Authenticated Confidential Channel Establishment and the Security of TLS-DHE
T. Jager, F. Kohlar, S. Schäge, J. Schwenk, J. Cryptology (2017) 1276--1324.