Proofs of correctness for Amazon's TLS library
link.springer.com