Authenticated encryption in SSH: provably fixing the SSH binary packet protocol
Analysis of key-exchange protocols and their use for building secure channels