How to prevent type-flaw and multi-protocol attacks on security protocols under Exclusive-OR