Symbolic verification of distance-bounding protocols