Victor Shoup On Formal Models for Secure Key Exchange. 12 1999 1999 IACR Cryptol. ePrint Arch. http://eprint.iacr.org/1999/012 db/journals/iacr/iacr1999.html#Shoup99a