A. Washburn and S. Shankar. " Formal Verification of Forward Secrecy and Post-Compromise Security for TreeKEM", in Proceedings of the 27th Brazilian Symposium on Formal Methods, Vitória/ES, 2024, pp. 155-170.