Formal Verification Of Receipt Validation In Chaum’S Scheme