Mitigating bandwidth-exhaustion attacks using congestion puzzles