Protocol analysis modulo exclusive-or theories: a case study in Maude-MPA