Lawrence C. Paulson Relations Between Secrets: Two Formal Analyses of the Yahalom Protocol. 197-216 2001 9 Journal of Computer Security 3 db/journals/jcs/jcs9.html#Paulson01