Proving the TLS Handshake Secure (As It Is)
Public-key encryption in a multi-user setting: Security proofs and improvements