Authenticated encryption in SSH: provably fixing the SSH binary packet protocol (2002)

by M Bellare, T Kohno, C Namprempre
Venue:In ACM Conference on Computer and Communications Security