Specifying Systems: The TLA+ Language and Tools for Hardware ...
Leslie Lamport
Password Authentication with Insecure Communication
Science of Concurrent Programs