mcmas : a model checker for the verification of multi - agent systems .
The dining cryptographers problem: Unconditional sender and recipient untraceability