Implementing and Proving the TLS 1.3 Record Layer
Automated Analysis and Verification of TLS 1.3: 0-RTT, Resumption and Delayed Authentication