Jeff Lewis Cryptol: specification, implementation and verification of high-grade cryptographic applications. 41 2007 FMSE http://doi.acm.org/10.1145/1314436.1314442 conf/ccs/2007fmse db/conf/ccs/ccs2007fmse.html#Lewis07