Frederick Butler Iliano Cervesato Aaron D. Jaggard Andre Scedrov Christopher Walstad Formal analysis of Kerberos 5. 57-87 2006 367 Theor. Comput. Sci. 1-2 http://dx.doi.org/10.1016/j.tcs.2006.08.040 db/journals/tcs/tcs367.html#ButlerCJSW06