Deriving secrecy properties in key establishment protocols - Pavlovic, D; Meadows, C (Springer Verlag, 2006)