Stéphanie Delaune Steve Kremer Mark Ryan Verifying privacy-type properties of electronic voting protocols. 435-487 2009 17 Journal of Computer Security 4 http://dx.doi.org/10.3233/JCS-2009-0340 db/journals/jcs/jcs17.html#DelauneKR09