De Meyer, L. 2019. Recovering the CTR_DRBG state in 256 traces. IACR Transactions on Cryptographic Hardware and Embedded Systems. 2020, 1 (Nov. 2019), 37–65. DOI:https://doi.org/10.13154/tches.v2020.i1.37-65.