Key-dependent message security under active attacks - BRSIM/UC-soundness of symbolic encryption with key cycles -Michael BackesBirgit Pfitzmannet al.2007CSF 2007