Holger Grandy Markus Bischof Kurt Stenzel Gerhard Schellhorn Wolfgang Reif Verification of Mondex Electronic Purses with KIV: From a Security Protocol to Verified Code. 165-180 2008 FM http://dx.doi.org/10.1007/978-3-540-68237-0_13 conf/fm/2008 db/conf/fm/fm2008.html#GrandyBSSR08