The former condition follows from the hardware constraint, that no one except C could have uttered a text of the form {C, ...} K. The latter, that R |??? C |??? X, must be deduced using the nonce verification rule from #X (X is fresh) and R |??? C |~ X (R believes C uttered X).