Daniel Bleichenbacher Chosen Ciphertext Attacks Against Protocols Based on the RSA Encryption Standard PKCS #1. 1-12 http://dx.doi.org/10.1007/BFb0055716 1998 conf/crypto/1998 CRYPTO db/conf/crypto/crypto98.html#Bleichenbacher98