Per Austrin Gunnar Kreitz Lower Bounds for Subset Cover Based Broadcast Encryption. 343-356 2008 AFRICACRYPT http://dx.doi.org/10.1007/978-3-540-68164-9_23 conf/africacrypt/2008 db/conf/africacrypt/africacrypt2008.html#AustrinK08