A formally verified algorithm for clock synchronization under a hybrid fault model (1994)

by J Rushby
Venue:in: PODC ’94: Proceedings of the thirteenth annual ACM symposium on Principles of distributed computing, ACM