Automated Analysis and Verification of TLS 1.3: 0-RTT, Resumption and Delayed Authentication
Proving the TLS Handshake Secure (As It Is)