A Formal Security Analysis of the Signal Messaging Protocol
eprint.iacr.org