Tutorial:DesignandValidationofProtocols

Itcanberemarkablyhardtodesignagoodcommunicationsprotocol,muchhardereventhanitistowriteanormalsequentialprogram.Unfortunately,whenthedesignofanewprotocoliscomplete,weusuallyhavelittletroubleconvincingourselvesthatitistriviallycorrect.Itcanbeaunreasonablyhardtoprovethosefactsforma