Analysis of key-exchange protocols and their use for building secure channels,” (2001)

by R Canetti, H Krawczyk
Venue:Eurocrypt 2001, LNCS 2045,