On the soundness of authenticate-then-encrypt
Ueli M. Maurer, Björn Tackmann · 2010
A communication channel from an honest sender A to an honest receiver B can be described as a system with three interfaces labeled A, B, and E (the adversary), respectively, where the security properties of the channel are characterized by the capabilities provided at the E-interface.