On the security of public key protocols