Symbolic Model Checking Without Bdds