Paolo Maggi, Riccardo Sisto: Using SPIN to Verify Security Properties of Cryptographic Protocols. SPIN 2002: 187-204