"Verification of a cryptographic primitive: SHA-256 (abstract)."

Andrew W. Appel (2015)
a service of Schloss Dagstuhl - Leibniz Center for Informatics