Text this: Model checking of trusted cryptographic module