Tightness of the Security Bound of CENC.

Tetsu Iwata Tightness of the Security Bound of CENC. 2007 Symmetric Cryptography http://drops.dagstuhl.de/opus/volltexte/2007/1016 conf/dagstuhl/2007P7021 db/conf/dagstuhl/P7021.html#Iwata07