Danilo Gligoroski Suzana Andova Svein J. Knapskog On the Importance of the Key Separation Principle for Different Modes of Operation. 404-418 2008 ISPEC http://dx.doi.org/10.1007/978-3-540-79104-1_29 conf/ispec/2008 db/conf/ispec/ispec2008.html#GligoroskiAK08