available from Formal Systems Ltd., the Caspar compiler, and CSP. They use these
tools to model and analyzeYahalom (a protocol for distributing the symmetric
shared keys used by trusted servers and for mutual entity authentication).
Further applications of formal methods are mentioned in Security in