Orr Dunkelman Nathan Keller Cryptanalysis of CTC2. 226-239 2009 CT-RSA http://dx.doi.org/10.1007/978-3-642-00862-7_15 conf/ctrsa/2009 db/conf/ctrsa/ctrsa2009.html#DunkelmanK09