Real-or-random Key Secrecy of the Otway-Rees Protocol via a Symbolic Security ProofMichael Backes2006Electronic Notes in Theoretical Computer Science