Implementing and Proving the TLS 1.3 Record Layer
Proving the TLS Handshake Secure (As It Is)