Proving the TLS Handshake Secure (As It Is)
Universally composable security: a new paradigm for cryptographic protocols