Elad Barkan Eli Biham Adi Shamir Rigorous Bounds on Cryptanalytic Time/Memory Tradeoffs. 1-21 2006 conf/crypto/2006 CRYPTO http://dx.doi.org/10.1007/11818175_1 db/conf/crypto/crypto2006.html#BarkanBS06