The SLam calculus: Programming with secrecy and integrity (1998)

by Nevin Heintze, Jon G Riecke
Venue:In Proc. 25th ACM Symp. on Principles of Programming Languages (POPL