2014-06-042014-06-042014-06-042013978-3-642-41226-410.1007/978-3-642-41227-1https://infoscience.epfl.ch/handle/20.500.14299/104035Provable Securitytext::conference output::conference proceedings