The slam calculus: programming with secrecy and integrity (1998)

by Nevin Heintze, Jon G. Riecke
Venue:In POPL ’98: Proceedings of the 25th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages