Describir: Formal Correctness of Security Protocols