Joshua D. Guttman Authentication tests and disjoint encryption: A design method for security protocols. 409-433 2004 12 Journal of Computer Security 3-4 db/journals/jcs/jcs12.html#Guttman04