On IND-qCCA Security in the ROM and Its Applications - CPA Security Is Sufficient for TLS 1.3