Mathias Herrmann Gregor Leander A Practical Key Recovery Attack on Basic TCHo. 411-424 2009 Public Key Cryptography http://dx.doi.org/10.1007/978-3-642-00468-1_23 conf/pkc/2009 db/conf/pkc/pkc2009.html#HerrmannL09