De Meyer, L. Recovering the CTR_DRBG State in 256 Traces. TCHES 2019, 2020, 37-65.