Protocol insecurity with a finite number of sessions and composed keys is NP-complete.
scientific article; zbMATH DE number 1915580