A formalism due to Bellare and Rogaway, and the topic of my [[Trial lecture - AKE]].