Colin Boyd Kapali Viswanathan Towards a Formal Specification of the Bellare-Rogaway Model for Protocol Analysis. 49-61 http://springerlink.metapress.com/openurl.asp?genre=article&issn=0302-9743&volume=2629&spage=49 2002 conf/fasec/2002 FASec db/conf/fasec/fasec2002.html#BoydV02