F. Morgner, Transaktionsabsicherung mit der Online-Ausweisfunktion. Kryptographische Bindung von Transaktionsdaten an den Personalausweis. Presentation, 2014.

M. Bellare, T. Kohno, and C. Namprempre, Breaking and provably repairing the SSH authenticated encryption scheme, ACM Transactions on Information and System Security, vol.7, issue.2, pp.206-241, 2004.
DOI : 10.1145/996943.996945

J. Bender, M. Ozgür-dagdelen, D. Fischlin, and . Kügler, The PACE|AA Protocol for Machine Readable Travel Documents, and Its Security, Lecture Notes in Computer Science, vol.7397, pp.344-358, 2012.
DOI : 10.1007/978-3-642-32946-3_25

URL : http://eprint.iacr.org/2013/223.pdf

J. Bender, M. Ozgür-dagdelen, D. Fischlin, and . Kügler, Domain-Specific Pseudonymous Signatures for the German Identity Card, Lecture Notes in Computer Science, vol.7483, pp.104-119, 2012.
DOI : 10.1007/978-3-642-33383-5_7

J. Bender, M. Fischlin, and D. Kügler, Security Analysis of the PACE Key-Agreement Protocol, Lecture Notes in Computer Science, vol.5735, pp.33-48, 2009.
DOI : 10.1007/11889663_14

J. Bender, M. Fischlin, and D. Kügler, The PACE|CA Protocol for Machine Readable Travel Documents, Lecture Notes in Computer Science, vol.8292, pp.17-35, 2013.
DOI : 10.1007/978-3-319-03491-1_2

R. Canetti and H. Krawczyk, Analysis of Key-Exchange Protocols and Their Use for Building Secure Channels, EUROCRYPT 2001, pp.453-474, 2001.
DOI : 10.1007/3-540-44987-6_28

A. Jean-sebastien-coron, T. Gouget, P. Icart, and . Paillier, Supplemental Access Control (PACE v2): Security Analysis of PACE Integrated Mapping In: Cryptography and Security: From Theory to Applications ¨ Ozgür Dagdelen, Marc Fischlin: Security Analysis of the Extended Access Control Protocol for Machine Readable Travel Documents, of the series Lecture Notes in Computer Science, pp.207-232, 2012.

L. Hanzlik and M. Kutylowski, Restricted Identification Secure in the Extended Canetti-Krawczyk Model, J. UCS, vol.21, issue.3, pp.419-439, 2015.

J. Jatz and Y. Lindell, Introduction to Modern Cryptography. Second Edition, Chapman & Hall/CRC Cryptography and Network Security Series, 2015.

M. Kutylowski, L. Krzywiecki, P. Kubiak, and M. Koza, Restricted Identification Scheme and Diffie-Hellman Linking Problem, INTRUST, vol.2011, pp.221-238
DOI : 10.1007/978-3-642-32298-3_15

U. Maurer and B. Tackmann, On the soundness of authenticate-then-encrypt, Proceedings of the 17th ACM conference on Computer and communications security, CCS '10, pp.505-515, 2010.
DOI : 10.1145/1866307.1866364

C. Namprempre, Secure Channels Based on Authenticated Encryption Schemes: A Simple Characterization, ASIACRYPT 2002, pp.515-532, 2002.
DOI : 10.1007/3-540-36178-2_32