Constraint solving for bounded-process cryptographic protocol analysis