A unilateral-to-mutual authentication compiler for key exchange (with applications to client authentication in TLS 1.3)Hugo Krawczy2016CCS 2016
