Return to Article Details Recovering the CTR_DRBG state in 256 traces Download Download PDF