Bruno Langenstein Roland Vogt Markus Ullmann The Use of Formal Methods for Trusted Digital Signature Devices. 336-340 2000 conf/flairs/2000 FLAIRS Conference db/conf/flairs/flairs2000.html#LangensteinVU00