Automated Analysis and Verification of TLS 1.3: 0-RTT, Resumption and Delayed Authentication
The Transport Layer Security (TLS) Protocol Version 1.2