A formal analysis of Syverson's rational exchange protocol | IEEE Conference Publication | IEEE Xplore