TY - RPRT TI - Formal verification of a fault tolerant clock synchronization algorithm AU - Rushby, John AU - Vonhenke, Frieder PY - 1989 UR - https://ntrs.nasa.gov/citations/19890015432 ID - 19890015432 ER -