A Cryptographic Analysis of the TLS 1.3 Handshake Protocol Candidates
Lucky Thirteen: Breaking the TLS and DTLS Record Protocols