Mihir Bellare Tadayoshi Kohno Victor Shoup Stateful public-key cryptosystems: how to encrypt with one 160-bit exponentiation. 380-389 2006 conf/ccs/2006usa ACM Conference on Computer and Communications Security http://doi.acm.org/10.1145/1180405.1180452 db/conf/ccs/ccs2006usa.html#BellareKS06