Authenticated Encryption: Relations among Notions and Analysis of the Generic Composition Paradigm