selected publications conference paper Formal verification of tamper-evident storage for e-voting. . 329-338. 2007