Ran Canetti Hugo Krawczyk Security Analysis of IKE's Signature-Based Key-Exchange Protocol. 143-161 2002 conf/crypto/2002 CRYPTO http://dx.doi.org/10.1007/3-540-45708-9_10 db/conf/crypto/crypto2002.html#CanettiK02