Trust but Check: Mutable Objects in Untrusted Cooperative Caches. - Liuba Shrira; Ben Yoder (POS/PJW, 1998)