Véronique Cortier Jonathan K. Millen Harald Rueß Proving Secrecy is Easy Enough. 97- 2001 conf/csfw/2001 CSFW http://csdl.computer.org/comp/proceedings/csfw/2001/1146/00/11460097abs.htm db/conf/csfw/csfw2001.html#CortierMR01