Bruno Blanchet Aaron D. Jaggard Andre Scedrov Joe-Kai Tsay Computationally sound mechanized proofs for basic and public-key Kerberos. 87-99 2008 ASIACCS http://doi.acm.org/10.1145/1368310.1368326 conf/ccs/2008asia db/conf/ccs/asiaccs2008.html#BlanchetJST08