A Dolev-Yao Model for Zero Knowledge
The Scyther Tool: Verification, Falsification, and Analysis of Security Protocols