ref0">
+	<type>abac</type>
+	<version>1.0</version>
+	<expires>2014-05-06T21:52:21Z</expires>
+	<rt0>d3b44e2e48e6d9acf5062c37f55adce2235a447b.preferred_customer&lt;-e8d4f94b7f585aaf97f461f7c3c983bfdabfbbf4</rt0>
+    </credential>
+    <signatures>
+	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+	    <SignedInfo>
+		<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+		<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<Reference URI="#ref0">
+		    <Transforms>
+			<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+		    </Transforms>
+		    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		    <DigestValue>Tcn7b3Ds+sl3o/o8XPvrJBl7Lw0=</DigestValue>
+		</Reference>
+	    </SignedInfo>
+	    <SignatureValue>2UXxGyIUk+WeZOHVM0ShabnGUHr3EOTKqOA+j9dZO2cOvqvg/RHO6MlugNI04NDv
+TOuU+WX9HDWyk8c1xHhAd1jUD29N8ntlvGSfyQ+Dv7kwV1zOm+tMoYLqUk+lelO+
+/Qw8DJepXL82UsBExkxj8uI9mXGwkKaRewAw9ydjW/ZmYkvXnUlKWsBVTx/5mwOF
+gifKtLqnPujTncwneG9//KindDaVWAYaHcXBI4HL++wdsxkUjudEx+VbvNoWrS7P
+jxYk9MDaBsSrsHz0mcEgh+RxIgJvaCluq/R2i95dKcBpkL+nrT8s82uzsnZSBIVB
+PLLeulvutVl7tLSCMcXsww==</SignatureValue>
+	    <KeyInfo>
+	      <KeyValue>
+<RSAKeyValue>
+<Modulus>
+2ogAG9RbEPLP9Gjz7cslLSuEWJhaJq6ZwrKkkEsXIcimUXcvyVE3gDSf34KidUok
+UlSUYzOkiRmMjF0WUxPvEdqsimjfs1DkceEQ1uMN3YjoPUHJJuvQcOO9SfT70F2L
+ogSBFu0mgGvMN2gCcey9+prEUelWZIjbzSqki7IxE/Yhigvs3KvcZntN3uhUuVFb
+sSc/7HKr7Z5jqsv6kIBE2ulhupazVMZJUl4nJhDhcPP+ag3jJqawDWzh10/8uR9e
+TvUAuYit5JcSJMmBI3nQidv9yBPQqdOFKvUqmmyQ2OKMT9BDf+ywWv+wfIn1OJdd
+bG5lrCvvLLE38iiiwz3MCw==
+</Modulus>
+<Exponent>
+AQAB
+</Exponent>
+</RSAKeyValue>
+</KeyValue>
+		<X509Data>
+		    
+		    
+		    
+		<X509Certificate>MIIDBDCCAeygAwIBAgIJAITrR9d/RezoMA0GCSqGSIb3DQEBBQUAMA8xDTALBgNV
+BAMTBEFjbWUwHhcNMTMwNTA2MjE1MjE1WhcNMTYwNDIwMjE1MjE1WjAPMQ0wCwYD
+VQQDEwRBY21lMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ogAG9Rb
+EPLP9Gjz7cslLSuEWJhaJq6ZwrKkkEsXIcimUXcvyVE3gDSf34KidUokUlSUYzOk
+iRmMjF0WUxPvEdqsimjfs1DkceEQ1uMN3YjoPUHJJuvQcOO9SfT70F2LogSBFu0m
+gGvMN2gCcey9+prEUelWZIjbzSqki7IxE/Yhigvs3KvcZntN3uhUuVFbsSc/7HKr
+7Z5jqsv6kIBE2ulhupazVMZJUl4nJhDhcPP+ag3jJqawDWzh10/8uR9eTvUAuYit
+5JcSJMmBI3nQidv9yBPQqdOFKvUqmmyQ2OKMT9BDf+ywWv+wfIn1OJddbG5lrCvv
+LLE38iiiwz3MCwIDAQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQE
+AwIBBjAdBgNVHQ4EFgQU07ROLkjm2az1Biw39Vrc4iNaRHswHwYDVR0jBBgwFoAU
+07ROLkjm2az1Biw39Vrc4iNaRHswDQYJKoZIhvcNAQEFBQADggEBABRLgRA//jD9
+JEy/bPQxVfG80Jdd+npoyaKoMh+L7zAxp+A+3jGv9YFENPu8LER0KesU+HQa41+d
+Un63xIVMWnaca2MfuYqfRE/YeIJEBZHN9MOTAmbqeakoai/Xq2FSRKCmacpov6Ml
+82lxaYkxxlIJykZJEsZiFqVSg3gkCCZJnqP0uSevAygjB1pU6OyG4bVlwuUZUVZI
+WmfSjqPwjoRQIVyfG/d2sdzIoGiQlPVy1VOfbKp1NBD3BA3i/ehi6LS7nFECHMTy
+narR9jSc2Pv9eTF/IbsXB1xldjQjphYhcq9D2AEpxIXSS75S0P5Gr7GTYrg+7pZ8
+f4GFG1MtB+8=</X509Certificate>
+<X509SubjectName>CN=Acme</X509SubjectName>
+<X509IssuerSerial>
+<X509IssuerName>CN=Acme</X509IssuerName>
+<X509SerialNumber>9577828023412321512</X509SerialNumber>
+</X509IssuerSerial>
+</X509Data>
+	    </KeyInfo>
+	</Signature>
+    </signatures>
+</signed-credential>
Index: examples/creddy_prover_tests/acme_rockets_intersection_rt0/Acme_private.pem
===================================================================
--- examples/creddy_prover_tests/acme_rockets_intersection_rt0/Acme_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_intersection_rt0/Acme_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
Index: examples/creddy_prover_tests/acme_rockets_intersection_rt0/Batman_ID.pem
===================================================================
--- examples/creddy_prover_tests/acme_rockets_intersection_rt0/Batman_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_intersection_rt0/Batman_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----
+MIIDBzCCAe+gAwIBAgIIFyySD/JybaAwDQYJKoZIhvcNAQEFBQAwETEPMA0GA1UE
+AxMGQmF0bWFuMB4XDTEzMDUwNjIxNTIyMVoXDTE2MDQyMDIxNTIyMVowETEPMA0G
+A1UEAxMGQmF0bWFuMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukFU
+LA/TZAHjHtjabkCr07UZyOBtYtUSKd256VdvcEwdNEWnv0A/pS5p0NZzeVeSVmW4
+SNPy4lbc4JjQTF49aP537HKTsMq7W+fmFQS2Pfp/jN1/iqEVs4qcf/GJAIimHFnE
+xgZbmFJ9OhBXCJF5gRgyVjOifzwEu5F9HlhWWQLAYh0lTYRsmH5ZxB3nklkWEL2e
+2GWlcBCRrmxcjYvqWG8ZQCuepgyE2UI0Mouwki/YDVm9T7E5/NIqfxHXbX+hJ3gW
+/XJSP8TIRjj3kFPpV2NHdb4PYd7M0sGmY+QO6GODGpaQbr4g8CQTNAKlCi0Ymx88
+f4Nbv2wOgK+dqnrBPwIDAQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB
+/wQEAwIBBjAdBgNVHQ4EFgQU5RJUP4pT1wCAw5qVvxszgtLlaKYwHwYDVR0jBBgw
+FoAU5RJUP4pT1wCAw5qVvxszgtLlaKYwDQYJKoZIhvcNAQEFBQADggEBACvj/HOm
+sU8q0dHlvvQFc7Y1hQ+H9hVcqQQnEo2M3ZtFMWKPLm1mzQTosytJTAXx5MJSkhDg
+mUbQh5ixSevEZXrxtnjRWOwX5eLpsqB9BB9W+xj2vYHZUhKklngVwv5o71erMwyL
+ouvcRUgvatYkh9BiE1gpE6ByI6Th8aP/lIKID99WSSZoWlMEB4FaOWGR/QBblLCY
+k9vBSFeidodi8UQnsu2owHpBtVUlwiqhiXkZ5Vet5bAkwFH1nFZvZxXCm/al1gLt
+ST6eOmTQxz0BT2rA9eGqzy9W/Mry8T03fHzfqmTcUyOQhnOOfNK67sfj+K7xo9EQ
+DqQQCQBT7952TFg=
+-----END CERTIFICATE-----
Index: examples/creddy_prover_tests/acme_rockets_intersection_rt0/Batman_private.pem
===================================================================
--- examples/creddy_prover_tests/acme_rockets_intersection_rt0/Batman_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_intersection_rt0/Batman_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
Index: examples/creddy_prover_tests/acme_rockets_intersection_rt0/Coyote_ID.pem
===================================================================
--- examples/creddy_prover_tests/acme_rockets_intersection_rt0/Coyote_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_intersection_rt0/Coyote_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
Index: examples/creddy_prover_tests/acme_rockets_intersection_rt0/Coyote_private.pem
===================================================================
--- examples/creddy_prover_tests/acme_rockets_intersection_rt0/Coyote_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_intersection_rt0/Coyote_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
Index: examples/creddy_prover_tests/acme_rockets_intersection_rt0/README
===================================================================
--- examples/creddy_prover_tests/acme_rockets_intersection_rt0/README	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_intersection_rt0/README	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,52 @@
+#!/bin/sh
+
+#This example demonstrates intersections.
+#
+#In order to buy rockets from Acme, you must be BOTH a preferred customer
+#AND a WarnerBros character. In this example, the following query will be
+#successful:
+#
+#    Acme.buy_rockets <-?- Coyote
+#
+#The following query will fail (because Batman does not have the
+#attribute WarnerBros.character):
+#
+#    Acme.buy_rockets <-?- Batman
+#
+#Acme.buy_rockets <- Acme.preferred_customer & WarnerBros.character
+#Acme.preferred_customer <- Coyote
+#Acme.preferred_customer <- Batman
+#WarnerBros.character <- Coyote
+#
+
+rm -rf *.xml *.pem
+
+creddy --generate --cn Acme
+
+creddy --generate --cn WarnerBros
+
+creddy --generate --cn Coyote
+
+creddy --generate --cn Batman
+
+creddy --attribute \
+       --issuer Acme_ID.pem --key Acme_private.pem --role buy_rockets \
+       --subject-cert Acme_ID.pem --subject-role preferred_customer \
+       --subject-cert WarnerBros_ID.pem --subject-role character \
+       --out Acme_buy_rockets__Acme_preferred_customer_and_WarnerBros_character_attr.xml
+
+creddy --attribute \
+       --issuer Acme_ID.pem --key Acme_private.pem --role preferred_customer \
+       --subject-cert Coyote_ID.pem \
+       --out Acme_preferred_customer__Coyote_attr.xml
+
+creddy --attribute \
+       --issuer Acme_ID.pem --key Acme_private.pem --role preferred_customer \
+       --subject-cert Batman_ID.pem \
+       --out Acme_preferred_customer__Batman_attr.xml
+
+creddy --attribute \
+       --issuer WarnerBros_ID.pem --key WarnerBros_private.pem --role character \
+       --subject-cert Coyote_ID.pem \
+       --out WarnerBros_character__Coyote_attr.xml
+
Index: examples/creddy_prover_tests/acme_rockets_intersection_rt0/WarnerBros_ID.pem
===================================================================
--- examples/creddy_prover_tests/acme_rockets_intersection_rt0/WarnerBros_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_intersection_rt0/WarnerBros_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
Index: examples/creddy_prover_tests/acme_rockets_intersection_rt0/WarnerBros_character__Coyote_attr.xml
===================================================================
--- examples/creddy_prover_tests/acme_rockets_intersection_rt0/WarnerBros_character__Coyote_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_intersection_rt0/WarnerBros_character__Coyote_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<signed-credential>
+    <credential xml:id="ref0">
+	<type>abac</type>
+	<version>1.0</version>
+	<expires>2014-05-06T21:52:22Z</expires>
+	<rt0>ef2e4e246b041f51396bfb6af90576dddf11a555.character&lt;-e8d4f94b7f585aaf97f461f7c3c983bfdabfbbf4</rt0>
+    </credential>
+    <signatures>
+	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+	    <SignedInfo>
+		<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+		<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<Reference URI="#ref0">
+		    <Transforms>
+			<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+		    </Transforms>
+		    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		    <DigestValue>GhiTuVSb859FKyV8awNVOng1NL8=</DigestValue>
+		</Reference>
+	    </SignedInfo>
+	    <SignatureValue>JI0ElbLSF7S+oVildXttAcei6dHebWFPw2bSV4Uglp9JMNEOJpqz3BcDrCtSe6nM
+liPQk84/fUL5EiDIkzY6nCcKcm5gLo8CoDTpjnrEGUSRLzluKCWgQHHW8Nsaiv0f
+Dstq50EqorsPUQqymm9BZ132RX/VLjFhBR1yRFdJA9euCfbMJIaOB1vYrGZ6X5tE
+HX3/6D2k1qYHyFBtIxgfSVKFhx5V2A5POVbozGfv6BR4bOGRh3dPkJ1UndYh71Kd
+nl7Gkyu9MmfbgY3zHdhLrzniicn0+LitKNuD1Lwo7e6GlBm91gPh132I6vokXKYc
+FlIVU5Lg/yeLoRokH/K28w==</SignatureValue>
+	    <KeyInfo>
+	      <KeyValue>
+<RSAKeyValue>
+<Modulus>
+vpegtNi+jw56yw/3puutJ1KIyO72snwW437+gsCONj2OeQYOnN1nazuziSa7qfVq
+WyjsG/WyHmmGUaE4DiMpCgyD7pRxzg+NLaQHiW6w/qCKsKBlC+xBmJAouvUNj2+6
+m6HZKlx3UBu/EkSbhonj1lR+RfTa2O7t2gPEIT5ztzwVmxTpx82+7Br4OJSdju22
+AYNIKtauqmGjF4YZ0ekfZj9MY+lgsJ5IebWtQpFsTUQxEgYNlv0n1dO2XFEAYQpO
+GzAcZ/oASEcvU9JKmNaC9yg4w+AOvLHaZ3T321Mh+fLi9QdFnbyyJAKBZA7tqc2b
+CwiUCPnnCDb2rFWJ3cmu1Q==
+</Modulus>
+<Exponent>
+AQAB
+</Exponent>
+</RSAKeyValue>
+</KeyValue>
+		<X509Data>
+		    
+		    
+		    
+		<X509Certificate>MIIDDzCCAfegAwIBAgIIHJt3JZrvuS4wDQYJKoZIhvcNAQEFBQAwFTETMBEGA1UE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</X509Certificate>
+<X509SubjectName>CN=WarnerBros</X509SubjectName>
+<X509IssuerSerial>
+<X509IssuerName>CN=WarnerBros</X509IssuerName>
+<X509SerialNumber>2061372257849030958</X509SerialNumber>
+</X509IssuerSerial>
+</X509Data>
+	    </KeyInfo>
+	</Signature>
+    </signatures>
+</signed-credential>
Index: examples/creddy_prover_tests/acme_rockets_intersection_rt0/WarnerBros_private.pem
===================================================================
--- examples/creddy_prover_tests/acme_rockets_intersection_rt0/WarnerBros_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_intersection_rt0/WarnerBros_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEowIBAAKCAQEAvpegtNi+jw56yw/3puutJ1KIyO72snwW437+gsCONj2OeQYO
+nN1nazuziSa7qfVqWyjsG/WyHmmGUaE4DiMpCgyD7pRxzg+NLaQHiW6w/qCKsKBl
+C+xBmJAouvUNj2+6m6HZKlx3UBu/EkSbhonj1lR+RfTa2O7t2gPEIT5ztzwVmxTp
+x82+7Br4OJSdju22AYNIKtauqmGjF4YZ0ekfZj9MY+lgsJ5IebWtQpFsTUQxEgYN
+lv0n1dO2XFEAYQpOGzAcZ/oASEcvU9JKmNaC9yg4w+AOvLHaZ3T321Mh+fLi9QdF
+nbyyJAKBZA7tqc2bCwiUCPnnCDb2rFWJ3cmu1QIDAQABAoIBAAX/I1FNWIGLxRVK
+hVI9LA+Gq0MXMa/f86BoyH04rcDLIwZvyFnrJWvcTwPLsi/gxt3jZbpjep02WMGM
+vwTC2nG0fxoslYAUQS7kcFBEqVD5oCN6iHNdlZrFPmLTfv+6Vja7WufYTPC6TsK2
+YeZTxFVkBy0QTSpyKg2n/K3HF0D2lxa4A4GX0YWtR674SIDbvgnmaKlVMPK2roUo
+Er8e+sjWpNDmJ4ZzKB6FG/iOA2CpJwF8bVgSnmCrnSTOk/Vp6Fypl+WDdWZC5FUw
+vgx6Rwr+Ke7A61lsUEs8Vv0ROnM9cOCg/lhzQqGtVMczuesUVxaiPvXwSn2iqM0J
++FgoC6kCgYEA5Q7KXX1DmW2J93nH5tusTzROyUVcunOmoH4MvAH+4fl8LHHY9TyB
+HUPvenpXd/Jt/58jNaiaySK2HcB6ehseO2DfEtTXu1UrC6uwMi1OCOeejxkc8Eh+
+FV1fkYqz4mmsm9ehSpd+5Ls/byv8JReBeslS2fecsT/kMkpA1YoIt4MCgYEA1QKY
+PSGnTsZ5flr8dANtPWEjSwiBXkA2Q20z2o9j64HwW9ffNAHPYSHB6pFafZUfPEt5
+9OuoVdla8y/cY4MFbYkofqLbY8YhhzdFM1Vkx964eiCZo7/580eVfvhynR2Sffsm
+C7rObbJDoqo63pIEWIAd0OOFYb3AdnQcenT6WMcCgYEA1Hk7ziz8H740VJNqkwMC
+exYSXzEwKuRMlGNYfK19OTCrtq6EijdtrS/vXLVPnbwLvSppBsU3j4vbUw3QjqPJ
+D1t0kYtN8j+2hkTkVCciU7BGrIanCVy1WCwdEmyPIF7V9lm3C/IrixEGbqFmayG6
+waMub3H4r5KMovmt2mcIXvECgYBkSfxzi8zCAiBhpWUHGjXsmDeNtEt0nLbvuBKZ
+7LkWwO7xzwl/6vpAuSwbzKPWTMeQE9kvv2RaRyPTK82P7Lg5gkJWnUa+CyLuDs++
+A46Xq/0fQwoTVufP6vwv87nCz5GRTxXyn9lhPHUruQpOkGELagafuv+prTVYkAJ4
+hWr5MQKBgE4pjyezj8DVrqwzEBtsrpk4hMQ20GO/7HjzsYZRyp4fLZtayFoqYAvB
+YP0ALwauJk21gdjiZPLZjKjWKV55Hzfih+AM1oGbBl4/CFauPPI4dssCVE+XNB1F
+788v2RSSFWp7vcxbOhLh7fR+NSlw8pWtOQfno+vZBACmy/Rly0HS
+-----END RSA PRIVATE KEY-----
Index: examples/creddy_prover_tests/acme_rockets_intersection_rt0/run_query
===================================================================
--- examples/creddy_prover_tests/acme_rockets_intersection_rt0/run_query	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_intersection_rt0/run_query	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,43 @@
+#!/bin/sh
+# acme_rockets_intersection
+
+pwd=`pwd`
+
+eloc=`which abac_prover | sed 's/\/abac_prover//'`
+if [ "$eloc" = "" ]; then
+  echo "ERROR: abac_prover is not in the search path!!!"
+  exit 1
+fi
+keyloc=$pwd
+
+acme=`creddy --keyid --cert $keyloc/Acme_ID.pem`
+batman=`creddy --keyid --cert $keyloc/Batman_ID.pem`
+coyote=`creddy --keyid --cert $keyloc/Coyote_ID.pem`
+
+buy_rockets="$acme.buy_rockets"
+coyote_prin="$coyote"
+batman_prin="$batman"
+bad_buy_rockets="$acme.bad_buy_rockets"
+bad_buy_rockets2="99$acme.buy_rockets"
+
+echo "  "
+echo "===good============ Acme.buy_rockets <- Coyote"
+$eloc/abac_prover  --keystore $keyloc \
+              --role "$buy_rockets" --principal "$coyote_prin"
+
+echo "  "
+echo "===bad============ Acme.bad_buy_rockets <- Coyote"
+$eloc/abac_prover  --keystore $keyloc \
+              --role "$bad_buy_rockets" --principal "$coyote_prin"
+
+echo "  "
+echo "===bad============ 99Acme.buy_rockets <- Coyote"
+$eloc/abac_prover  --keystore $keyloc \
+              --role "$bad_buy_rockets2" --principal "$coyote_prin"
+
+echo "  "
+echo "===bad=============== Acme.buy_rockets <- Batman"
+$eloc/abac_prover  --keystore $keyloc \
+              --role "$buy_rockets" --principal "$batman_prin"
+
+
Index: examples/creddy_prover_tests/acme_rockets_rt0/Acme_ID.pem
===================================================================
--- examples/creddy_prover_tests/acme_rockets_rt0/Acme_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_rt0/Acme_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
Index: examples/creddy_prover_tests/acme_rockets_rt0/Acme_buy_rockets__Acme_preferred_customer_attr.xml
===================================================================
--- examples/creddy_prover_tests/acme_rockets_rt0/Acme_buy_rockets__Acme_preferred_customer_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_rt0/Acme_buy_rockets__Acme_preferred_customer_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<signed-credential>
+    <credential xml:id="ref0">
+	<type>abac</type>
+	<version>1.0</version>
+	<expires>2014-05-06T21:52:23Z</expires>
+	<rt0>4903b59978115a1e2a8f8bd239747330b35c05b8.buy_rockets&lt;-4903b59978115a1e2a8f8bd239747330b35c05b8.preferred_customer</rt0>
+    </credential>
+    <signatures>
+	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+	    <SignedInfo>
+		<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+		<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<Reference URI="#ref0">
+		    <Transforms>
+			<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+		    </Transforms>
+		    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		    <DigestValue>V3BUWAJ7LwtwNOP1Blr0PiEUOFY=</DigestValue>
+		</Reference>
+	    </SignedInfo>
+	    <SignatureValue>qnCq/JD98REkrmNyomg/Inqjj2xwzVpUUg+UiRYXKs0PSF8Uk43Rgl6zbpjvEH7T
+hldRM5qVQFYZncTey5vR1I9rDODORpXlc9JSUnrrBMknJhRV05sklNCMixL76jjn
+C+sD7TetEDXHtGKokYYaFMJGXgXo9t7c/YrgRy17hSYVSUX/WHsvAF+zIBeMwL9o
+30hUDLIDRpgSJ0wCtqOsxvXmbFJKFSMNwryck6luG1WDgoC4RAzuRfwuvz3WB7JW
+XhsQq6AupMQ1Vqx1xyAAcEH44AU+mk/IRAHDzhG50WpHSg37d0G6acTi8fwmm+eU
+783k4K+SnAFayMB1vVMJFg==</SignatureValue>
+	    <KeyInfo>
+	      <KeyValue>
+<RSAKeyValue>
+<Modulus>
+tjPl9sKv0ZvttyXDmcqYMOlC0cru//6U/GrDrmqTCd3fXoCWDmGvoCpLKaDP5749
+n5ERzXcAj5CmKDUY5dk48HZOPhOTpl4r0xW0PtGx9557407OHDyf5zF47h4sGAua
+iuybclQ+FKE/6Aq3nv+Zep5mFfIUmpzdXoBvHvMFMJAwDG1kXPeZ3WdkUrqxBK4Y
+CwApKTEmuHDpc9uffHe9cb7EEjhWysmof3h183JDR9zUFBEt7S4KrGE/t0nV4SEy
+rkD9/vIaNPL2pAnLTavLvL8Jhg79wpi3NiXvGP9YI1M1zK6PhdaACliJljuUhe26
+u6lDEApnHMSYDaiYO/ysYw==
+</Modulus>
+<Exponent>
+AQAB
+</Exponent>
+</RSAKeyValue>
+</KeyValue>
+		<X509Data>
+		    
+		    
+		    
+		<X509Certificate>MIIDAzCCAeugAwIBAgIIbxPf87MNcWAwDQYJKoZIhvcNAQEFBQAwDzENMAsGA1UE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</X509Certificate>
+<X509SubjectName>CN=Acme</X509SubjectName>
+<X509IssuerSerial>
+<X509IssuerName>CN=Acme</X509IssuerName>
+<X509SerialNumber>8003987200541552992</X509SerialNumber>
+</X509IssuerSerial>
+</X509Data>
+	    </KeyInfo>
+	</Signature>
+    </signatures>
+</signed-credential>
Index: examples/creddy_prover_tests/acme_rockets_rt0/Acme_preferred_customer__Coyote_attr.xml
===================================================================
--- examples/creddy_prover_tests/acme_rockets_rt0/Acme_preferred_customer__Coyote_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_rt0/Acme_preferred_customer__Coyote_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<signed-credential>
+    <credential xml:id="ref0">
+	<type>abac</type>
+	<version>1.0</version>
+	<expires>2014-05-06T21:52:23Z</expires>
+	<rt0>4903b59978115a1e2a8f8bd239747330b35c05b8.preferred_customer&lt;-cc40ac498c3e29aff34137b46cdf408f186adb1f</rt0>
+    </credential>
+    <signatures>
+	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+	    <SignedInfo>
+		<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+		<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<Reference URI="#ref0">
+		    <Transforms>
+			<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+		    </Transforms>
+		    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		    <DigestValue>cJm0j4pxhYXWIR0Vv+y8Q6OfpDw=</DigestValue>
+		</Reference>
+	    </SignedInfo>
+	    <SignatureValue>bECEhnxH4qI7lKgBPu4V7PEi+71+fyW1J3GWN+PTO6MAIUMQ2SXrY27u3w31mB2I
+4h4s4LkKjVr7AJwF1YnlQQ61rYocufFmMQB7ADc/xvzuwBCGedmlstknTBMiPgRu
+a555tJvBPZiREoMXfgTMTm0u2+oW1Ypwbalq5BcAUMnHKPNM3lpb3BSv+B8PFxN9
+Rx7oFcoSVbmgAcObDDsoEuOQ0ob6gGpKVSh1hmElysVnJXWoaIzFvoFSQH5Bpp4O
+TihWsP2PLBRMAb8IACjSmDLGbBexW0X8u0bGHwyNHbUS27Mam6thOtRhv5Dgyngk
+pS+xgh3E3RaUjjFAkwAoNg==</SignatureValue>
+	    <KeyInfo>
+	      <KeyValue>
+<RSAKeyValue>
+<Modulus>
+tjPl9sKv0ZvttyXDmcqYMOlC0cru//6U/GrDrmqTCd3fXoCWDmGvoCpLKaDP5749
+n5ERzXcAj5CmKDUY5dk48HZOPhOTpl4r0xW0PtGx9557407OHDyf5zF47h4sGAua
+iuybclQ+FKE/6Aq3nv+Zep5mFfIUmpzdXoBvHvMFMJAwDG1kXPeZ3WdkUrqxBK4Y
+CwApKTEmuHDpc9uffHe9cb7EEjhWysmof3h183JDR9zUFBEt7S4KrGE/t0nV4SEy
+rkD9/vIaNPL2pAnLTavLvL8Jhg79wpi3NiXvGP9YI1M1zK6PhdaACliJljuUhe26
+u6lDEApnHMSYDaiYO/ysYw==
+</Modulus>
+<Exponent>
+AQAB
+</Exponent>
+</RSAKeyValue>
+</KeyValue>
+		<X509Data>
+		    
+		    
+		    
+		<X509Certificate>MIIDAzCCAeugAwIBAgIIbxPf87MNcWAwDQYJKoZIhvcNAQEFBQAwDzENMAsGA1UE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</X509Certificate>
+<X509SubjectName>CN=Acme</X509SubjectName>
+<X509IssuerSerial>
+<X509IssuerName>CN=Acme</X509IssuerName>
+<X509SerialNumber>8003987200541552992</X509SerialNumber>
+</X509IssuerSerial>
+</X509Data>
+	    </KeyInfo>
+	</Signature>
+    </signatures>
+</signed-credential>
Index: examples/creddy_prover_tests/acme_rockets_rt0/Acme_private.pem
===================================================================
--- examples/creddy_prover_tests/acme_rockets_rt0/Acme_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_rt0/Acme_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
Index: examples/creddy_prover_tests/acme_rockets_rt0/Coyote_ID.pem
===================================================================
--- examples/creddy_prover_tests/acme_rockets_rt0/Coyote_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_rt0/Coyote_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
Index: examples/creddy_prover_tests/acme_rockets_rt0/Coyote_private.pem
===================================================================
--- examples/creddy_prover_tests/acme_rockets_rt0/Coyote_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_rt0/Coyote_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
Index: examples/creddy_prover_tests/acme_rockets_rt0/README
===================================================================
--- examples/creddy_prover_tests/acme_rockets_rt0/README	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_rt0/README	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+#!/bin/sh
+
+#Acme.buy_rockets <- Acme.preferred_customer
+#Acme.preferred_customer <- Coyote
+
+rm -rf *.pem *.xml
+
+pwd=`pwd`
+eloc=`which creddy | sed 's/\/creddy//'`
+if [ "$eloc" = "" ]; then
+  echo "ERROR: creddy is not in the search path!!!"
+  exit 1
+fi
+
+$eloc/creddy --generate --cn Acme
+
+$eloc/creddy --generate --cn Coyote
+
+$eloc/creddy --attribute \
+       --issuer Acme_ID.pem --key Acme_private.pem --role buy_rockets \
+       --subject-cert Acme_ID.pem --subject-role preferred_customer \
+       --out Acme_buy_rockets__Acme_preferred_customer_attr.xml
+
+$eloc/creddy --attribute \
+       --issuer Acme_ID.pem --key Acme_private.pem --role preferred_customer \
+       --subject-cert Coyote_ID.pem \
+       --out Acme_preferred_customer__Coyote_attr.xml
Index: examples/creddy_prover_tests/acme_rockets_rt0/run_query
===================================================================
--- examples/creddy_prover_tests/acme_rockets_rt0/run_query	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/acme_rockets_rt0/run_query	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,48 @@
+#!/bin/sh
+
+pwd=`pwd`
+eloc=`which abac_prover | sed 's/\/abac_prover//'`
+if [ "$eloc" = "" ]; then
+  echo "ERROR: abac_prover is not in the search path!!!"
+  exit 1
+fi
+
+keyloc=$pwd
+
+acme=`creddy --keyid --cert $keyloc/Acme_ID.pem`
+coyote=`creddy --keyid --cert $keyloc/Coyote_ID.pem`
+
+preferred_customer="$acme.preferred_customer"
+buy_rockets="$acme.buy_rockets"
+coyote_prin="$coyote"
+friend="$acme.friend"
+acme_prin="$acme"
+
+#[keyid:Acme].role:preferred_customer <-?- [keyid:Coyote]
+#isMember(pCoyote, role(pAcme,preferred_customer), C).
+echo "  "
+echo "===good============ Acme.preferred_customer <- Coyote"
+$eloc/abac_prover  --keystore $keyloc \
+      --role "$preferred_customer" --principal "$coyote_prin"
+
+#[keyid:Acme].role:buy_rockets <-?- [keyid:Coyote]
+#isMember(pCoyote, role(pAcme,buy_rockets), C).
+echo "  "
+echo "===good=============== Acme.buy_rockets <- Coyote"
+$eloc/abac_prover  --keystore $keyloc \
+        --role "$buy_rockets" --principal "$coyote_prin"
+
+## this is not suppose to work
+#[keyid:Acme].role:buy_rockets <-?- [keyid:Acme].role:preferred_customer
+echo "  "
+echo "===bad=============== Acme.buy_rockets <- Acme.preferred_customer"
+$eloc/abac_prover  --keystore $keyloc \
+        --role "$buy_rockets" --principal "$preferred_customer"
+
+#[keyid:Coyote].role:friend <-?- [keyid:Acme]
+#isMember(pAcme, role(pCoyote,friend), C).
+echo "  "
+echo "===bad=============== Coyote.friend <- Acme"
+$eloc/abac_prover  --keystore $keyloc \
+        --role "$friend" --principal "$acme_prin"
+
Index: examples/creddy_prover_tests/experiment_create_rt0/Acme_ID.pem
===================================================================
--- examples/creddy_prover_tests/experiment_create_rt0/Acme_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/experiment_create_rt0/Acme_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
Index: examples/creddy_prover_tests/experiment_create_rt0/Acme_experiment_create__Acme_partner_experiment_create_attr.xml
===================================================================
--- examples/creddy_prover_tests/experiment_create_rt0/Acme_experiment_create__Acme_partner_experiment_create_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/experiment_create_rt0/Acme_experiment_create__Acme_partner_experiment_create_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<signed-credential>
+    <credential xml:id="ref0">
+	<type>abac</type>
+	<version>1.0</version>
+	<expires>2014-05-06T21:52:29Z</expires>
+	<rt0>08c10e98a109c39388e3a289c53298c9fb07b6e8.experiment_create&lt;-08c10e98a109c39388e3a289c53298c9fb07b6e8.partner.experiment_create</rt0>
+    </credential>
+    <signatures>
+	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+	    <SignedInfo>
+		<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+		<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<Reference URI="#ref0">
+		    <Transforms>
+			<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+		    </Transforms>
+		    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		    <DigestValue>xA/7bo/Pb/weH0ew4plm662KMEI=</DigestValue>
+		</Reference>
+	    </SignedInfo>
+	    <SignatureValue>CfHtCeCxDeB8urdxhBF0qDMRELT/HjWE2QFc4I+WXWSc/7x7LEOwOK/fSMDYTSGF
+K5+h8HvrYqLlG+ykPF0R3coJQjlhBm0wdJP2VIPOxNUMbs+x5rWwK1fAXwrSUaPN
+BlVA8tNFFDBN0+ZfnyYoo4Za2p9ZZevkiqbP9hCSgIA4Nxr7xr3wP5FvVK236aJ2
+D0yABnpbReW4wgfoYipAzGHiJE0cQST+xkkOVpw7/ZWEuoE87EzWAqCuAhcutHRp
+GA6NFmf/4GqQO1Cj37M317GcJBrTvqSD78z2ELXq3oNN743UshdCp271heSxJMXA
+nFMYPPVlU2cvDbqjZ/HH/g==</SignatureValue>
+	    <KeyInfo>
+	      <KeyValue>
+<RSAKeyValue>
+<Modulus>
+zQEDTywExj17Ru3vMb4i53Ks/zN9pcPAXRIUcBgGq75RzUsgP7LAzx9jArzNli+z
+qKsiNXu5EKhDyYcqmLOkdw3BKOlP9weCWGbZB4tRmysxRO5PKwSibpGJQjyHtyxI
+k8CUTUff09zQtSzhLH5wL1E5UK74KK3Cg/tuMFwW8F813EawP8H478KkMMkwYk8C
+LA3pUr0BhlsAJLa5sNY8W0KfHPk4h6vJ1fn4iujMsRoY11zNjE1i/GUA+6vq5mwW
+jrV+QQJUMK2dS+L+DjWON93LBLcJY7813dyxUeNwYeiClB9j/8X61PlgmO8lpv8Q
+8DHLutFI5BlSKI3qwlWcXQ==
+</Modulus>
+<Exponent>
+AQAB
+</Exponent>
+</RSAKeyValue>
+</KeyValue>
+		<X509Data>
+		    
+		    
+		    
+		<X509Certificate>MIIDAzCCAeugAwIBAgIIVccVMvuAlNMwDQYJKoZIhvcNAQEFBQAwDzENMAsGA1UE
+AxMEQWNtZTAeFw0xMzA1MDYyMTUyMjVaFw0xNjA0MjAyMTUyMjVaMA8xDTALBgNV
+BAMTBEFjbWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNAQNPLATG
+PXtG7e8xviLncqz/M32lw8BdEhRwGAarvlHNSyA/ssDPH2MCvM2WL7OoqyI1e7kQ
+qEPJhyqYs6R3DcEo6U/3B4JYZtkHi1GbKzFE7k8rBKJukYlCPIe3LEiTwJRNR9/T
+3NC1LOEsfnAvUTlQrvgorcKD+24wXBbwXzXcRrA/wfjvwqQwyTBiTwIsDelSvQGG
+WwAktrmw1jxbQp8c+TiHq8nV+fiK6MyxGhjXXM2MTWL8ZQD7q+rmbBaOtX5BAlQw
+rZ1L4v4ONY433csEtwljvzXd3LFR43Bh6IKUH2P/xfrU+WCY7yWm/xDwMcu60Ujk
+GVIojerCVZxdAgMBAAGjYzBhMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQD
+AgEGMB0GA1UdDgQWBBQIwQ6YoQnDk4jjoonFMpjJ+we26DAfBgNVHSMEGDAWgBQI
+wQ6YoQnDk4jjoonFMpjJ+we26DANBgkqhkiG9w0BAQUFAAOCAQEAUJHmXIDm9y+R
+ZPToqN0xrqz9aQIS4NoD7qvECF1CXfW6OxGbTXV8ZN6MptD9qOX3T+RDM/+y6D7+
+ydxx7uJQiG7fHE5givSbjPVOWAn89iC10au/aViz0T6/o3wgE0Lhlks50k9f/4sW
+1SDVXHabWrash9jGpi+xnTPDdnmusJVprLPGAMyD5bFNBma8ztVsTkO0GBXLdJHV
+OwVfHfiTzw4ZOsBeQZ3AffHF24nh9Uwkbn+t1gvpfTmsTK70ZpOJS6RSKJXtek4J
+CNVHGaaA5BxujUYXzy5rMA9aY2XBzvEqhmbrCIEJ/3WpZgwjXq6XSf9TCDpo0x1z
+TIVz+HAPow==</X509Certificate>
+<X509SubjectName>CN=Acme</X509SubjectName>
+<X509IssuerSerial>
+<X509IssuerName>CN=Acme</X509IssuerName>
+<X509SerialNumber>6180932322301351123</X509SerialNumber>
+</X509IssuerSerial>
+</X509Data>
+	    </KeyInfo>
+	</Signature>
+    </signatures>
+</signed-credential>
Index: examples/creddy_prover_tests/experiment_create_rt0/Acme_partner__Globotron_attr.xml
===================================================================
--- examples/creddy_prover_tests/experiment_create_rt0/Acme_partner__Globotron_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/experiment_create_rt0/Acme_partner__Globotron_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<signed-credential>
+    <credential xml:id="ref0">
+	<type>abac</type>
+	<version>1.0</version>
+	<expires>2014-05-06T21:52:30Z</expires>
+	<rt0>08c10e98a109c39388e3a289c53298c9fb07b6e8.partner&lt;-59981b7767298f8e155e2db3fec4dbc485f9922d</rt0>
+    </credential>
+    <signatures>
+	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+	    <SignedInfo>
+		<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+		<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<Reference URI="#ref0">
+		    <Transforms>
+			<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+		    </Transforms>
+		    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		    <DigestValue>3XVaasIc7MSITUdSPTgte2QiVg4=</DigestValue>
+		</Reference>
+	    </SignedInfo>
+	    <SignatureValue>Fi0UzEoXpMxz8OlUmH4yjgX+i74UZkA+srIkxSx3ZWhxAyHwRrG6HrjAu/2CC2u/
+W6E8cq3Nf4T/qYbF6Fx8qcFNGo/eoeUGVT+V6MUUUGt5mgUN0hXEMPg5n2DXy3yw
+xHedi9d0O1/dE/3AbFrpcTmJw2jfJqVpdxehCd+rE6scO75igHCsk7QrKA6cHY4r
+k28RWOccuTfqVdMwavqD4AcpC8RqMkWpSK3JNIXicNEN/yCAoblE/MA3ziiMmRaW
+r25HKeQvlP4yEQiy7rbqDqDGhHhISrg3k3opC2DkbTXRk/R0KV43cYSbH8CcG9sp
+QYJlUaKSC8J2UEjbB7GktQ==</SignatureValue>
+	    <KeyInfo>
+	      <KeyValue>
+<RSAKeyValue>
+<Modulus>
+zQEDTywExj17Ru3vMb4i53Ks/zN9pcPAXRIUcBgGq75RzUsgP7LAzx9jArzNli+z
+qKsiNXu5EKhDyYcqmLOkdw3BKOlP9weCWGbZB4tRmysxRO5PKwSibpGJQjyHtyxI
+k8CUTUff09zQtSzhLH5wL1E5UK74KK3Cg/tuMFwW8F813EawP8H478KkMMkwYk8C
+LA3pUr0BhlsAJLa5sNY8W0KfHPk4h6vJ1fn4iujMsRoY11zNjE1i/GUA+6vq5mwW
+jrV+QQJUMK2dS+L+DjWON93LBLcJY7813dyxUeNwYeiClB9j/8X61PlgmO8lpv8Q
+8DHLutFI5BlSKI3qwlWcXQ==
+</Modulus>
+<Exponent>
+AQAB
+</Exponent>
+</RSAKeyValue>
+</KeyValue>
+		<X509Data>
+		    
+		    
+		    
+		<X509Certificate>MIIDAzCCAeugAwIBAgIIVccVMvuAlNMwDQYJKoZIhvcNAQEFBQAwDzENMAsGA1UE
+AxMEQWNtZTAeFw0xMzA1MDYyMTUyMjVaFw0xNjA0MjAyMTUyMjVaMA8xDTALBgNV
+BAMTBEFjbWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNAQNPLATG
+PXtG7e8xviLncqz/M32lw8BdEhRwGAarvlHNSyA/ssDPH2MCvM2WL7OoqyI1e7kQ
+qEPJhyqYs6R3DcEo6U/3B4JYZtkHi1GbKzFE7k8rBKJukYlCPIe3LEiTwJRNR9/T
+3NC1LOEsfnAvUTlQrvgorcKD+24wXBbwXzXcRrA/wfjvwqQwyTBiTwIsDelSvQGG
+WwAktrmw1jxbQp8c+TiHq8nV+fiK6MyxGhjXXM2MTWL8ZQD7q+rmbBaOtX5BAlQw
+rZ1L4v4ONY433csEtwljvzXd3LFR43Bh6IKUH2P/xfrU+WCY7yWm/xDwMcu60Ujk
+GVIojerCVZxdAgMBAAGjYzBhMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQD
+AgEGMB0GA1UdDgQWBBQIwQ6YoQnDk4jjoonFMpjJ+we26DAfBgNVHSMEGDAWgBQI
+wQ6YoQnDk4jjoonFMpjJ+we26DANBgkqhkiG9w0BAQUFAAOCAQEAUJHmXIDm9y+R
+ZPToqN0xrqz9aQIS4NoD7qvECF1CXfW6OxGbTXV8ZN6MptD9qOX3T+RDM/+y6D7+
+ydxx7uJQiG7fHE5givSbjPVOWAn89iC10au/aViz0T6/o3wgE0Lhlks50k9f/4sW
+1SDVXHabWrash9jGpi+xnTPDdnmusJVprLPGAMyD5bFNBma8ztVsTkO0GBXLdJHV
+OwVfHfiTzw4ZOsBeQZ3AffHF24nh9Uwkbn+t1gvpfTmsTK70ZpOJS6RSKJXtek4J
+CNVHGaaA5BxujUYXzy5rMA9aY2XBzvEqhmbrCIEJ/3WpZgwjXq6XSf9TCDpo0x1z
+TIVz+HAPow==</X509Certificate>
+<X509SubjectName>CN=Acme</X509SubjectName>
+<X509IssuerSerial>
+<X509IssuerName>CN=Acme</X509IssuerName>
+<X509SerialNumber>6180932322301351123</X509SerialNumber>
+</X509IssuerSerial>
+</X509Data>
+	    </KeyInfo>
+	</Signature>
+    </signatures>
+</signed-credential>
Index: examples/creddy_prover_tests/experiment_create_rt0/Acme_private.pem
===================================================================
--- examples/creddy_prover_tests/experiment_create_rt0/Acme_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/experiment_create_rt0/Acme_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
Index: examples/creddy_prover_tests/experiment_create_rt0/Alice_ID.pem
===================================================================
--- examples/creddy_prover_tests/experiment_create_rt0/Alice_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/experiment_create_rt0/Alice_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
Index: examples/creddy_prover_tests/experiment_create_rt0/Alice_admin__Bob_attr.xml
===================================================================
--- examples/creddy_prover_tests/experiment_create_rt0/Alice_admin__Bob_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/experiment_create_rt0/Alice_admin__Bob_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<signed-credential>
+    <credential xml:id="ref0">
+	<type>abac</type>
+	<version>1.0</version>
+	<expires>2014-05-06T21:52:30Z</expires>
+	<rt0>4d8648573803d8c4e7e01e9089221ec59c6e4aee.power_user&lt;-dde47feb81858a19478877336013ad436f62cfc6</rt0>
+    </credential>
+    <signatures>
+	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+	    <SignedInfo>
+		<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+		<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<Reference URI="#ref0">
+		    <Transforms>
+			<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+		    </Transforms>
+		    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		    <DigestValue>PuF5ucIcTyGfiOpAIe8aeAgMsbw=</DigestValue>
+		</Reference>
+	    </SignedInfo>
+	    <SignatureValue>ihR2wiaqoYA3jsCw42HlIb1nFnOZjX6mfqfWVbJZZOzayF16VRv7E5R6qna1B20j
+jMWot7uYsIWb3/QkTpJ+XREp/vuGstEb3Zs9h5jfUjtW4JMFcMy7FaUPY0zOqII3
+mU8jIi7HqBFQH1HE1a6sjJUEN10Iun5K3aCWd7Kqu6qJLsmuZc64qZG3O8avLS+n
+b2nXyQVVWEa0JmtfkiwxB0Bq4/97pM8e0iuH67yLVsJIIEjOc2/lyy4Wf6Hadpyw
+rIcEUALaOJoEZYxSWJfjfhiufpt9gTohE+snu/vBGee0hN6w2yGxSz+BVeZBSHpL
+fbZVtsh5UamfERChZQGQXg==</SignatureValue>
+	    <KeyInfo>
+	      <KeyValue>
+<RSAKeyValue>
+<Modulus>
+5/ly1Unxi9KNFqF/Xu0a7LjU0XMFfXoB4bZITxKQ8MpZVREpb40+8m5L+hPGE1PP
+Pl/Et29L0IePQ0TuOEMrytYOpWU1iWTxHv68nAMpNnil/KAMTLPqkbs1jaWWCz9S
+n3XGRyRWrhrfMBaMA7Pu5oTvaBwPcIepY+dymorSWhXFnbpXAwl2/j0QbW1cUYAJ
+0w9T+q8Pfx7zARX2y+RZwM85QHjhDlM1dnDn0AytQqyPedx9Y67zh6dypyhMEF2G
+VcOd5+qTG6yclrFQ8BRqDfSJZxqCswBgFYs6pwM5E6I0QG2uOPkdTdxfd8wOK+M6
+zmruWaO2wbd+Ee7ld9VTvQ==
+</Modulus>
+<Exponent>
+AQAB
+</Exponent>
+</RSAKeyValue>
+</KeyValue>
+		<X509Data>
+		    
+		    
+		    
+		<X509Certificate>MIIDBTCCAe2gAwIBAgIIP486Y/WMqJQwDQYJKoZIhvcNAQEFBQAwEDEOMAwGA1UE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</X509Certificate>
+<X509SubjectName>CN=Alice</X509SubjectName>
+<X509IssuerSerial>
+<X509IssuerName>CN=Alice</X509IssuerName>
+<X509SerialNumber>4579943547054893204</X509SerialNumber>
+</X509IssuerSerial>
+</X509Data>
+	    </KeyInfo>
+	</Signature>
+    </signatures>
+</signed-credential>
Index: examples/creddy_prover_tests/experiment_create_rt0/Alice_private.pem
===================================================================
--- examples/creddy_prover_tests/experiment_create_rt0/Alice_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/experiment_create_rt0/Alice_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
Index: examples/creddy_prover_tests/experiment_create_rt0/Bob_ID.pem
===================================================================
--- examples/creddy_prover_tests/experiment_create_rt0/Bob_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/experiment_create_rt0/Bob_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
Index: examples/creddy_prover_tests/experiment_create_rt0/Bob_private.pem
===================================================================
--- examples/creddy_prover_tests/experiment_create_rt0/Bob_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/experiment_create_rt0/Bob_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEowIBAAKCAQEAwvcjNi09KZz2MrH7IZoUvlYQlkS2cPlTTqvvVNKfE0+HdVGQ
+++6eKACqCmehHPzoWL6cxWruz/EEIZH+lBNDma3TyeAFVV5Od3TJCCJxcW3dwBad
+aa47DcAobsvhyFQKEdkXvRdhDAWOCCQMGdORqKg1J6yAqp2d/kblVyJYTZQSnKVs
+3SKu0WquwjZfHrzkii/CwWXeYpgnHibZFKavB8OvXB3OvRL6QB89LcC0TaI58QAZ
+sBleZW+a5B6W2dc35g+g67Hii34pqs8oizomNPpyDf0E5u3Ftg7CfH4qkb+Mv4rI
+6+Qfftnuw1YeAnJUYYN+JkXV0IeS85pt2hEk/wIDAQABAoIBAQCuMpqngWwwjin7
+ycKUl1MJbWSMnwBTmLGyjTTeGQJBAsIJNMPSFbYCD/XeLhFqER6YjFcOnSibasFC
+LWvFaiDwYrvkl+CsEgMSAKrONdgefQew5YPoNOBWvOZjeI9Xqp8Eq2/mZ8kyMJRi
++bJGMR7oDsLPm/WqfAH6e+XWIL29MYvHaGcGd1qriizY3eLtoIbuLRyzgND6PAHr
+EjOqNj4B0ZQMQl1EQqEBg/DchNn+Yj0EOwPYdSXPgKjYOHZB4gyqBceiRfuUHLNz
+dufoJIPFtOjTh/ueXyhYBx17m435dSXWfjHwXDpDMu2/rYi+Hd4glf/MOaQxf/2l
+5M7EvcfhAoGBAPDCgRinB/PdcfzfpJu4wD05zXw2ZTvAueg1YHlVNhLj8VPDMn3F
+BF6WQVOYaYCZWN/NwIsFFVBsGyjofaOmGfKBYlDzXcWTsDtTCL/QyNG82zlfCocN
+66BhoFxYDrXJa2mAH3sTX9ClTITlM4W/gC2g4rQdJbIpkwY++MK8z8VTAoGBAM9O
+icN0WYFsgmPXpSzio/RROR1kYiTHVvGrvi2KD0GAdHoACFs9e6ef16Q5zatFFREm
+w1xJ67O3yxRDbUN1qn7tS+HQ2iWh9PcRhG5u8nnLnzgWPhgK3uWFd/m+IPcYX3kC
+FxmHhchxcaOil91E0rmnjOd5lOJbg2Q7L/Yp++AlAoGAJ3dK4DapOBGJ2PD0M86i
+PKcYBw+HorbiAq2VRe5w8cHJ0nhB85nzMGojBUgLq1f32KAKuv83UjqWbStHRSc6
+Q6Vv72MlcPjXv7HJ0l+wO6lgqlPpDuB6So0WU2zf5G7DG8Uz4+H2J+ag13wW6QrO
+QSyJXQsWHdFw12pFLu7yhB8CgYAT28wqowyn70MWWWQDRrq5/sXf4Ovd5hKYGAGh
+zyXi+nEt9q7WPq+HwTIhE0B2dams+O+h+ZrQnnyftk3TNoRcoFKykRU0oa0btdvf
+0FT+AdmAv/C20OPFTOHPVL1HrlgG+YJI+ciBCQz/xeWSVrNxAXHoAqeWf3m4skrH
+5AGy2QKBgAJ40eex8B5Ewx50f89KHxMn7EqvJSbdDyAhBS3dRBWvCwDrSqHPOUDG
+NPngXLJaoafWcGQjbkkcrgKUT/1WFo+myaFl/ohYOOgMXu+TMS77l9KumGEeHBNK
+AT3eZ3NRmWLfzZ/oTWG4xMr/+v7IGCBcmyZ9VaierNkp2YLTkx7+
+-----END RSA PRIVATE KEY-----
Index: examples/creddy_prover_tests/experiment_create_rt0/Globotron_ID.pem
===================================================================
--- examples/creddy_prover_tests/experiment_create_rt0/Globotron_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/experiment_create_rt0/Globotron_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
Index: examples/creddy_prover_tests/experiment_create_rt0/Globotron_admin__Alice_attr.xml
===================================================================
--- examples/creddy_prover_tests/experiment_create_rt0/Globotron_admin__Alice_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/experiment_create_rt0/Globotron_admin__Alice_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<signed-credential>
+    <credential xml:id="ref0">
+	<type>abac</type>
+	<version>1.0</version>
+	<expires>2014-05-06T21:52:30Z</expires>
+	<rt0>59981b7767298f8e155e2db3fec4dbc485f9922d.admin&lt;-4d8648573803d8c4e7e01e9089221ec59c6e4aee</rt0>
+    </credential>
+    <signatures>
+	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+	    <SignedInfo>
+		<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+		<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<Reference URI="#ref0">
+		    <Transforms>
+			<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+		    </Transforms>
+		    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		    <DigestValue>6tEYUN2Z1/DDWd0aCoy0cnVWxG0=</DigestValue>
+		</Reference>
+	    </SignedInfo>
+	    <SignatureValue>r2jaSH7bAoIHnSieO2Cua77b8ljEi4d6K7SrBRXTS5hrCmC+V1xm44afXAvSJqJS
+PAXwPwSQkV0AYRXYVZN4CnCGZK+W1iyhsBHHqvzK89ruKL272F7a8qx3e4XMmizP
++J55tb1IzZW8W99Delrg8RUsmiSzd8t5/7CxIyZJy+vDTLaRTSavVGbpj/ofm9Vx
+O0SGeVkwo0r1C4cNtGxxx2bren8/LYyQHX+Q+7Hgfc4Bwtqlj5gViQcfkQZ1gwg2
+ZooGG4HCaNk4jkbmMVtmiexo505wIYc30MI6nKW1K/NbPyS8zXZBv8gMBGnmJ6Y+
+R0Gfe+3kiYaVQvbU5SSFYw==</SignatureValue>
+	    <KeyInfo>
+	      <KeyValue>
+<RSAKeyValue>
+<Modulus>
+z6vEOJEOCuLcjv5l1KCApY7pUH8Abw6p6CROx4s+/9uraUoHd3m4k9y7WvYRvGil
+9VeNgRLndEU0BXEqCyUJw9L0hw+qvX6gA+zeBZtUOBSIbTOO5Msbol32Oxd8HoGm
+CIcda7DbhHGgmbEUgmwDeDPzy4nyEtdVvr092edRG3fkt69MjgZJiAowWuRns4vc
+vEXX9dgmbvD/z5GOJNcYVz9f3osc2MzjYqiM8ODHjmEqWbev0TNxC5NSiGSnA2SB
+SG13eHB2AMCpuCZhG3ybySLoNMWyRQIowckm+pwML6gYGjZPECrBmnQvjIp1n9/j
+TRdeeKZ+wlWBlbIBag66fQ==
+</Modulus>
+<Exponent>
+AQAB
+</Exponent>
+</RSAKeyValue>
+</KeyValue>
+		<X509Data>
+		    
+		    
+		    
+		<X509Certificate>MIIDDjCCAfagAwIBAgIJAJn+tBzB0q6pMA0GCSqGSIb3DQEBBQUAMBQxEjAQBgNV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</X509Certificate>
+<X509SubjectName>CN=Globotron</X509SubjectName>
+<X509IssuerSerial>
+<X509IssuerName>CN=Globotron</X509IssuerName>
+<X509SerialNumber>11096504567491374761</X509SerialNumber>
+</X509IssuerSerial>
+</X509Data>
+	    </KeyInfo>
+	</Signature>
+    </signatures>
+</signed-credential>
Index: examples/creddy_prover_tests/experiment_create_rt0/Globotron_experiment_create__Globotron_admin_power_user_attr.xml
===================================================================
--- examples/creddy_prover_tests/experiment_create_rt0/Globotron_experiment_create__Globotron_admin_power_user_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/experiment_create_rt0/Globotron_experiment_create__Globotron_admin_power_user_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<signed-credential>
+    <credential xml:id="ref0">
+	<type>abac</type>
+	<version>1.0</version>
+	<expires>2014-05-06T21:52:30Z</expires>
+	<rt0>59981b7767298f8e155e2db3fec4dbc485f9922d.experiment_create&lt;-59981b7767298f8e155e2db3fec4dbc485f9922d.admin.power_user</rt0>
+    </credential>
+    <signatures>
+	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+	    <SignedInfo>
+		<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+		<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<Reference URI="#ref0">
+		    <Transforms>
+			<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+		    </Transforms>
+		    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		    <DigestValue>aqnm54GmwXoPJc8KNrKK1G7eRxE=</DigestValue>
+		</Reference>
+	    </SignedInfo>
+	    <SignatureValue>Ov1H3qqG3QZ0CdPicIWFgL+InFB3dAKs5nWxA5Wq2aXq+pR0sds/xvzWaWjyZojf
+q7t3Rc5RzkXZArl8SMZEgWVXeqr5jM54PhD+h4VjLqWZSXTa/Zqz6AF1QnGAUqVA
+mvokFJkqlzop31U9lO5M0ZRLHxPS4O3NIB5E2XnpltEGP31f/JY8S3TuK2aBv/F1
+4w2RR9sB/fZ5bi5w/BEGEGxiwsaCTipBnjTksOUD8sF4ZKCrUbsGnzZuNuhX+nS9
+XOQLdQUn1r4DF0atx/0LC6IOevwBG8QDMejchB1myQTHXDQHQjUiXPdEj06Hf1gY
+7Hp06a3pHPjCNRKs4zk5dg==</SignatureValue>
+	    <KeyInfo>
+	      <KeyValue>
+<RSAKeyValue>
+<Modulus>
+z6vEOJEOCuLcjv5l1KCApY7pUH8Abw6p6CROx4s+/9uraUoHd3m4k9y7WvYRvGil
+9VeNgRLndEU0BXEqCyUJw9L0hw+qvX6gA+zeBZtUOBSIbTOO5Msbol32Oxd8HoGm
+CIcda7DbhHGgmbEUgmwDeDPzy4nyEtdVvr092edRG3fkt69MjgZJiAowWuRns4vc
+vEXX9dgmbvD/z5GOJNcYVz9f3osc2MzjYqiM8ODHjmEqWbev0TNxC5NSiGSnA2SB
+SG13eHB2AMCpuCZhG3ybySLoNMWyRQIowckm+pwML6gYGjZPECrBmnQvjIp1n9/j
+TRdeeKZ+wlWBlbIBag66fQ==
+</Modulus>
+<Exponent>
+AQAB
+</Exponent>
+</RSAKeyValue>
+</KeyValue>
+		<X509Data>
+		    
+		    
+		    
+		<X509Certificate>MIIDDjCCAfagAwIBAgIJAJn+tBzB0q6pMA0GCSqGSIb3DQEBBQUAMBQxEjAQBgNV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</X509Certificate>
+<X509SubjectName>CN=Globotron</X509SubjectName>
+<X509IssuerSerial>
+<X509IssuerName>CN=Globotron</X509IssuerName>
+<X509SerialNumber>11096504567491374761</X509SerialNumber>
+</X509IssuerSerial>
+</X509Data>
+	    </KeyInfo>
+	</Signature>
+    </signatures>
+</signed-credential>
Index: examples/creddy_prover_tests/experiment_create_rt0/Globotron_private.pem
===================================================================
--- examples/creddy_prover_tests/experiment_create_rt0/Globotron_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/experiment_create_rt0/Globotron_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEowIBAAKCAQEAz6vEOJEOCuLcjv5l1KCApY7pUH8Abw6p6CROx4s+/9uraUoH
+d3m4k9y7WvYRvGil9VeNgRLndEU0BXEqCyUJw9L0hw+qvX6gA+zeBZtUOBSIbTOO
+5Msbol32Oxd8HoGmCIcda7DbhHGgmbEUgmwDeDPzy4nyEtdVvr092edRG3fkt69M
+jgZJiAowWuRns4vcvEXX9dgmbvD/z5GOJNcYVz9f3osc2MzjYqiM8ODHjmEqWbev
+0TNxC5NSiGSnA2SBSG13eHB2AMCpuCZhG3ybySLoNMWyRQIowckm+pwML6gYGjZP
+ECrBmnQvjIp1n9/jTRdeeKZ+wlWBlbIBag66fQIDAQABAoIBAGVIdbPM8xdWG5HV
++x4fhX65W4s51aFUeoNQqediP0CUB16bj1ay09WxkuLDHlVQiJhGsingaWfolH2O
++p1i3AdYrI/ukSxIRIyFiqcbYZDUWtE/kxJ9CKZAw2WAh7VtL+f61dt+7yECNfyf
+Q8x0F6EZXW7IgXq08QnMzAypZ4JILtqdXti2sDoj8nKD1/LF9/XXd6vqFLrX9nhF
+pZGTB4UsXSKuc0B4OPTeSv9UWgTGjACzfNgW5lhQx7QYqnsNWSRv9H1l8eBKgweg
+vTRs0eMCyf3/NRyFhxwcoux4R2mRJFndqJphpOH6WZf8OlNXodtJzZGrSRMFExZn
+hysSWMECgYEA8uqMcZGxTzd22cBLtyKH7YuQsTiWf1ms8MqPfCrcK8XHI6q64Fxf
+rIiAnzeQ2URR70+VxZsxJNx4XBIk2gt3E51toLeRCvGjHJOxzN7e6d/uli9IBZ76
+wqmgVyTX7xRC6LIG0AMgt/pG5moBjwel7VN6oGXpXYasxF0tGrxINzECgYEA2ts9
+GRrVvj8lX9vgqkxcU6C+6RbFGn9DS5d7Aua6qDMW53bMVhegU3HLFhoBV1Z2GGfS
+JXNrA+QEewg9M3cZkNzEpJzT28/ARd3rcBTn6AHBXxgihzUZ6UHFAhef5ZJwwlxf
+Lf80imbQDaW+cK+Muhk0GkWjiMY55euFbNRBfQ0CgYB6W2CAuCU6xLJN/olk5rTX
+F2y7h8huv0nYQ//ASIp8VfP36ECXUJA0hNFc4Y1Jkxs+UrUbQw+fBJpvrgf3+Lxz
+GeIliTE69Pn3JAH0MvLPlSdFaO17P1gKA40rN/i4iVkmgr3huyGY6i0aVJ0SYYTX
+pSvobUz9+h8+DbzxcZNikQKBgDBLfPoTP+ORj6/Nl5A89YrGyBormic0uibuMIj9
+XWdMjttZDdJZuFlxnP0tk+ov/DN6hZcaFx1urcZwlQDMYWnkLcidiurQt38zb4b2
+Ng6uhHt1mfj4MNWWW+EQUYqZfCSHucEutetssLCySIoZUxamBSdfAq1mANTJ2lGf
+rSvpAoGBALUggGqJD0eoXWBkXl9ZEw9Sk2YeDD/0bZ3Onz9twrDh+ZBD5tMsLEaj
+in3sEkVfxUi7iy8VJHrAukdxHNL34YHDmyXRoDKQ4vlegerJ3/MdhTpliIq3ioyw
++Aw1smBgiogOKfQr+mPuO2jUYsPHKzEKdttubgNuq8rQJvOs53GN
+-----END RSA PRIVATE KEY-----
Index: examples/creddy_prover_tests/experiment_create_rt0/README
===================================================================
--- examples/creddy_prover_tests/experiment_create_rt0/README	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/experiment_create_rt0/README	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,66 @@
+#!/bin/sh
+ 
+#Acme runs a testbed. They've delegated the authority to create
+#!/bin/sh
+#
+#experiments to all their partners. The Globotron company is one such
+#!/bin/sh
+#
+#partner.
+#
+#    Acme.experiment_create <- Acme.partner.experiment_create
+#    Acme.partner <- Globotron
+#
+#Globotron has delegated the authority to anyone an admin thinks is a
+#'power user'.
+#
+#    Globotron.experiment_create <- Globotron.admin.power_user
+#
+#Alice is an admin, and her friend Bob is a power user:
+#
+#    Globotron.admin <- Alice
+#    Alice.power_user <- Bob
+#
+#From these credentials, it is possible to construct a proof graph
+#showing that Acme.experiment_create <- Bob.
+#
+#Note that there is a one-to-one correspondence with each credential
+#above and the attribute certificates below.
+#
+
+rm -rf *.pem *.xml
+
+creddy --generate --cn Acme
+
+creddy --generate --cn Globotron
+
+creddy --generate --cn Alice
+
+creddy --generate --cn Bob
+
+creddy --attribute \
+       --issuer Acme_ID.pem --key Acme_private.pem --role experiment_create \
+       --subject-cert Acme_ID.pem --subject-role partner.experiment_create \
+       --out Acme_experiment_create__Acme_partner_experiment_create_attr.xml
+
+creddy --attribute \
+       --issuer Acme_ID.pem --key Acme_private.pem --role partner \
+       --subject-cert Globotron_ID.pem \
+       --out Acme_partner__Globotron_attr.xml 
+
+creddy --attribute \
+       --issuer Globotron_ID.pem --key Globotron_private.pem --role experiment_create \
+       --subject-cert Globotron_ID.pem --subject-role admin.power_user \
+       --out Globotron_experiment_create__Globotron_admin_power_user_attr.xml
+
+creddy --attribute \
+       --issuer Globotron_ID.pem --key Globotron_private.pem --role admin \
+       --subject-cert Alice_ID.pem \
+       --out Globotron_admin__Alice_attr.xml
+
+creddy --attribute \
+       --issuer Alice_ID.pem --key Alice_private.pem --role power_user \
+       --subject-cert Bob_ID.pem \
+       --out Alice_admin__Bob_attr.xml
+
+
Index: examples/creddy_prover_tests/experiment_create_rt0/run_query
===================================================================
--- examples/creddy_prover_tests/experiment_create_rt0/run_query	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/experiment_create_rt0/run_query	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,36 @@
+#!/bin/sh
+
+pwd=`pwd`
+eloc=`which abac_prover | sed 's/\/abac_prover//'`
+if [ "$eloc" = "" ]; then
+  echo "ERROR: abac_prover is not in the search path!!!"
+  exit 1
+fi
+keyloc=$pwd
+
+acme=`creddy --keyid --cert $keyloc/Acme_ID.pem`
+alice=`creddy --keyid --cert $keyloc/Alice_ID.pem`
+bob=`creddy --keyid --cert $keyloc/Bob_ID.pem`
+globotron=`creddy --keyid --cert $keyloc/Globotron_ID.pem`
+
+glob_admin="$globotron.admin"
+alice_prin="$alice"
+bob_prin="$bob"
+experiment_create="$acme.experiment_create"
+
+echo " "
+echo "===good=============== Globotron.admin <- Alice"
+$eloc/abac_prover  --keystore $keyloc \
+             --role "$glob_admin" --principal "$alice_prin"
+
+echo " "
+echo "===bad=============== Globotron.admin <- Bob"
+$eloc/abac_prover  --keystore $keyloc \
+             --role "$glob_admin" --principal "$bob_prin"
+
+echo " "
+echo "===good=============== Acme.experiment_create <- Bob"
+$eloc/abac_prover  --keystore $keyloc \
+             --role "$experiment_create" --principal "$bob_prin"
+
+
Index: examples/creddy_prover_tests/result
===================================================================
--- examples/creddy_prover_tests/result	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/result	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,95 @@
+
+ ==> RUN on acme_rockets_intersection_rt0
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+  
+===good============ Acme.buy_rockets <- Coyote
+success
+credential d3b44e2e48e6d9acf5062c37f55adce2235a447b.preferred_customer <- e8d4f94b7f585aaf97f461f7c3c983bfdabfbbf4
+credential ef2e4e246b041f51396bfb6af90576dddf11a555.character <- e8d4f94b7f585aaf97f461f7c3c983bfdabfbbf4
+credential d3b44e2e48e6d9acf5062c37f55adce2235a447b.buy_rockets <- d3b44e2e48e6d9acf5062c37f55adce2235a447b.preferred_customer & ef2e4e246b041f51396bfb6af90576dddf11a555.character
+  
+===bad============ Acme.bad_buy_rockets <- Coyote
+fail, here's a partial proof
+credential d3b44e2e48e6d9acf5062c37f55adce2235a447b.buy_rockets <- d3b44e2e48e6d9acf5062c37f55adce2235a447b.preferred_customer & ef2e4e246b041f51396bfb6af90576dddf11a555.character
+credential d3b44e2e48e6d9acf5062c37f55adce2235a447b.preferred_customer <- e8d4f94b7f585aaf97f461f7c3c983bfdabfbbf4
+credential ef2e4e246b041f51396bfb6af90576dddf11a555.character <- e8d4f94b7f585aaf97f461f7c3c983bfdabfbbf4
+  
+===bad============ 99Acme.buy_rockets <- Coyote
+fail, here's a partial proof
+credential d3b44e2e48e6d9acf5062c37f55adce2235a447b.buy_rockets <- d3b44e2e48e6d9acf5062c37f55adce2235a447b.preferred_customer & ef2e4e246b041f51396bfb6af90576dddf11a555.character
+credential d3b44e2e48e6d9acf5062c37f55adce2235a447b.preferred_customer <- e8d4f94b7f585aaf97f461f7c3c983bfdabfbbf4
+credential ef2e4e246b041f51396bfb6af90576dddf11a555.character <- e8d4f94b7f585aaf97f461f7c3c983bfdabfbbf4
+  
+===bad=============== Acme.buy_rockets <- Batman
+fail, here's a partial proof
+credential d3b44e2e48e6d9acf5062c37f55adce2235a447b.preferred_customer <- e512543f8a53d70080c39a95bf1b3382d2e568a6
+credential d3b44e2e48e6d9acf5062c37f55adce2235a447b.buy_rockets <- d3b44e2e48e6d9acf5062c37f55adce2235a447b.preferred_customer & ef2e4e246b041f51396bfb6af90576dddf11a555.character
+
+ ==> RUN on acme_rockets_rt0
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+  
+===good============ Acme.preferred_customer <- Coyote
+success
+credential 4903b59978115a1e2a8f8bd239747330b35c05b8.preferred_customer <- cc40ac498c3e29aff34137b46cdf408f186adb1f
+  
+===good=============== Acme.buy_rockets <- Coyote
+success
+credential 4903b59978115a1e2a8f8bd239747330b35c05b8.preferred_customer <- cc40ac498c3e29aff34137b46cdf408f186adb1f
+credential 4903b59978115a1e2a8f8bd239747330b35c05b8.buy_rockets <- 4903b59978115a1e2a8f8bd239747330b35c05b8.preferred_customer
+  
+===bad=============== Acme.buy_rockets <- Acme.preferred_customer
+success
+credential 4903b59978115a1e2a8f8bd239747330b35c05b8.buy_rockets <- 4903b59978115a1e2a8f8bd239747330b35c05b8.preferred_customer
+  
+===bad=============== Coyote.friend <- Acme
+fail, here's a partial proof
+
+ ==> RUN on experiment_create_rt0
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+ 
+===good=============== Globotron.admin <- Alice
+success
+credential 59981b7767298f8e155e2db3fec4dbc485f9922d.admin <- 4d8648573803d8c4e7e01e9089221ec59c6e4aee
+ 
+===bad=============== Globotron.admin <- Bob
+fail, here's a partial proof
+credential 08c10e98a109c39388e3a289c53298c9fb07b6e8.experiment_create <- 08c10e98a109c39388e3a289c53298c9fb07b6e8.partner.experiment_create
+credential 59981b7767298f8e155e2db3fec4dbc485f9922d.experiment_create <- 59981b7767298f8e155e2db3fec4dbc485f9922d.admin.power_user
+credential 4d8648573803d8c4e7e01e9089221ec59c6e4aee.power_user <- dde47feb81858a19478877336013ad436f62cfc6
+credential 59981b7767298f8e155e2db3fec4dbc485f9922d.admin <- 4d8648573803d8c4e7e01e9089221ec59c6e4aee
+credential 08c10e98a109c39388e3a289c53298c9fb07b6e8.partner <- 59981b7767298f8e155e2db3fec4dbc485f9922d
+ 
+===good=============== Acme.experiment_create <- Bob
+success
+credential 4d8648573803d8c4e7e01e9089221ec59c6e4aee.power_user <- dde47feb81858a19478877336013ad436f62cfc6
+credential 59981b7767298f8e155e2db3fec4dbc485f9922d.admin <- 4d8648573803d8c4e7e01e9089221ec59c6e4aee
+credential 59981b7767298f8e155e2db3fec4dbc485f9922d.experiment_create <- 59981b7767298f8e155e2db3fec4dbc485f9922d.admin.power_user
+credential 08c10e98a109c39388e3a289c53298c9fb07b6e8.partner <- 59981b7767298f8e155e2db3fec4dbc485f9922d
+credential 08c10e98a109c39388e3a289c53298c9fb07b6e8.experiment_create <- 08c10e98a109c39388e3a289c53298c9fb07b6e8.partner.experiment_create
Index: examples/creddy_prover_tests/result.save
===================================================================
--- examples/creddy_prover_tests/result.save	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_prover_tests/result.save	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,95 @@
+
+ ==> RUN on acme_rockets_intersection_rt0
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+  
+===good============ Acme.buy_rockets <- Coyote
+success
+credential 47b2e4fc3c15eb8b0a5c9176b123ad623233c13b.preferred_customer <- 6952e3658904dab71ac8b61c9bd1435a3ac4311e
+credential b16e42889f7f0f766a6f475fed72eae785253dd0.character <- 6952e3658904dab71ac8b61c9bd1435a3ac4311e
+credential 47b2e4fc3c15eb8b0a5c9176b123ad623233c13b.buy_rockets <- 47b2e4fc3c15eb8b0a5c9176b123ad623233c13b.preferred_customer & b16e42889f7f0f766a6f475fed72eae785253dd0.character
+  
+===bad============ Acme.bad_buy_rockets <- Coyote
+fail, here's a partial proof
+credential 47b2e4fc3c15eb8b0a5c9176b123ad623233c13b.buy_rockets <- 47b2e4fc3c15eb8b0a5c9176b123ad623233c13b.preferred_customer & b16e42889f7f0f766a6f475fed72eae785253dd0.character
+credential 47b2e4fc3c15eb8b0a5c9176b123ad623233c13b.preferred_customer <- 6952e3658904dab71ac8b61c9bd1435a3ac4311e
+credential b16e42889f7f0f766a6f475fed72eae785253dd0.character <- 6952e3658904dab71ac8b61c9bd1435a3ac4311e
+  
+===bad============ 99Acme.buy_rockets <- Coyote
+fail, here's a partial proof
+credential 47b2e4fc3c15eb8b0a5c9176b123ad623233c13b.buy_rockets <- 47b2e4fc3c15eb8b0a5c9176b123ad623233c13b.preferred_customer & b16e42889f7f0f766a6f475fed72eae785253dd0.character
+credential 47b2e4fc3c15eb8b0a5c9176b123ad623233c13b.preferred_customer <- 6952e3658904dab71ac8b61c9bd1435a3ac4311e
+credential b16e42889f7f0f766a6f475fed72eae785253dd0.character <- 6952e3658904dab71ac8b61c9bd1435a3ac4311e
+  
+===bad=============== Acme.buy_rockets <- Batman
+fail, here's a partial proof
+credential 47b2e4fc3c15eb8b0a5c9176b123ad623233c13b.preferred_customer <- d8fa70873d2707f59c40e1e97d2806564298d887
+credential 47b2e4fc3c15eb8b0a5c9176b123ad623233c13b.buy_rockets <- 47b2e4fc3c15eb8b0a5c9176b123ad623233c13b.preferred_customer & b16e42889f7f0f766a6f475fed72eae785253dd0.character
+
+ ==> RUN on acme_rockets_rt0
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+  
+===good============ Acme.preferred_customer <- Coyote
+success
+credential 282dd1318dd52dcd5b4d98f34935613eebcd193c.preferred_customer <- 35fdd9f2f688f7ec1eb3e9116054f1b67da55a05
+  
+===good=============== Acme.buy_rockets <- Coyote
+success
+credential 282dd1318dd52dcd5b4d98f34935613eebcd193c.preferred_customer <- 35fdd9f2f688f7ec1eb3e9116054f1b67da55a05
+credential 282dd1318dd52dcd5b4d98f34935613eebcd193c.buy_rockets <- 282dd1318dd52dcd5b4d98f34935613eebcd193c.preferred_customer
+  
+===bad=============== Acme.buy_rockets <- Acme.preferred_customer
+success
+credential 282dd1318dd52dcd5b4d98f34935613eebcd193c.buy_rockets <- 282dd1318dd52dcd5b4d98f34935613eebcd193c.preferred_customer
+  
+===bad=============== Coyote.friend <- Acme
+fail, here's a partial proof
+
+ ==> RUN on experiment_create_rt0
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+ 
+===good=============== Globotron.admin <- Alice
+success
+credential 8ef4b584cceb41d1e635934b8cf2ab6e887a91e6.admin <- 04b57bdd93749c142d6d866fce0bb5eac8dac78a
+ 
+===bad=============== Globotron.admin <- Bob
+fail, here's a partial proof
+credential 33e329b8183f8fb93ef7a66a48d2dd4c0c82e442.experiment_create <- 33e329b8183f8fb93ef7a66a48d2dd4c0c82e442.partner.experiment_create
+credential 8ef4b584cceb41d1e635934b8cf2ab6e887a91e6.experiment_create <- 8ef4b584cceb41d1e635934b8cf2ab6e887a91e6.admin.power_user
+credential 04b57bdd93749c142d6d866fce0bb5eac8dac78a.power_user <- 364426ced8732002fb5b10d8c0d05bcff9818f12
+credential 8ef4b584cceb41d1e635934b8cf2ab6e887a91e6.admin <- 04b57bdd93749c142d6d866fce0bb5eac8dac78a
+credential 33e329b8183f8fb93ef7a66a48d2dd4c0c82e442.partner <- 8ef4b584cceb41d1e635934b8cf2ab6e887a91e6
+ 
+===good=============== Acme.experiment_create <- Bob
+success
+credential 04b57bdd93749c142d6d866fce0bb5eac8dac78a.power_user <- 364426ced8732002fb5b10d8c0d05bcff9818f12
+credential 8ef4b584cceb41d1e635934b8cf2ab6e887a91e6.admin <- 04b57bdd93749c142d6d866fce0bb5eac8dac78a
+credential 8ef4b584cceb41d1e635934b8cf2ab6e887a91e6.experiment_create <- 8ef4b584cceb41d1e635934b8cf2ab6e887a91e6.admin.power_user
+credential 33e329b8183f8fb93ef7a66a48d2dd4c0c82e442.partner <- 8ef4b584cceb41d1e635934b8cf2ab6e887a91e6
+credential 33e329b8183f8fb93ef7a66a48d2dd4c0c82e442.experiment_create <- 33e329b8183f8fb93ef7a66a48d2dd4c0c82e442.partner.experiment_create
Index: examples/creddy_tests/12_3_ID.pem
===================================================================
--- examples/creddy_tests/12_3_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/12_3_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
Index: examples/creddy_tests/12_3_private.pem
===================================================================
--- examples/creddy_tests/12_3_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/12_3_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEpgIBAAKCAQEA6ubGxZxVlsCfJVwZvwxDxZDitWoqh0tAiCkJ6CwJHWHOVk0q
+4kvbU/69G1xTczgLaLLq4jMoF9/TbQ7olUrb9KBBytXAGYFw/SMJzS4c53dCkFG5
+leSxxubM+PvUojej81BiSeNAHSALVH4AVJ8HZo06emU5u73pTpL09CabUNFUMcmy
+LSnN/ym90SDpXeH1Wlf5ceeBQAR0Cyhe9hs+bbZwPdeUhFxZHcC/yUp86N1i+5qq
+R9nIvVAez6vEckUxl9yLKnX0rrqxu31YkhLjJ513lbCWbXTjwIJMRSDltQl6tjYP
+cQpZ+VI6VqUdxJq5idDgXQa8CeCgyFfO/ho0TwIDAQABAoIBAQCVS4moDP2k69X6
+U7gVYcEtLzG35bsT9DMWlyaxxlMgtooC9da8r0O99djRK/Pp9gPiTlzU2Xiw+9QP
+q3sNb9+ucbB/Ly2ByHA8oulW2+kJABZxTU/rwcdvyD8cPEpfs4djXIKrvWCBYl1x
+HQguwEhe2IIDSpTQCxrekq5XAraSPNFSyr4WoynHY3bgsBSlHYs/TWYDR5CYwhkZ
+6PCKr7xsjDi5qhlmDEn4Qh/+qbteAKhlerFdIYKnuBO561CSejLlmFxdea0NyfWC
+rEcRPdYVgau7ygxGiWTDJMoImJIusqmH0BL22U9NLErQ7ZJC0WEXqcmR9gdJWmx0
+Xl0k5AYJAoGBAPaFMldgVl1khiByxA+mljRkCY4bigtP/pfaZhM6tdZ3SN91UfE+
+9kRjaVzpjHtY/640JQzJoNm2cBS2aMKQCtxByiTFns8jAO1IIDA3F1/1ScASLgtb
+KCNWs/swSIkY0UIiCpCg9HhfaiMCJpKcGf6H5U3W8RnpDnRzWRPT3CfVAoGBAPPv
+M4tLxTWTB2Mzp393eXpW1nvnIYT02wRhFCVMEMMyzwJLdTP0G3lwdaKnCm5+30Vd
+AogyvOCv0Yg4mZub7/Ig5Rw3+WhOnzPUvI0yL5E2quit05vaR+mxWr1j6oS5P4od
+dLVEWqd81qSFaHdHlE5dNr+91mU7K7WiofQvqYGTAoGBAI00YFCCQxX9tYIymrEo
+R5M81ehLR/gQ2xDaLWvITk3JR7mPdt9LpD4p/zkUIb6pjNKY1bwMZhEumeaTUVBY
+t4/QM1x6wet97lL75EwZ0k7JrnPRNgSVM1mCmVdBIds9luddnlWXjFDCvoXM/pEt
+zwnnh2Xdv36K6xey1owv50P9AoGBALEEyivw3XkmbHsB9jBbPE2ajOW3ciyxH+tK
+o7r5O0TcLztkFPaR1ApJoSRbAgfzjAUjHP5Hi6emD3FCWb6B6BuW4Yyb1iNqwr9z
+Ry1T2Q8RU++sjV6RhhRBvy6nPn34jPKms5YDt6HJx1327jt5N1ey71Mv6VDnIq4a
+CltQ5zp/AoGBAMyL4bFmcW7y3biocy6+loOU3dgfQAgwKSIUiAZWMFRETIIr/sX6
+ICgciFtk0BmBnFvXaQAC8nG6UgeMDkJMMlDSlCP6erMbc3p9KRgLgBDvGqZ065qm
+bs9BR2H09mx2CWR6/4gmMMlOre8wfow9/qemGc9cRVBSAhiLu9u/mrb4
+-----END RSA PRIVATE KEY-----
Index: examples/creddy_tests/Acme_ID.pem
===================================================================
--- examples/creddy_tests/Acme_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/Acme_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----
+MIIDBDCCAeygAwIBAgIJAI1H4XyWJRe6MA0GCSqGSIb3DQEBBQUAMA8xDTALBgNV
+BAMTBEFjbWUwHhcNMTMwNTA2MjE1MjA2WhcNMTYwNDIwMjE1MjA2WjAPMQ0wCwYD
+VQQDEwRBY21lMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkd9LiSL
+hNFA2iunj90e9WpllTTDyIAVoXTCyMi7eNQi77dSb7knASesQkaGAA1QkcCKacGK
+SOnb8svQL8zamfBBmQFSy/9iSJ2hNQegdMRERFutKBJDugR3GrAe+ORLRTdGWvCJ
+depmnls/akizNTGciFLdaa0tRI6Xmb3FZsLPRRqyWy+AHDJF5hTg+byT74BJOjJs
+8kXKnGOB7p/GT7WKVCmLetDoEOp628wmcSJrHd9WSzxDzb8CPeUmmO/RGzFiciM3
+/MiqpF1LXcnaCdsjle1ahHVA6ee2q0xhzLOFMO5gMyHz3kvVgt86oaa4fGBofkLf
+0EulvIzx6NWwLwIDAQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQE
+AwIBBjAdBgNVHQ4EFgQUNo05sFwL/XOmyi3Wx4UbK5S3UaUwHwYDVR0jBBgwFoAU
+No05sFwL/XOmyi3Wx4UbK5S3UaUwDQYJKoZIhvcNAQEFBQADggEBAE0r4z1800YM
+9PoSdBLIbEVrW4FKYDmacBoOILEy18S9hzaz9aCrnHVTtxhhWaR9+ag+t8FCaR4a
+Znm7USjA/QDKlTSUGVrP7P1yeXGOKHowJfuIXAOoiWdM70jv6fSeN2hXzvz7uIuZ
+BEa/JtcO+gpAJC4eqxKQ7qDirFRQ/d0nOxcZYGvNRCv+i7ls0MouB4IigntUlH2S
+G69RM+twqEdZ8TEPAM/3Gdl4ODNOXQVeQJ3KAXCFQLCHuowCkrNyBBt67ACVf3nn
+7KuM/E+8fg0mgeF1nsEfoM1UEXpNt0M5zorJ9/2g5jIbzxSmmrsPkhXeaHbH/3dj
+4MGOI79DsRg=
+-----END CERTIFICATE-----
Index: examples/creddy_tests/Acme_buy_rockets__Acme_preferred_customer_attr.xml
===================================================================
--- examples/creddy_tests/Acme_buy_rockets__Acme_preferred_customer_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/Acme_buy_rockets__Acme_preferred_customer_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<signed-credential>
+    <credential xml:id="ref0">
+	<type>abac</type>
+	<version>1.0</version>
+	<expires>2014-05-06T21:52:06Z</expires>
+	<rt0>368d39b05c0bfd73a6ca2dd6c7851b2b94b751a5.buy_rockets&lt;-368d39b05c0bfd73a6ca2dd6c7851b2b94b751a5.preferred_customer</rt0>
+    </credential>
+    <signatures>
+	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+	    <SignedInfo>
+		<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+		<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<Reference URI="#ref0">
+		    <Transforms>
+			<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+		    </Transforms>
+		    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		    <DigestValue>aeu0RnzOG0owD/jFn/ciOetoyyg=</DigestValue>
+		</Reference>
+	    </SignedInfo>
+	    <SignatureValue>NFS0jbawTW03ynNaNNnCLWXscuCoRjGPUvNwfDWmGQAYKVP/4vVMR2iyFMpDz1NU
+YPxAe9HMfcEWTPKHLIUt0bDrCRy1IyL2wKqczmnkqqiO/lsNkM3Yp3kKQ59ioO8+
+jV/eTCtuHlt0uiRWzpKxvRCzSWvDxzcBJ8j62QLoBZ15Wh5Rvntk55iYq2OxCcS/
+YTu6ZvQDON0qutwATTgWaN5DEHJPJGn2tJ5sEIrS2qoDbnPdyCs1MMOtMI01QZ1l
+2mowUHJnXuHqnTHZb37/95uH4o+61jRy8TAFNos568kdl1hS4ugR2kzzjKwY7/oh
+ZAdrjSd2ao8Iv2RqDWxGUg==</SignatureValue>
+	    <KeyInfo>
+	      <KeyValue>
+<RSAKeyValue>
+<Modulus>
+pkd9LiSLhNFA2iunj90e9WpllTTDyIAVoXTCyMi7eNQi77dSb7knASesQkaGAA1Q
+kcCKacGKSOnb8svQL8zamfBBmQFSy/9iSJ2hNQegdMRERFutKBJDugR3GrAe+ORL
+RTdGWvCJdepmnls/akizNTGciFLdaa0tRI6Xmb3FZsLPRRqyWy+AHDJF5hTg+byT
+74BJOjJs8kXKnGOB7p/GT7WKVCmLetDoEOp628wmcSJrHd9WSzxDzb8CPeUmmO/R
+GzFiciM3/MiqpF1LXcnaCdsjle1ahHVA6ee2q0xhzLOFMO5gMyHz3kvVgt86oaa4
+fGBofkLf0EulvIzx6NWwLw==
+</Modulus>
+<Exponent>
+AQAB
+</Exponent>
+</RSAKeyValue>
+</KeyValue>
+		<X509Data>
+		    
+		    
+		    
+		<X509Certificate>MIIDBDCCAeygAwIBAgIJAI1H4XyWJRe6MA0GCSqGSIb3DQEBBQUAMA8xDTALBgNV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</X509Certificate>
+<X509SubjectName>CN=Acme</X509SubjectName>
+<X509IssuerSerial>
+<X509IssuerName>CN=Acme</X509IssuerName>
+<X509SerialNumber>10180353407905503162</X509SerialNumber>
+</X509IssuerSerial>
+</X509Data>
+	    </KeyInfo>
+	</Signature>
+    </signatures>
+</signed-credential>
Index: examples/creddy_tests/Acme_preferred_customer__Coyote_attr.xml
===================================================================
--- examples/creddy_tests/Acme_preferred_customer__Coyote_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/Acme_preferred_customer__Coyote_attr.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<signed-credential>
+    <credential xml:id="ref0">
+	<type>abac</type>
+	<version>1.0</version>
+	<expires>2014-05-06T21:52:06Z</expires>
+	<rt0>368d39b05c0bfd73a6ca2dd6c7851b2b94b751a5.preferred_customer&lt;-945957d933d81bfcc8c905fb1e08b6c54f4e51ef</rt0>
+    </credential>
+    <signatures>
+	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+	    <SignedInfo>
+		<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+		<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<Reference URI="#ref0">
+		    <Transforms>
+			<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+		    </Transforms>
+		    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		    <DigestValue>CkW5EU74H1n3WxwfAguNlvIyia4=</DigestValue>
+		</Reference>
+	    </SignedInfo>
+	    <SignatureValue>SwTKvKSTAvDjaZuPrVvPrgpNvoO7Zl9wjtZZHa3wHVldBxiaTlKYbELGnwgHr+ja
+sucJBav3shpXo8262k3bWsIyJ+LA47mLuBagAYZeW4zfF1VihCZGSaqDUBRhyVKb
+FPliq89pas+fnesZKicIe/UqpnRXd6ZDBTSOUJhE5skpejAgd3FAiEGHE6dGXbJp
+O7mE4RLtBUFpyzsgi66d5flZx353DljSV2UXCm0v15fxJlGMu/A65U9ad2Y9Z+Hz
+LuGUu2Qp0HM+embGnFx9jOJxfftqkDPVm6Y4Ee04uVeuDeJDOGvvQf4mlqAtDg7x
+qOq/IYeb2FBcEXOnja1kAA==</SignatureValue>
+	    <KeyInfo>
+	      <KeyValue>
+<RSAKeyValue>
+<Modulus>
+pkd9LiSLhNFA2iunj90e9WpllTTDyIAVoXTCyMi7eNQi77dSb7knASesQkaGAA1Q
+kcCKacGKSOnb8svQL8zamfBBmQFSy/9iSJ2hNQegdMRERFutKBJDugR3GrAe+ORL
+RTdGWvCJdepmnls/akizNTGciFLdaa0tRI6Xmb3FZsLPRRqyWy+AHDJF5hTg+byT
+74BJOjJs8kXKnGOB7p/GT7WKVCmLetDoEOp628wmcSJrHd9WSzxDzb8CPeUmmO/R
+GzFiciM3/MiqpF1LXcnaCdsjle1ahHVA6ee2q0xhzLOFMO5gMyHz3kvVgt86oaa4
+fGBofkLf0EulvIzx6NWwLw==
+</Modulus>
+<Exponent>
+AQAB
+</Exponent>
+</RSAKeyValue>
+</KeyValue>
+		<X509Data>
+		    
+		    
+		    
+		<X509Certificate>MIIDBDCCAeygAwIBAgIJAI1H4XyWJRe6MA0GCSqGSIb3DQEBBQUAMA8xDTALBgNV
+BAMTBEFjbWUwHhcNMTMwNTA2MjE1MjA2WhcNMTYwNDIwMjE1MjA2WjAPMQ0wCwYD
+VQQDEwRBY21lMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkd9LiSL
+hNFA2iunj90e9WpllTTDyIAVoXTCyMi7eNQi77dSb7knASesQkaGAA1QkcCKacGK
+SOnb8svQL8zamfBBmQFSy/9iSJ2hNQegdMRERFutKBJDugR3GrAe+ORLRTdGWvCJ
+depmnls/akizNTGciFLdaa0tRI6Xmb3FZsLPRRqyWy+AHDJF5hTg+byT74BJOjJs
+8kXKnGOB7p/GT7WKVCmLetDoEOp628wmcSJrHd9WSzxDzb8CPeUmmO/RGzFiciM3
+/MiqpF1LXcnaCdsjle1ahHVA6ee2q0xhzLOFMO5gMyHz3kvVgt86oaa4fGBofkLf
+0EulvIzx6NWwLwIDAQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQE
+AwIBBjAdBgNVHQ4EFgQUNo05sFwL/XOmyi3Wx4UbK5S3UaUwHwYDVR0jBBgwFoAU
+No05sFwL/XOmyi3Wx4UbK5S3UaUwDQYJKoZIhvcNAQEFBQADggEBAE0r4z1800YM
+9PoSdBLIbEVrW4FKYDmacBoOILEy18S9hzaz9aCrnHVTtxhhWaR9+ag+t8FCaR4a
+Znm7USjA/QDKlTSUGVrP7P1yeXGOKHowJfuIXAOoiWdM70jv6fSeN2hXzvz7uIuZ
+BEa/JtcO+gpAJC4eqxKQ7qDirFRQ/d0nOxcZYGvNRCv+i7ls0MouB4IigntUlH2S
+G69RM+twqEdZ8TEPAM/3Gdl4ODNOXQVeQJ3KAXCFQLCHuowCkrNyBBt67ACVf3nn
+7KuM/E+8fg0mgeF1nsEfoM1UEXpNt0M5zorJ9/2g5jIbzxSmmrsPkhXeaHbH/3dj
+4MGOI79DsRg=</X509Certificate>
+<X509SubjectName>CN=Acme</X509SubjectName>
+<X509IssuerSerial>
+<X509IssuerName>CN=Acme</X509IssuerName>
+<X509SerialNumber>10180353407905503162</X509SerialNumber>
+</X509IssuerSerial>
+</X509Data>
+	    </KeyInfo>
+	</Signature>
+    </signatures>
+</signed-credential>
Index: examples/creddy_tests/Acme_private.pem
===================================================================
--- examples/creddy_tests/Acme_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/Acme_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
Index: examples/creddy_tests/Acme_roleOne__Acme_simple_subject_role.xml
===================================================================
--- examples/creddy_tests/Acme_roleOne__Acme_simple_subject_role.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/Acme_roleOne__Acme_simple_subject_role.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<signed-credential>
+    <credential xml:id="ref0">
+	<type>abac</type>
+	<version>1.0</version>
+	<expires>2014-05-06T21:52:07Z</expires>
+	<rt0>368d39b05c0bfd73a6ca2dd6c7851b2b94b751a5.roleOne&lt;-368d39b05c0bfd73a6ca2dd6c7851b2b94b751a5.simple_subject_role</rt0>
+    </credential>
+    <signatures>
+	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+	    <SignedInfo>
+		<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+		<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<Reference URI="#ref0">
+		    <Transforms>
+			<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+		    </Transforms>
+		    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		    <DigestValue>hAQLVuxbfNrTzsk1upOsdD1WcaI=</DigestValue>
+		</Reference>
+	    </SignedInfo>
+	    <SignatureValue>WW+zJIJfkz8srFJivauFRgshDaV3gz2NwVzzgRtiVzq37/GSt50qVgV4ns30wv7Q
+JCtzHWxShxxMQrI2QNgkNGxS2syRJBoL2HFBWv9205f+Sg1/sNCHpapWSyEHE+ji
+m4uqAw5N9KiKEU8Nw0wADgrmTGcCwPk4spaEsmDK7gQTOSRgZ1syRmKUR1kROQV1
+LNbZJnKGf3qx83wS6vcRlU3WS25E7yP6yKMDqri1y1G+cxQDv8k9NyXusQ295+G7
+30iOuJMGXbPpi06EMaka0zliON7JC5DdA/fFruxr6oR4E3A5hHx9x+BX2j89IvWB
+SG452w8oaYsvlsLJvu3z4w==</SignatureValue>
+	    <KeyInfo>
+	      <KeyValue>
+<RSAKeyValue>
+<Modulus>
+pkd9LiSLhNFA2iunj90e9WpllTTDyIAVoXTCyMi7eNQi77dSb7knASesQkaGAA1Q
+kcCKacGKSOnb8svQL8zamfBBmQFSy/9iSJ2hNQegdMRERFutKBJDugR3GrAe+ORL
+RTdGWvCJdepmnls/akizNTGciFLdaa0tRI6Xmb3FZsLPRRqyWy+AHDJF5hTg+byT
+74BJOjJs8kXKnGOB7p/GT7WKVCmLetDoEOp628wmcSJrHd9WSzxDzb8CPeUmmO/R
+GzFiciM3/MiqpF1LXcnaCdsjle1ahHVA6ee2q0xhzLOFMO5gMyHz3kvVgt86oaa4
+fGBofkLf0EulvIzx6NWwLw==
+</Modulus>
+<Exponent>
+AQAB
+</Exponent>
+</RSAKeyValue>
+</KeyValue>
+		<X509Data>
+		    
+		    
+		    
+		<X509Certificate>MIIDBDCCAeygAwIBAgIJAI1H4XyWJRe6MA0GCSqGSIb3DQEBBQUAMA8xDTALBgNV
+BAMTBEFjbWUwHhcNMTMwNTA2MjE1MjA2WhcNMTYwNDIwMjE1MjA2WjAPMQ0wCwYD
+VQQDEwRBY21lMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkd9LiSL
+hNFA2iunj90e9WpllTTDyIAVoXTCyMi7eNQi77dSb7knASesQkaGAA1QkcCKacGK
+SOnb8svQL8zamfBBmQFSy/9iSJ2hNQegdMRERFutKBJDugR3GrAe+ORLRTdGWvCJ
+depmnls/akizNTGciFLdaa0tRI6Xmb3FZsLPRRqyWy+AHDJF5hTg+byT74BJOjJs
+8kXKnGOB7p/GT7WKVCmLetDoEOp628wmcSJrHd9WSzxDzb8CPeUmmO/RGzFiciM3
+/MiqpF1LXcnaCdsjle1ahHVA6ee2q0xhzLOFMO5gMyHz3kvVgt86oaa4fGBofkLf
+0EulvIzx6NWwLwIDAQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQE
+AwIBBjAdBgNVHQ4EFgQUNo05sFwL/XOmyi3Wx4UbK5S3UaUwHwYDVR0jBBgwFoAU
+No05sFwL/XOmyi3Wx4UbK5S3UaUwDQYJKoZIhvcNAQEFBQADggEBAE0r4z1800YM
+9PoSdBLIbEVrW4FKYDmacBoOILEy18S9hzaz9aCrnHVTtxhhWaR9+ag+t8FCaR4a
+Znm7USjA/QDKlTSUGVrP7P1yeXGOKHowJfuIXAOoiWdM70jv6fSeN2hXzvz7uIuZ
+BEa/JtcO+gpAJC4eqxKQ7qDirFRQ/d0nOxcZYGvNRCv+i7ls0MouB4IigntUlH2S
+G69RM+twqEdZ8TEPAM/3Gdl4ODNOXQVeQJ3KAXCFQLCHuowCkrNyBBt67ACVf3nn
+7KuM/E+8fg0mgeF1nsEfoM1UEXpNt0M5zorJ9/2g5jIbzxSmmrsPkhXeaHbH/3dj
+4MGOI79DsRg=</X509Certificate>
+<X509SubjectName>CN=Acme</X509SubjectName>
+<X509IssuerSerial>
+<X509IssuerName>CN=Acme</X509IssuerName>
+<X509SerialNumber>10180353407905503162</X509SerialNumber>
+</X509IssuerSerial>
+</X509Data>
+	    </KeyInfo>
+	</Signature>
+    </signatures>
+</signed-credential>
Index: examples/creddy_tests/Acme_roleThree__Coyote_simple_subject_role.xml
===================================================================
--- examples/creddy_tests/Acme_roleThree__Coyote_simple_subject_role.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/Acme_roleThree__Coyote_simple_subject_role.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<signed-credential>
+    <credential xml:id="ref0">
+	<type>abac</type>
+	<version>1.0</version>
+	<expires>2014-05-06T21:52:07Z</expires>
+	<rt0>368d39b05c0bfd73a6ca2dd6c7851b2b94b751a5.roleThree&lt;-945957d933d81bfcc8c905fb1e08b6c54f4e51ef.simple_subject_role</rt0>
+    </credential>
+    <signatures>
+	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+	    <SignedInfo>
+		<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+		<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<Reference URI="#ref0">
+		    <Transforms>
+			<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+		    </Transforms>
+		    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		    <DigestValue>bP41ubWnvty/Ce4oAjRK3NceiBs=</DigestValue>
+		</Reference>
+	    </SignedInfo>
+	    <SignatureValue>k8YVfaWaSKGL0VHA5Hlanvub9AfxOYRcXp/hPQmZAKE9eGEzbdKWR7i5365iqIsB
+Th/OmfKz/6jVANH3Ag/X4wbiYaU3GDGFMOIV5THgmf8VRM6rwegj5qA0ukCNRd7E
+LHuXV6lSWN/leXeC0kn2FA3Js3VZnD0ScpIVbjMwk4WOcPdhl+BNm/B8dlkw7iA1
+SniWuTcLcrvO+uNCO4kIG0h3aYuAMzmeubz+ok/tRhkFiojTlrswpTnDjH47mBjm
+TE8rLvpBjnh9TKvbX+MpXa5GKqXK/RbYi3+tCmyTGw0iJ9c/Pw74cunk2DZzzy10
+1J3SBdb27QhRWq/JyWgHqQ==</SignatureValue>
+	    <KeyInfo>
+	      <KeyValue>
+<RSAKeyValue>
+<Modulus>
+pkd9LiSLhNFA2iunj90e9WpllTTDyIAVoXTCyMi7eNQi77dSb7knASesQkaGAA1Q
+kcCKacGKSOnb8svQL8zamfBBmQFSy/9iSJ2hNQegdMRERFutKBJDugR3GrAe+ORL
+RTdGWvCJdepmnls/akizNTGciFLdaa0tRI6Xmb3FZsLPRRqyWy+AHDJF5hTg+byT
+74BJOjJs8kXKnGOB7p/GT7WKVCmLetDoEOp628wmcSJrHd9WSzxDzb8CPeUmmO/R
+GzFiciM3/MiqpF1LXcnaCdsjle1ahHVA6ee2q0xhzLOFMO5gMyHz3kvVgt86oaa4
+fGBofkLf0EulvIzx6NWwLw==
+</Modulus>
+<Exponent>
+AQAB
+</Exponent>
+</RSAKeyValue>
+</KeyValue>
+		<X509Data>
+		    
+		    
+		    
+		<X509Certificate>MIIDBDCCAeygAwIBAgIJAI1H4XyWJRe6MA0GCSqGSIb3DQEBBQUAMA8xDTALBgNV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</X509Certificate>
+<X509SubjectName>CN=Acme</X509SubjectName>
+<X509IssuerSerial>
+<X509IssuerName>CN=Acme</X509IssuerName>
+<X509SerialNumber>10180353407905503162</X509SerialNumber>
+</X509IssuerSerial>
+</X509Data>
+	    </KeyInfo>
+	</Signature>
+    </signatures>
+</signed-credential>
Index: examples/creddy_tests/Bad_ID.pem
===================================================================
--- examples/creddy_tests/Bad_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/Bad_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
Index: examples/creddy_tests/Bad_private.pem
===================================================================
--- examples/creddy_tests/Bad_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/Bad_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
Index: examples/creddy_tests/Bigbird_ID.pem
===================================================================
--- examples/creddy_tests/Bigbird_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/Bigbird_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
Index: examples/creddy_tests/Bigbird_private.pem
===================================================================
--- examples/creddy_tests/Bigbird_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/Bigbird_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
Index: examples/creddy_tests/Coyote_ID.pem
===================================================================
--- examples/creddy_tests/Coyote_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/Coyote_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
Index: examples/creddy_tests/Coyote_private.pem
===================================================================
--- examples/creddy_tests/Coyote_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/Coyote_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
Index: examples/creddy_tests/Coyote_sneakyFriend__Bigbird.xml
===================================================================
--- examples/creddy_tests/Coyote_sneakyFriend__Bigbird.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/Coyote_sneakyFriend__Bigbird.xml	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<signed-credential>
+    <credential xml:id="ref0">
+	<type>abac</type>
+	<version>1.0</version>
+	<expires>2014-05-06T21:52:14Z</expires>
+	<rt0>4b85485f00f80dd76d9d27e55a81931f78efc503.sneaky_friend&lt;-1f6b018e12560773c76fc476923fe21e5dc57f08</rt0>
+    </credential>
+    <signatures>
+	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+	    <SignedInfo>
+		<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
+		<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<Reference URI="#ref0">
+		    <Transforms>
+			<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+		    </Transforms>
+		    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		    <DigestValue>WtwOsPSHWeoGy1g8M9CbqoQk1wI=</DigestValue>
+		</Reference>
+	    </SignedInfo>
+	    <SignatureValue>nBGqS5YfB8tMSBk53cK3OqEpmWIyjqVaRSdoW/dftrVA1ahfdQAHerzz0x7kiLCv
+EhnRNtkYSuBGuLHNEd4jwllqae0d82x9jsAoY8rrxdasIJvQIW9qsg7SX+C824jw
+hEPOUEMbU6fmtB5NNGt+uGOd2xdNi9l0KzpqEhWrPksRY/DXTxoJriEg/imLHuvK
+rpTiy0BVgOW/jx85l+oUNMO9xvL82KcyTGCMFtjp39ScvNI+ulJ91Xn79K1pHQ6a
+P5R5hgct2YFx2Io5xbDF5seHimPfIkJaL7JsiU74PR8m7B5vwjXyxeoOIlDyH+l9
+oc4xtrhpuFunz5dB0l/sAQ==</SignatureValue>
+	    <KeyInfo>
+	      <KeyValue>
+<RSAKeyValue>
+<Modulus>
+p1/5WVxnqcxaTit4jjFUYFkp+nLXbVVw5UtsNLZ4h7dcnYPTwXyDoZdLIuJKqpjP
+Dn3sgWo0eewBrsJUZHwg9XsATrwrrgHAK4roMBIGdPnhiuFisLEfbiZ1FM4xfNr8
+ijeCtMy8YpVtHDfn7XuxFp2oQAh7ljdY/ELzbKwLwhEuGjVMaD+Uwlvt1hW48Gok
+gOLfdDSFuJEZzEzoKKIkFql6z1mNKhvnEmvIMvnByT0zLhzh6mwJqs/Lh1IibZDC
+x4FDsuSPnKPuMfIQMkXgwv4kSFPkmOgEplilsPyTlaHkY0QGcYfpd2yblhGX64U8
+0iTXCU1fyVmjVvy4tAbgHw==
+</Modulus>
+<Exponent>
+AQAB
+</Exponent>
+</RSAKeyValue>
+</KeyValue>
+		<X509Data>
+		    
+		    
+		    
+		<X509Certificate>MIIDBzCCAe+gAwIBAgIIQWP4Gw0RAd0wDQYJKoZIhvcNAQEFBQAwETEPMA0GA1UE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</X509Certificate>
+<X509SubjectName>CN=Coyote</X509SubjectName>
+<X509IssuerSerial>
+<X509IssuerName>CN=Coyote</X509IssuerName>
+<X509SerialNumber>4711882430226694621</X509SerialNumber>
+</X509IssuerSerial>
+</X509Data>
+	    </KeyInfo>
+	</Signature>
+    </signatures>
+</signed-credential>
Index: examples/creddy_tests/Makefile
===================================================================
--- examples/creddy_tests/Makefile	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/Makefile	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,15 @@
+
+.PHONY : runcheck clean 
+runcheck: $(DIRECTORY)
+
+clean:
+	rm -rf *.xml *.pem *.out
+	rm -rf result
+
+runcheck: 
+	@echo 'running libabac CREDDY testing...' 
+	@./run_test > result 2>/dev/null; \
+	if test -f result && test `diff -q result.save result |wc -l ` -eq 0 ; \
+	then echo "   PASSED"; \
+	else echo "   ERROR:got changes!!!"; \
+	fi
Index: examples/creddy_tests/README
===================================================================
--- examples/creddy_tests/README	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/README	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,4 @@
+
+In this testing suite, various features of creddy is exercised
+
+
Index: examples/creddy_tests/abc_ID.pem
===================================================================
--- examples/creddy_tests/abc_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/abc_ID.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
Index: examples/creddy_tests/abc_private.pem
===================================================================
--- examples/creddy_tests/abc_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/abc_private.pem	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
Index: examples/creddy_tests/attribute.ck
===================================================================
--- examples/creddy_tests/attribute.ck	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/attribute.ck	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,16 @@
+#!/bin/sh
+
+# attribute.ck
+
+result=`diff attribute.out attribute.save 2>/dev/null`
+
+if [ "$result" = "" ]; then
+    return 0
+else
+    return 1
+fi
+
+
+# ignore
+#
+
Index: examples/creddy_tests/attribute.out
===================================================================
--- examples/creddy_tests/attribute.out	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/attribute.out	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,14 @@
+---running attribute 
+Usage: creddy --attribute \
+                --issuer <cert> --key <key> --role <role> \
+                [ --subject-cert <cert> | --subject-id <sha1> \
+                    [ --subject-role <role> ]  ... ] \
+                [ --validity <time> ] --out <file>
+    default validity: 365 days
+    provide exactly one of --subject-cert / --subject-id
+    give multiple --subject-{cert,id} / --subject-role pairs for intersection
+
+    time is specified with optional suffix: s m h d y
+    defaults to days if unspecified
+wrong private key for the cert!!
+creddy: Can't load private key from Coyote_private.pem
Index: examples/creddy_tests/attribute.save
===================================================================
--- examples/creddy_tests/attribute.save	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/attribute.save	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,14 @@
+---running attribute 
+Usage: creddy --attribute \
+                --issuer <cert> --key <key> --role <role> \
+                [ --subject-cert <cert> | --subject-id <sha1> \
+                    [ --subject-role <role> ]  ... ] \
+                [ --validity <time> ] --out <file>
+    default validity: 365 days
+    provide exactly one of --subject-cert / --subject-id
+    give multiple --subject-{cert,id} / --subject-role pairs for intersection
+
+    time is specified with optional suffix: s m h d y
+    defaults to days if unspecified
+wrong private key for the cert!!
+creddy: Can't load private key from Coyote_private.pem
Index: examples/creddy_tests/attribute.sh
===================================================================
--- examples/creddy_tests/attribute.sh	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/attribute.sh	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,30 @@
+#!/bin/sh
+
+pwd=`pwd`
+eloc=`which creddy | sed 's/\/creddy//'`
+if [ "$eloc" = "" ]; then
+  echo "ERROR: creddy is not in the search path!!!"
+  exit 1
+fi
+
+$eloc/creddy --attribute \
+       --issuer Acme_ID.pem --key Acme_private.pem --role roleOne \
+       --subject-cert Acme_ID.pem --subject-role simple_subject_role \
+       --out Acme_roleOne__Acme_simple_subject_role.xml
+
+$eloc/creddy --attribute \
+       --issuer Acme_ID.pem --role roleTwo \
+       --subject-cert Acme_ID.pem --subject-role simple_subject_role \
+       --out Acme_roleTwo__Acme_simple_subject_role.xml
+
+$eloc/creddy --attribute \
+       --issuer Acme_ID.pem --key Acme_private.pem --role roleThree \
+       --subject-cert Coyote_ID.pem --subject-role simple_subject_role \
+       --out Acme_roleThree__Coyote_simple_subject_role.xml
+
+$eloc/creddy --attribute \
+       --issuer Acme_ID.pem --key Coyote_private.pem --role roleFour \
+       --subject-cert Coyote_ID.pem --subject-role simple_subject_role \
+       --out Acme_roleFour__Coyote_simple_subject_role.xml
+
+
Index: examples/creddy_tests/attribute_rule.ck
===================================================================
--- examples/creddy_tests/attribute_rule.ck	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/attribute_rule.ck	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,21 @@
+#!/bin/sh
+
+# attribute_rule.ck
+
+result=`diff -I "sneaky_friend" attribute_rule.out attribute_rule.save 2>/dev/null`
+
+if [ "$result" = "" ]; then
+    return 0
+else
+    return 1
+fi
+
+
+# ignore
+
+#
+#2c2
+#< 42d367c6c599ac9d505cafa9abe92fd00d587db5.sneaky_friend<-a1dca2221c256393553edb5369980b4c04768dc0
+#---
+#> 0331e8fb4e0b4a58fcda5b938eaeab6a0663d7d3.sneaky_friend<-7ab52740e981d1c98589bed128e94fbefffa181a
+#
Index: examples/creddy_tests/attribute_rule.out
===================================================================
--- examples/creddy_tests/attribute_rule.out	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/attribute_rule.out	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,2 @@
+---running attribute_rule 
+4b85485f00f80dd76d9d27e55a81931f78efc503.sneaky_friend<-1f6b018e12560773c76fc476923fe21e5dc57f08
Index: examples/creddy_tests/attribute_rule.save
===================================================================
--- examples/creddy_tests/attribute_rule.save	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/attribute_rule.save	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,2 @@
+---running attribute_rule 
+0331e8fb4e0b4a58fcda5b938eaeab6a0663d7d3.sneaky_friend<-7ab52740e981d1c98589bed128e94fbefffa181a
Index: examples/creddy_tests/attribute_rule.sh
===================================================================
--- examples/creddy_tests/attribute_rule.sh	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/attribute_rule.sh	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,26 @@
+#!/bin/sh
+
+#attribute_rule.sh
+
+pwd=`pwd`
+eloc=`which creddy | sed 's/\/creddy//'`
+if [ "$eloc" = "" ]; then
+  echo "ERROR: creddy is not in the search path!!!"
+  exit 1
+fi
+
+$eloc/creddy --generate --cn Bigbird 1>/dev/null 2>& 1
+$eloc/creddy --generate --cn Coyote 1>/dev/null 2>& 1
+
+bigbird=`creddy --keyid --cert Bigbird_ID.pem`
+coyote=`creddy --keyid --cert Coyote_ID.pem`
+
+rule="$coyote.sneaky_friend<-$bigbird"
+
+$eloc/creddy --attribute \
+       --issuer Coyote_ID.pem --key Coyote_private.pem \
+       --attrrule "$rule" \
+       --out Coyote_sneakyFriend__Bigbird.xml
+
+$eloc/creddy --roles --cert Coyote_sneakyFriend__Bigbird.xml
+
Index: examples/creddy_tests/display.ck
===================================================================
--- examples/creddy_tests/display.ck	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/display.ck	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,23 @@
+#!/bin/sh
+
+# display.ck
+
+result=`diff display.out display.save 2>/dev/null |wc -l`
+
+if [ "$result" = "34" ]; then
+    return 0
+else
+    return 1
+fi
+
+
+# ignore many sets of
+#5,7c5,7
+#<     Not before: 2013-05-06 18:40:31 PST [1367894431]
+#<     Not after:  2016-04-20 18:40:31 PST [1461206431]
+#< 11979:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+#---
+#>     Not before: 2013-05-06 18:39:25 PST [1367894365]
+#>     Not after:  2016-04-20 18:39:25 PST [1461206365]
+#> 11951:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+#
Index: examples/creddy_tests/display.out
===================================================================
--- examples/creddy_tests/display.out	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/display.out	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,25 @@
+---running display 
+Issuer: /CN=Acme
+Subject: /CN=Acme
+Validity:
+    Not before: 2013-05-06 21:52:06 PST [1367905926]
+    Not after:  2016-04-20 21:52:06 PST [1461217926]
+14368:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+Acme_private.pem:1: parser error : Start tag expected, '<' not found
+-----BEGIN RSA PRIVATE KEY-----
+^
+creddy: Couldn't load Acme_private.pem as an ID or attribute, 
+14369:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+validity from the xml blob is 31535994
+Validity:
+    Not before: 2013-05-06 21:52:12 GMT [1367905932]
+    Not after:  2014-05-06 21:52:06 GMT [1399441926]
+Roles: 368d39b05c0bfd73a6ca2dd6c7851b2b94b751a5.buy_rockets<-368d39b05c0bfd73a6ca2dd6c7851b2b94b751a5.preferred_customer
+14370:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+validity from the xml blob is 31535994
+Validity:
+    Not before: 2013-05-06 21:52:12 GMT [1367905932]
+    Not after:  2014-05-06 21:52:06 GMT [1399441926]
+Roles: 368d39b05c0bfd73a6ca2dd6c7851b2b94b751a5.preferred_customer<-945957d933d81bfcc8c905fb1e08b6c54f4e51ef
+I/O warning : failed to load external entity "bad.xml"
+creddy: Couldn't load bad.xml as an ID or attribute, 
Index: examples/creddy_tests/display.save
===================================================================
--- examples/creddy_tests/display.save	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/display.save	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,25 @@
+---running display 
+Issuer: /CN=Acme
+Subject: /CN=Acme
+Validity:
+    Not before: 2013-05-06 18:39:25 PST [1367894365]
+    Not after:  2016-04-20 18:39:25 PST [1461206365]
+11951:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+Acme_private.pem:1: parser error : Start tag expected, '<' not found
+-----BEGIN RSA PRIVATE KEY-----
+^
+creddy: Couldn't load Acme_private.pem as an ID or attribute, 
+11952:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+validity from the xml blob is 31536000
+Validity:
+    Not before: 2013-05-06 18:39:26 GMT [1367894366]
+    Not after:  2014-05-06 18:39:26 GMT [1399430366]
+Roles: 8c5cda58d38f5d60f853aef467bd9080349d2853.buy_rockets<-8c5cda58d38f5d60f853aef467bd9080349d2853.preferred_customer
+11953:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+validity from the xml blob is 31536000
+Validity:
+    Not before: 2013-05-06 18:39:26 GMT [1367894366]
+    Not after:  2014-05-06 18:39:26 GMT [1399430366]
+Roles: 8c5cda58d38f5d60f853aef467bd9080349d2853.preferred_customer<-0fa3edc7c2493eb077431a2dfee0a3c35e67d4ac
+I/O warning : failed to load external entity "bad.xml"
+creddy: Couldn't load bad.xml as an ID or attribute, 
Index: examples/creddy_tests/display.sh
===================================================================
--- examples/creddy_tests/display.sh	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/display.sh	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,14 @@
+#!/bin/sh
+
+pwd=`pwd`
+eloc=`which creddy | sed 's/\/creddy//'`
+if [ "$eloc" = "" ]; then
+  echo "ERROR: creddy is not in the search path!!!"
+  exit 1
+fi
+
+$eloc/creddy --display --show=all --cert Acme_ID.pem
+$eloc/creddy --display --show=all --cert Acme_private.pem
+$eloc/creddy --display --show=all --cert Acme_buy_rockets__Acme_preferred_customer_attr.xml
+$eloc/creddy --display --show=all --cert Acme_preferred_customer__Coyote_attr.xml
+$eloc/creddy --display --show=all --cert bad.xml
Index: examples/creddy_tests/generate.ck
===================================================================
--- examples/creddy_tests/generate.ck	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/generate.ck	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,17 @@
+#!/bin/sh
+
+# generate.ck
+
+result=`diff -I "buy_rockets" generate.out generate.save 2>/dev/null`
+list=`ls -l *ID.pem |wc -l`
+
+if [ "$result" = "" -a "$list" = "6" ]; then
+    return 0
+else
+    return 1
+fi
+
+
+# ignore
+#
+
Index: examples/creddy_tests/generate.out
===================================================================
--- examples/creddy_tests/generate.out	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/generate.out	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,13 @@
+---running generate 
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
+Generating key, this will take a while. Create entropy!
+    - move the mouse
+    - generate disk activity (run find)
Index: examples/creddy_tests/generate.sh
===================================================================
--- examples/creddy_tests/generate.sh	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/generate.sh	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,14 @@
+#!/bin/sh
+
+pwd=`pwd`
+eloc=`which creddy | sed 's/\/creddy//'`
+if [ "$eloc" = "" ]; then
+  echo "ERROR: creddy is not in the search path!!!"
+  exit 1
+fi
+
+$eloc/creddy --generate --cn Bigbird
+$eloc/creddy --generate --cn 12_3
+## looks like optarg just picked up the 'Bad' part
+$eloc/creddy --generate --cn Bad$name
+$eloc/creddy --generate --cn abc --cert bad.xml
Index: examples/creddy_tests/keyid.ck
===================================================================
--- examples/creddy_tests/keyid.ck	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/keyid.ck	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,28 @@
+#!/bin/sh
+
+# keyid.ck
+
+q=`diff -q keyid.out keyid.save 2>/dev/null |grep -c differ`
+result=`diff -I "PEM routines:PEM_read_bio:no start line" keyid.out keyid.save 2>/dev/null |wc -l`
+
+if [ "$q" = "1" -a "$result" = "6" ]; then
+    return 0
+else
+    return 1
+fi
+
+
+# ignore
+#
+#< 615eb760e357ac4bd010dd4cab41c6734c07280f
+#< 10947:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+#---
+#> cb53efdb302f06bcbcd6166d28b10f7bad994a74
+#> 10868:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+#5c5
+#< 10948:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+#---
+#> 10869:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+#
+#
+
Index: examples/creddy_tests/keyid.out
===================================================================
--- examples/creddy_tests/keyid.out	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/keyid.out	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,7 @@
+---running keyid 
+368d39b05c0bfd73a6ca2dd6c7851b2b94b751a5
+14338:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+creddy: Couldn't load ID cert from Acme_private.pem
+14339:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+creddy: Couldn't load ID cert from Acme_buy_rockets__Acme_preferred_customer_attr.xml
+creddy: Couldn't load ID cert from bad.xml
Index: examples/creddy_tests/keyid.save
===================================================================
--- examples/creddy_tests/keyid.save	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/keyid.save	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,7 @@
+---running keyid 
+cb53efdb302f06bcbcd6166d28b10f7bad994a74
+10868:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+creddy: Couldn't load ID cert from Acme_private.pem
+10869:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+creddy: Couldn't load ID cert from Acme_buy_rockets__Acme_preferred_customer_attr.xml
+creddy: Couldn't load ID cert from bad.xml
Index: examples/creddy_tests/keyid.sh
===================================================================
--- examples/creddy_tests/keyid.sh	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/keyid.sh	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,13 @@
+#!/bin/sh
+
+pwd=`pwd`
+eloc=`which creddy | sed 's/\/creddy//'`
+if [ "$eloc" = "" ]; then
+  echo "ERROR: creddy is not in the search path!!!"
+  exit 1
+fi
+
+$eloc/creddy --keyid --cert Acme_ID.pem
+$eloc/creddy --keyid --cert Acme_private.pem
+$eloc/creddy --keyid --cert Acme_buy_rockets__Acme_preferred_customer_attr.xml
+$eloc/creddy --keyid --cert bad.xml
Index: examples/creddy_tests/result
===================================================================
--- examples/creddy_tests/result	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/result	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,7 @@
+   creddy_tests, verify PASSED
+   creddy_tests, roles PASSED
+   creddy_tests, attribute PASSED
+   creddy_tests, keyid PASSED
+   creddy_tests, generate PASSED
+   creddy_tests, display PASSED
+   creddy_tests, attribute_rule PASSED
Index: examples/creddy_tests/result.save
===================================================================
--- examples/creddy_tests/result.save	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/result.save	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,7 @@
+   creddy_tests, verify PASSED
+   creddy_tests, roles PASSED
+   creddy_tests, attribute PASSED
+   creddy_tests, keyid PASSED
+   creddy_tests, generate PASSED
+   creddy_tests, display PASSED
+   creddy_tests, attribute_rule PASSED
Index: examples/creddy_tests/roles.ck
===================================================================
--- examples/creddy_tests/roles.ck	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/roles.ck	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+#!/bin/sh
+
+# roles.ck
+
+result=`diff -I "buy_rockets" roles.out roles.save 2>/dev/null`
+
+if [ "$result" = "" ]; then
+    return 0
+else
+    return 1
+fi
+
+
+# ignore
+#< 200baedcb4bfc243cdefe11efb27e293b85a7232.buy_rockets<-200baedcb4bfc243cdefe11efb27e293b85a7232.preferred_customer
+#---
+#> da8282ce28befbb08b432822f282dce02e28eaec.buy_rockets<-da8282ce28befbb08b432822f282dce02e28eaec.preferred_customer
+#
+
Index: examples/creddy_tests/roles.out
===================================================================
--- examples/creddy_tests/roles.out	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/roles.out	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,12 @@
+---running roles 
+Acme_ID.pem:1: parser error : Start tag expected, '<' not found
+-----BEGIN CERTIFICATE-----
+^
+creddy: Couldn't get cert from Acme_ID.pem
+Acme_private.pem:1: parser error : Start tag expected, '<' not found
+-----BEGIN RSA PRIVATE KEY-----
+^
+creddy: Couldn't get cert from Acme_private.pem
+368d39b05c0bfd73a6ca2dd6c7851b2b94b751a5.buy_rockets<-368d39b05c0bfd73a6ca2dd6c7851b2b94b751a5.preferred_customer
+I/O warning : failed to load external entity "bad.xml"
+creddy: Couldn't get cert from bad.xml
Index: examples/creddy_tests/roles.save
===================================================================
--- examples/creddy_tests/roles.save	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/roles.save	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,12 @@
+---running roles 
+Acme_ID.pem:1: parser error : Start tag expected, '<' not found
+-----BEGIN CERTIFICATE-----
+^
+creddy: Couldn't get cert from Acme_ID.pem
+Acme_private.pem:1: parser error : Start tag expected, '<' not found
+-----BEGIN RSA PRIVATE KEY-----
+^
+creddy: Couldn't get cert from Acme_private.pem
+200baedcb4bfc243cdefe11efb27e293b85a7232.buy_rockets<-200baedcb4bfc243cdefe11efb27e293b85a7232.preferred_customer
+I/O warning : failed to load external entity "bad.xml"
+creddy: Couldn't get cert from bad.xml
Index: examples/creddy_tests/roles.sh
===================================================================
--- examples/creddy_tests/roles.sh	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/roles.sh	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,13 @@
+#!/bin/sh
+
+pwd=`pwd`
+eloc=`which creddy | sed 's/\/creddy//'`
+if [ "$eloc" = "" ]; then
+  echo "ERROR: creddy is not in the search path!!!"
+  exit 1
+fi
+
+$eloc/creddy --roles --cert Acme_ID.pem
+$eloc/creddy --roles --cert Acme_private.pem
+$eloc/creddy --roles --cert Acme_buy_rockets__Acme_preferred_customer_attr.xml
+$eloc/creddy --roles --cert bad.xml
Index: examples/creddy_tests/run_test
===================================================================
--- examples/creddy_tests/run_test	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/run_test	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,28 @@
+#!/bin/sh
+#########
+# run_test
+#
+
+# rm .out, .pem, .xml
+./setup.sh 1>/dev/null 2>&1
+
+# a_run type
+a_run()
+{
+    echo "---running $1 " > $1.out
+    ./$1.sh 1 >> $1.out 2>& 1
+    `./$1.ck`
+    if [ $? -eq 0 ]; then
+       echo "   creddy_tests, $1 PASSED"
+    else
+       echo "   creddy-tests, $1 FAILED"
+    fi
+}
+
+a_run verify
+a_run roles
+a_run attribute
+a_run keyid
+a_run generate
+a_run display
+a_run attribute_rule
Index: examples/creddy_tests/setup.sh
===================================================================
--- examples/creddy_tests/setup.sh	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/setup.sh	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,27 @@
+#!/bin/sh
+
+#Acme.buy_rockets <- Acme.preferred_customer
+#Acme.preferred_customer <- Coyote
+
+rm -rf *.pem *.xml *.out
+
+pwd=`pwd`
+eloc=`which creddy | sed 's/\/creddy//'`
+if [ "$eloc" = "" ]; then
+  echo "ERROR: creddy is not in the search path!!!"
+  exit 1
+fi
+
+$eloc/creddy --generate --cn Acme
+$eloc/creddy --generate --cn Coyote
+
+$eloc/creddy --attribute \
+       --issuer Acme_ID.pem --key Acme_private.pem --role buy_rockets \
+       --subject-cert Acme_ID.pem --subject-role preferred_customer \
+       --out Acme_buy_rockets__Acme_preferred_customer_attr.xml
+
+$eloc/creddy --attribute \
+       --issuer Acme_ID.pem --key Acme_private.pem --role preferred_customer \
+       --subject-cert Coyote_ID.pem \
+       --out Acme_preferred_customer__Coyote_attr.xml
+
Index: examples/creddy_tests/verify.ck
===================================================================
--- examples/creddy_tests/verify.ck	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/verify.ck	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,19 @@
+#!/bin/sh
+
+# verify.ck
+
+result=`diff -I "no start line:pem_lib.c" verify.out verify.save 2>/dev/null`
+
+if [ "$result" = "" ]; then
+    return 0
+else
+    return 1
+fi
+
+
+# ignore
+#< 10455:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+#---
+#> 10410:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+#
+
Index: examples/creddy_tests/verify.out
===================================================================
--- examples/creddy_tests/verify.out	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/verify.out	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,15 @@
+---running verify 
+issuer and attribute cert have mismatched principals
+
+issuer cert still valid
+attribute cert still valid
+issuer and attribute cert have matching principals
+
+issuer cert still valid
+attribute cert still valid
+14304:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+creddy: Can't load issuer cert from Acme_private.pem
+I/O warning : failed to load external entity "bad.xml"
+14306:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+creddy: Can't load issuer cert from Acme_buy_rockets__Acme_preferred_customer_attr.xml
+creddy: Can't load issuer cert from bad.xml
Index: examples/creddy_tests/verify.save
===================================================================
--- examples/creddy_tests/verify.save	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/verify.save	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,15 @@
+---running verify 
+issuer and attribute cert have mismatched principals
+
+issuer cert still valid
+attribute cert still valid
+issuer and attribute cert have matching principals
+
+issuer cert still valid
+attribute cert still valid
+10410:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+creddy: Can't load issuer cert from Acme_private.pem
+I/O warning : failed to load external entity "bad.xml"
+10412:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: CERTIFICATE
+creddy: Can't load issuer cert from Acme_buy_rockets__Acme_preferred_customer_attr.xml
+creddy: Can't load issuer cert from bad.xml
Index: examples/creddy_tests/verify.sh
===================================================================
--- examples/creddy_tests/verify.sh	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
+++ examples/creddy_tests/verify.sh	(revision 461541aae6382bb58dfb3c4a1679d2d48e8f9e64)
@@ -0,0 +1,16 @@
+#!/bin/sh
+#creddy --verify --cert <cert> [ --attrcert <cert> ]
+
+pwd=`pwd`
+eloc=`which creddy | sed 's/\/creddy//'`
+if [ "$eloc" = "" ]; then
+  echo "ERROR: creddy is not in the search path!!!"
+  exit 1
+fi
+
+$eloc/creddy --verify --cert Coyote_ID.pem --attrcert Acme_buy_rockets__Acme_preferred_customer_attr.xml
+$eloc/creddy --verify --cert Acme_ID.pem --attrcert Acme_buy_rockets__Acme_preferred_customer_attr.xml
+$eloc/creddy --verify --cert Acme_private.pem
+$eloc/creddy --verify --cert Acme_ID.pem --attrcert bad.xml
+$eloc/creddy --verify --cert Acme_buy_rockets__Acme_preferred_customer_attr.xml
+$eloc/creddy --verify --cert bad.xml
Index: examples/experiment_create/Acme_ID.pem
===================================================================
--- examples/experiment_create/Acme_ID.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,19 +1,0 @@
------BEGIN CERTIFICATE-----
-MIIDAzCCAeugAwIBAgIIEl5kqBUcxyswDQYJKoZIhvcNAQEFBQAwDzENMAsGA1UE
-AxMEQWNtZTAeFw0xMDA3MjIwMjA3MDdaFw0xMzA3MDYwMjA3MDdaMA8xDTALBgNV
-BAMTBEFjbWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW4ikPH3zx
-SF0R644EJUakL9pEI5cHwC5XvXuf+VEwq/l4yfE8WAMJAeR1yGBEw9teF9bZqjyk
-QUub/bz0z8uzgInZM3/I0Y6KHX72gZZGBr9ytq/VJLK/tUXKGDagWCOstzlWzsXu
-s1GwsDGPMLO7gtuQjiCYEn09RqovyvbJahd0VCSDcB0YWkzJhocqzaSI1VOl/c+o
-o92NsmQGLRdOH0Cx46YYTBmreUecslfFr0oCEKpSQb4hOf5+h2clwy8CSOA5iCC/
-E89GOFpFnyze5IA5l5/WUzIDYwalQ595/Bk4S29jzdKuu6fBtXyE/eL+mkqwxbHf
-vawubDlFcK3LAgMBAAGjYzBhMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQD
-AgEGMB0GA1UdDgQWBBSbR9Nmm5mkzh06AFW+AC6mpYAEGjAfBgNVHSMEGDAWgBSb
-R9Nmm5mkzh06AFW+AC6mpYAEGjANBgkqhkiG9w0BAQUFAAOCAQEAOoB4uuaiHEIN
-MYFNFegOpsl3LYXegTClaGodvZQMG69+fz7Q/gpzXPA6Po8cJJQCTGIHQRa6sb3T
-S18GoKSfHjiGBzMGIFpEoETYemrcb3F06MGHqn/kMsbHYGJ4hEE4UUxCu7Pv7/cy
-NVly+rvAAUxc2N+5/gzILZxZ04WPfa9kI+1hnNQdm+VCl7wBIXWtfnYGmqn89qv9
-IDFyf7e+uGGSP+Vj+gKmbkx75D4EttWnfKoaj4vutxG5eBJsI6VNbVeNFv+wTEx6
-GzDouB8AnJBNWmZ79cBqVG036OemUO9VDS749WhzwLpIdQEcZ94K7s079e655Mci
-3zG02fpiLA==
------END CERTIFICATE-----
Index: examples/experiment_create/Acme_private.pem
===================================================================
--- examples/experiment_create/Acme_private.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,27 +1,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEowIAAoIBAQDW4ikPH3zxSF0R644EJUakL9pEI5cHwC5XvXuf+VEwq/l4yfE8
-WAMJAeR1yGBEw9teF9bZqjykQUub/bz0z8uzgInZM3/I0Y6KHX72gZZGBr9ytq/V
-JLK/tUXKGDagWCOstzlWzsXus1GwsDGPMLO7gtuQjiCYEn09RqovyvbJahd0VCSD
-cB0YWkzJhocqzaSI1VOl/c+oo92NsmQGLRdOH0Cx46YYTBmreUecslfFr0oCEKpS
-Qb4hOf5+h2clwy8CSOA5iCC/E89GOFpFnyze5IA5l5/WUzIDYwalQ595/Bk4S29j
-zdKuu6fBtXyE/eL+mkqwxbHfvawubDlFcK3LAgMBAAECggEAWmZs5ZrWol9SID7b
-0SypaltjVLUwTadxF6J0htmJaZN/8Wvrm/pe1IRCS7bPoT5QZGZdEddHicaae3ak
-7s0YolyaIZFD2gUnFT3Rcv0TbkRaeHUYxe+Zb4NgZ+QF3zEVWQ0AB2AX7xLrdAy7
-3MSdaG5l1oukdLWakJPQ9yhI6HR/DEU2Gdvp7TWlsamcLd6fMSk4crA+ECEdH9tB
-T992c1x+2Zxr3PkuluxcX2xwdxV609g38aPPiPcUcyKB7fnlfF8TJRng1tiB+9Gz
-/2u+IbOeS0nexqbU5LpbJXL4gnq+/y5HLrJ4wAi1s1e1NioGdE58k8TVt+0lmMi9
-by+3OQKBgQDzdb29KU7PaWomXNOKk3nHnkOG9nnOzf4VjRQ7IO7I+BqSjkno39Mk
-JdKJquxXRVg5KYREobO9Ymt3iutgOpMbLkiLioMuj0VRtKQtvWlICfODjAOz7nNX
-8pUinYdFdzkjlvgh+bmwjunQgIaG0xtpo8D9l5zNEAS95K6w5430vQKBgQDh85wv
-VZSLBQr+iGmUe1831DKmN9x3CBi6ig132t1dyb+dlSxwilkm/gFojRseos6VrQA0
-A/44onG8s38Cq8DkpeB8wbEEto7tGTWdsqx80Nbzm3rG3NHKAahtLFiL1v+Yny/w
-+NJtekVjJywKAKqsjMjlO4no0yZcQJnGDsjJJwKBgHZF9t1UmgLNNVJZujMSHhFJ
-44hHaTl8fTk/BlsLTrW3QkF8eo91XP+smDFlJdfnykpKzwUAgW85xveWN27SRfDo
-dTnFGqGd3JEq7q+B2wmyO+jmNk5NQx+wq57bZIHsv4d4qibnSLxrUU+HgNMy75hM
-g08vPm+onoUZ+Xvboe0JAoGBAKauqXcZsNzlOXkPdKN+Z32t4jdQWijNJkDl+o2C
-PW8kl2BOXVwgEyh6lNtlzK3K+I7d8ppsn6tz2meUGowD2+ZQn8worseFTOaHhE/z
-MN9ayFcpSWdOGszkcDUpU6DFWARk2l7vj3wHiQxeJ1SxrTZhHQpN46yHp3LCjS3Y
-VjJdAoGBAI/H5AKUXVeHzTq41D9GnkMjNvu2lS0fZLdx55oPM8NrXe6A2hZSgh2a
-hDq31rjUmP3Bv/uJqiXgkVPpACRu3GAsVUVWrgHb861mTggoQa38Se8MAZmmIVve
-pHBxRu/nyve9PAERDvboiGtaDG7B48ihuZhjXJH1jcIhlxQbDap0
------END RSA PRIVATE KEY-----
Index: examples/experiment_create/Alice_ID.pem
===================================================================
--- examples/experiment_create/Alice_ID.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,19 +1,0 @@
------BEGIN CERTIFICATE-----
-MIIDBjCCAe6gAwIBAgIJAJIU5j3t94gxMA0GCSqGSIb3DQEBBQUAMBAxDjAMBgNV
-BAMTBUFsaWNlMB4XDTEwMDcyMjAyMDk1MFoXDTEzMDcwNjAyMDk1MFowEDEOMAwG
-A1UEAxMFQWxpY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkXPxk
-6OE6gFs4uy37EBm9JVPPZ5l965gYeDuqtnTTPAQgUhgUYGjo4VXzEBMF3o9W7jcq
-kTPihyPkqy/T1BRqZMJ506JEn9dn+a2FzSCv+US1L954cyZhIKpAwLmAFNCIyPs0
-wKeYQpv4RS6EMwWxFH3SQ+yJjOkYOFptjY+s5KEVF0uhYfSZ7aUldVRCteG4jJ5G
-AknYPckOfClAWP/kI7FerEB2qsbsBVDlNfl3oGLSPStfbpxNYkvaDuA3i9eYa0iC
-GxrL+HbP2rTlLsH5D47+DT6NG4hb3KhOfxJX5oggdr1eT7sqH2B+4Lyo5820MVwp
-Bq5onD1mYfwuczsVAgMBAAGjYzBhMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/
-BAQDAgEGMB0GA1UdDgQWBBQAHzWZuvt1XpeFW57gs0h4MKTsxzAfBgNVHSMEGDAW
-gBQAHzWZuvt1XpeFW57gs0h4MKTsxzANBgkqhkiG9w0BAQUFAAOCAQEAbWhM8XM0
-V4Q3ChCMaTtHTYc+IBDLbqtgS9RJU65RhGp4tZ8QJBSNQGC6WCDN1lYS/P00X4xX
-y5tINtzoK522L/H7neWU9p2LvHO0zxty1bv7qZMqTX9AkT4+Y6R+921lVjNXyf/v
-kugIkMsyDZibiicMeJXQ5/TywSMCXZ6gh/BvR7e81qxdyCGNcX0RnNt+2fCQ53tT
-RiNTQ7g6fYvvnokmCfVtu2kB2y2WYKqxAl08dZsZwRTgqmq+h5ZgeR4VrQm3J8kB
-Ny8W6aOgQI5tIOBlfZuiMDKJ7E2p+z6soWymORRd3bCK80XqVM7jCzi+E6W0CI5y
-PPAVjWOtQ0RDTw==
------END CERTIFICATE-----
Index: examples/experiment_create/Alice_private.pem
===================================================================
--- examples/experiment_create/Alice_private.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,27 +1,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEogIAAoIBAQDkXPxk6OE6gFs4uy37EBm9JVPPZ5l965gYeDuqtnTTPAQgUhgU
-YGjo4VXzEBMF3o9W7jcqkTPihyPkqy/T1BRqZMJ506JEn9dn+a2FzSCv+US1L954
-cyZhIKpAwLmAFNCIyPs0wKeYQpv4RS6EMwWxFH3SQ+yJjOkYOFptjY+s5KEVF0uh
-YfSZ7aUldVRCteG4jJ5GAknYPckOfClAWP/kI7FerEB2qsbsBVDlNfl3oGLSPStf
-bpxNYkvaDuA3i9eYa0iCGxrL+HbP2rTlLsH5D47+DT6NG4hb3KhOfxJX5oggdr1e
-T7sqH2B+4Lyo5820MVwpBq5onD1mYfwuczsVAgMBAAECggEADtSou5dengfQZNEB
-l0JTbM14y1Z4fHOjFau+GRC8A5Mfo+DqmWz6QzpaWtL0OVEotyxfWGj3sqi0jXKk
-qrm/EOECurPvRn+olwl7DUTmI432II8MTRkSKNEQELmzeMlhRap8ms9yn78FSOYz
-s16dtwNhEuYmykQX4a/MB6Nfulc7Yujhn2GriY7K5glB9T9OzvBulNnfuAXkwUVf
-zJZ1cZfBHvpLOIO9M68Ag6+eltYtIGCK02nUnLK4lvRNbmck1yT764qYdVYe/5B3
-oLue2rrIIVavUgMm+mwYbV+I0mmX6XBGdnjousKa4GBgb8BNeZ0NGQywILp0LYfS
-69S8HQKBgQD27iji68bNHVkmVnum87ZMMj1C6nyF5epUw31Uodb/AHuQ4DjBW9s3
-5CeFnxBjUJMJAu5yxbYj5O85gGkfIpZst4yEjKaCyLpl/WtGHTYmhqYErjTpBR5m
-y0uwhBk3uzdGrHlWjlD+VqlkEOHV8ti84ZRRgqSWnF0O1EYCnzdTwwKBgQDswD5J
-/okRFgVK7GoFW7i9K8wq9TI451ehPMG6ezjHKBSpj/DwuRLL8mGmTVIE3mhz2C5f
-ogR+zMqqUH/fyXBbQj9h8mSbSe3YRza89f4837jlNi9phLZfxVXXBKKRMvr5VZFo
-FzxK4NqJ3JqWGxMFl5niF6dldZlu1VR/lskARwKBgHxgBTQXMjFKYQcQdIPpKZ9D
-htvXpBUFc3xyYwRn6BTVN2gHqE6sZ8TFJKsHLYf4o7bcRSKGN3Ho9B3wcgJ+t2nX
-Ie35sj0ZwdlxRcExIX9SPvkIjhn4vBFmwJ8OSm1p3TO51/wi/uS83eFLJ5VOFqE8
-tipANYqvA6hef0z+yS1lAoGAMwMFKNpgXD8batZfzcHCn3gVaNgmNx6ZwhMeRvkP
-9dGMCjEKoEOwaiNSqQuV9ZiadwOIknCNeWjU7jekJer4e6FdmNQqm08loWlOwQ5b
-9m/aHgE73AeNaDtT0J2eDZ0neJvYVc5T3mpujC/tWxSAV78fmBiyp+jb44axy0AJ
-FTcCgYEA1KWUGyCZsQ8P2OPNBZwweiC+uIkegr+It7DwSIOcb1CcAZk/EQNmZKQ2
-wxMJ9WdQOwVPR2jN11lUVSpC226fIxmSg1a0pD5iuO2y2EmZGUNsnUcn2eGhml2i
-u4NPEIBIC+09j58LxtPAeACziUhopK776KlF9XSVfmaPeSkhQ24=
------END RSA PRIVATE KEY-----
Index: examples/experiment_create/Bob_ID.pem
===================================================================
--- examples/experiment_create/Bob_ID.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,19 +1,0 @@
------BEGIN CERTIFICATE-----
-MIIDATCCAemgAwIBAgIISfaA/puWrhYwDQYJKoZIhvcNAQEFBQAwDjEMMAoGA1UE
-AxMDQm9iMB4XDTEwMDcyMjAyMTA1OVoXDTEzMDcwNjAyMTA1OVowDjEMMAoGA1UE
-AxMDQm9iMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65M6fGhw39I0
-rjq5jeDmI0RlEw9QnN1ycBdD33+on1cYM6/vQMSUYAaXww+gaJQP9GgzMv8HmyoM
-yClLRcOuIkfIyaL8Z9ZKh3RQ4XlzZjxBQnLJkJaktxfW0HV8LdiV4Us+ehmXk3B/
-pYzNswN6VMkFgUO5szLfyYh+iH9J0bvSURIzMBmQ0VJjxiG5VIQweEP1PYbkxoZh
-vYa0wx4Is4RddD6GUplkDr5HhKoDFQExB8xvUk1fa3Xfa6wRwRmFJZhes4ZHapED
-JX6mSDgtEZXVOsM+4K2bHXY5HSBP2cE59OWXx62EH7LjwZSghpp0FN9KGc9IABST
-mi9q/KwPPQIDAQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB
-BjAdBgNVHQ4EFgQUuc2rwnT6ODkMJoKe/taOqlJ7jQAwHwYDVR0jBBgwFoAUuc2r
-wnT6ODkMJoKe/taOqlJ7jQAwDQYJKoZIhvcNAQEFBQADggEBAJXI1pwfqjiLPV45
-TxYTrcUj5GDWvt/+ttm93yj7XceuRnxZfRIN9Of9SX+8smZe5GOw5/Wuus2IGTpd
-XK56YkYBK8HQN8ymog86Veycgspt3LedQSuYaCe6GwUqfEaZ/iqWjLUd7pkKxFfX
-O8pgCsEOdWeu4D2BT+A8kWpqf1uhCpghCONotYVOz44F6uoEOdjZoXXHWjWy/nRg
-p3LSXDkGprZuO6jp3kYdflmvXCyuEawQv3eXuV2f2jKFRwrIXmn8Gis10xgwX+cq
-N4LHHGjqR0a/naXK7PuMn/yC/WRujl2yz4nsPbm98Fu2n6KnbUVd+n6EO/16WzVw
-na6/oLM=
------END CERTIFICATE-----
Index: examples/experiment_create/Bob_private.pem
===================================================================
--- examples/experiment_create/Bob_private.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,27 +1,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEowIAAoIBAQDrkzp8aHDf0jSuOrmN4OYjRGUTD1Cc3XJwF0Pff6ifVxgzr+9A
-xJRgBpfDD6BolA/0aDMy/webKgzIKUtFw64iR8jJovxn1kqHdFDheXNmPEFCcsmQ
-lqS3F9bQdXwt2JXhSz56GZeTcH+ljM2zA3pUyQWBQ7mzMt/JiH6If0nRu9JREjMw
-GZDRUmPGIblUhDB4Q/U9huTGhmG9hrTDHgizhF10PoZSmWQOvkeEqgMVATEHzG9S
-TV9rdd9rrBHBGYUlmF6zhkdqkQMlfqZIOC0RldU6wz7grZsddjkdIE/ZwTn05ZfH
-rYQfsuPBlKCGmnQU30oZz0gAFJOaL2r8rA89AgMBAAECggEAKoB1nNx7AOa7+nM9
-5wscemBsm/O3Z5XMf8yywjAWDCl6hFjJobXVzz1hRCAdoMCV4FKsahb5GFWN2M8a
-dYvIbwbkgvyU7WcMK0QhE40F9PwKCiMLmrqTHTV/3DxWGy9oWy1oKD9VyZQSc5vj
-wNhvybw68gd2CY60MXge3CGa/+u6ePsfkHHMgn7UhkJNdZGw2DpPtT9JpHOhOQnr
-ircTme0rsH//0FF0qXrL2YKDUgHmPMjlVMTc6j4y69joygnaF6r9zZCwO3dIuXbX
-++FW329hAjrgLvB/nuTaF3rzjCgQn192XXvwwRtkXmGMui2tqZig8E/5nTt9Qxpd
-vQ0iAQKBgQD2yQ6pP8pMbcJh9IGu/B1+csDzCR5TldMrP1cihlyQy64tCJV3BlbA
-EkPy2XSi1UGnYR45R7A4UbOJD3JQBwSU7wgsMe2f3TraZ5islcW8ZMEv65xXsQBS
-kNl8IPR2abNN+ZpYxlWKw6c1pZVD1w3EjGCy1h0Z2Kb2Zc/FfAvUBQKBgQD0XwQL
-8KBk2959uZMkgJqExeBeXESQapw6B3iQwFYd0PTl/fDCu8c1lv2BnABxeMsjJBnm
-arI/XnR0oI84e6uJ/PLOjcDi30YiJMrseW7qmJpwReNM0ciuaH0FHltqbmrUnF/o
-HxXY3E1hVxsuW9amBcKbOlKzlXo0RYd3RM6r2QKBgHJbbtjM/5B1GCtOIz4UBBLR
-WEoGwq/W8LjMrDMKciCC0d56aNBz9oUgsa36SIsgKUFHxrqiVq1yZrCvoLgm2F+v
-eGkKZeO7n4cPlHb9HFkVk1QCaTtVgSHBj5ZuqvmoN3d9n6Fdnswjp/s7FLUQFYgr
-yK92epu8gnoRabtIpS6FAoGBAI9Pka325fmAQBD3XeWQTg4DhbuQ3NzcyNX3P6uU
-QGyn+JdQv3tUaFVzQSRbep8ROgBX0aChfftPx3gGGTgEvurjnvmnhDEIw7aOYTsh
-U/zcleW19sE8XjZ6LKdt0CqwqpIZSt10LXnKaM7nKJedYFppEmG6aHnM9afmBrXZ
-cmKxAoGBAIQn9bwygYlDafi0haldEd/7uzfCwJtGSbx7HJdKN7/SxSma+zgX71KQ
-ebRcD9pkfISLKWW9oXqpKo/8y6DXxU5U5WwsY1uoh4tPyFS0lZQ4M0GXqU8BgNKL
-10Bwav3QQ9FLqQnBi09Jq1XdTgAJwjYbJyJss95FXN65/AWfkLPf
------END RSA PRIVATE KEY-----
Index: examples/experiment_create/Globotron_ID.pem
===================================================================
--- examples/experiment_create/Globotron_ID.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,19 +1,0 @@
------BEGIN CERTIFICATE-----
-MIIDDjCCAfagAwIBAgIJAIqI9RnJDhLfMA0GCSqGSIb3DQEBBQUAMBQxEjAQBgNV
-BAMTCUdsb2JvdHJvbjAeFw0xMDA3MjIwMjA4NTJaFw0xMzA3MDYwMjA4NTJaMBQx
-EjAQBgNVBAMTCUdsb2JvdHJvbjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
-ggEBANYkX513F3dtOqKSxlMKCYfrAVy+ewna9gGiS6YgCOp0oWKMb8J9Id82bg24
-3mZU/lUuKZKyHnQIAsOh+rEB6YmsuDuVf5P5qIy4FKoegX6LTOiNtyAcaYGZo8Zf
-VkjA0SJAjF87qK0tMPiRTiIP6RTXhWsAUxEeBO5KlOXSLETYhxre6tsfCFAaewTn
-PJqvCMPe7aBJqCurXNCiyEtNwAP6Y3hbqVjrEKQWOHltlXDNjDSvC08aNse4ZCPl
-EetCaLFeeZU4C+euqmo23EDiQF4WptfelrFADtP62iqWou9faD2l+kjfw6U0Y3qG
-ccMjfHSJeu5bqpwHnPEVL+rQz7sCAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAO
-BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFPkj6fadM7Uti739GfLsid3nvu3XMB8G
-A1UdIwQYMBaAFPkj6fadM7Uti739GfLsid3nvu3XMA0GCSqGSIb3DQEBBQUAA4IB
-AQDG/qXUBUfh6UyBxzQECKqs0z3tG7GxJDyF84jh9TM57HJZbzeXwmB6BvCZBi9v
-DXrFsk6ZeafUlU6Fq8BPIEG0zAoHTLdyJTCQyDle6gK/pNaESlUmYUwOXSfwLR2h
-sk3K64ZIZYR3Iu7GcdpKp0ibJP8et0AEA7Y5TIjzTffBirEFNwUS662Vf8eiY+5F
-1flJ/tpqpYGs4qnHexl8b4elb4pd5YM7APQq8Nnxg46t60QR1TcF4F5rtf+2cAtU
-LolfpO4j6eniPcHUJlTaQCwIjzeI+Ur5XHceXjKTH5B7HUDe4oxLQgMfQIarbefL
-+ALHo2e4MSHAGA5fTj/J1Y+Q
------END CERTIFICATE-----
Index: examples/experiment_create/Globotron_private.pem
===================================================================
--- examples/experiment_create/Globotron_private.pem	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,27 +1,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEogIAAoIBAQDWJF+ddxd3bTqiksZTCgmH6wFcvnsJ2vYBokumIAjqdKFijG/C
-fSHfNm4NuN5mVP5VLimSsh50CALDofqxAemJrLg7lX+T+aiMuBSqHoF+i0zojbcg
-HGmBmaPGX1ZIwNEiQIxfO6itLTD4kU4iD+kU14VrAFMRHgTuSpTl0ixE2Ica3urb
-HwhQGnsE5zyarwjD3u2gSagrq1zQoshLTcAD+mN4W6lY6xCkFjh5bZVwzYw0rwtP
-GjbHuGQj5RHrQmixXnmVOAvnrqpqNtxA4kBeFqbX3paxQA7T+toqlqLvX2g9pfpI
-38OlNGN6hnHDI3x0iXruW6qcB5zxFS/q0M+7AgMBAAECggEAU8+0pHqh8poLoulz
-Objp9gpiZBwhJ8BNHGKa3RAYrTqsl1eDvkkfYq9472H1mXOWf1wr5UBVbvBbtJnG
-9lRbRQkWqite3VmPQFQjsllyMUbv+OzOSYEVQiYR1Wgm6x6cO52r0vIUmILhccfd
-HrO/c+rOSwy7di2bnHAQSsqxjNfC8VEIHXf0VWd7Md6lFp/jV0qj5g+ZisAUcIla
-UOMqtO0GOrBaLjOBU8hAWlEVmyfji4g61rXYA0HbhA/4MdNBvMbaiS2I81/n42CV
-pYSj8d4hWus5UAr5BDyn73moPI+1rwIcbVi27SMNml2txBqyOcRTyO1/jDsRoVBK
-14erUQKBgQDri9Sw25dNvmt0pIixUmAImrivGthhK2ojc0EI/ijm/A6eMZTc9gFA
-NZVBz/S7ZtQR0vrpofdEICfbf95pyQXe/SqW6mCi9YKB7jlBaKDxNYQPeiSTnrsW
-XT1YMhNqbxKUDgkoSalBDsbwiMLKifYxElVdbDKnIEL0z/6yV9iYHQKBgQDovLsg
-cW1ShMps5xZ5qgcpSeK5ZO5WSaKfODyIC/8QzRQeyNYzGajYheHfdi2KIfPm5T+8
-NIFbMwiSUpcXk//wzV4cHWWhgaTKNzNFEj0uwbZ4DokV0rOCUo3hBhcTJuUwVrz7
-rlHLSX98gvKo+2m2kdM1gk6di5dToWXk1Y3vtwKBgDlmuy9aZDXy+LbVPeaQn4yZ
-P/aUQTT04om/FZM+dPNNa7aLeK6cWNOv+y6togNlXLr3QmRbLynv+Caas7Xt4jtk
-UNO0TFaKJALL7jINcGM32nX3GyDKZuddU4zBr0+Zv9pKzVp/EPskwcBuY6H+Gvv8
-bsc0jeeCii6k3XnSxJrVAoGBAKC6llDVhLZUVqfW/8KOFdwB1r5KYf7dY52p7MPX
-5RLpTlfkQ2mO8vh1nYQBzXlz8UkoUVfcuukM2YKT3xy9bSgT7EZmVuWu7utoK9Qr
-wG0mAqnu/+U+WhJKiQk6d30Wg3larbDytjI6U/zdQlBJMLyRANgXYcuTt7Jd6Eyc
-3yUJAoGAFwupRAbkTJ6xasuRV/HdiJY7cflPB4usLOFjSbSVarCm2F/vJGp6dPY7
-iL4kbSnsT0fpHX7KmSnh5+8Dw/Bdp8P2eNVwMh9toQuqiV7o1QVX7q0lorSnlIU+
-dU+1F5DD9RpEcrw5abI3OTZOcXUEwtMygYFc18QJ11LO+CQvBGA=
------END RSA PRIVATE KEY-----
Index: examples/experiment_create/README
===================================================================
--- examples/experiment_create/README	(revision 18d9cfae93520637cb9678e68d2c4bb00ffc3800)
+++ 	(revision )
@@ -1,55 +1,0 @@
-Acme runs a testbed. They've delegated the authority to create
-experiments to all their partners. The Globotron company is one such
-partner.
-
-    Acme.experiment_create <- Acme.partner.experiment_create
-    Acme.partner <- Globotron
-
-Globotron has delegated the authority to anyone an admin thinks is a
-'power user'.
-
-    Globotron.experiment_create <- Globotron.admin.power_user
-
-Alice is an admin, and her friend Bob is a power user:
-
-    Globotron.admin <- Alice
-    Alice.power_user <- Bob
-
-From these credentials, it is possible to construct a proof graph
-showing that Acme.experiment_create <- Bob.
-
-Note that there is a one-to-one correspondence with each credential
-above and the attribute certificates below.
-
-creddy --generate --cn Acme
-
-creddy --generate --cn Globotron
-
-creddy --generate --cn Alice
-
-creddy --generate --cn Bob
-
-creddy --attribute \
-       --issuer Acme_ID.pem --key Acme_private.pem --role experiment_create \
-       --subject-cert Acme_ID.pem --subject-role partner.experiment_create \
-       --out Acme_experiment_create__Acme_partner_experiment_create_attr.der
-
-creddy --attribute \
-       --issuer Acme_ID.pem --key Acme_private.pem --role partner \
-       --subject-cert Globotron_ID.pem \
-       --out Acme_partner__Globotron_attr.der 
-
-creddy --attribute \
-       --issuer Globotron_ID.pem --key Globotron_private.pem --role experiment_create \
-       --subject-cert Globotron_ID.pem --subject-role admin.power_user \
-       --out Globotron_experiment_create__Globotron_admin_power_user_attr.der
-
-creddy --attribute \
-       --issuer Globotron_ID.pem --key Globotron_private.pem --role admin \
-       --subject-cert Alice_ID.pem \
-       --out Globotron_admin__Alice_attr.der
-
-creddy --attribute \
-       --issuer Alice_ID.pem --key Alice_private.pem --role power_user \
-       --subject-cert Bob_ID.pem \
-       --out Alice_admin__Bob_attr.der
