Authenticated encryption in SSH: Provably Fixing the SSH Binary Packet Protocol (2002)

by M Bellare, T Kohno, C Namprempre
Venue:In Proceedings of the 9th ACM conference on Computer and communications security