A Formal Security Analysis of the Signal Messaging Protocol [pdf]
eprint.iacr.org