Ross J. Anderson Michael Roe The GCHQ Protocol and Its Problems. 134-148 http://link.springer.de/link/service/series/0558/bibs/1233/12330134.htm 1997 EUROCRYPT db/conf/eurocrypt/eurocrypt97.html#AndersonR97