Formal Proofs for the Security of Signcryption