Case study in protocol verification