DE MEYER, L. Recovering the CTR_DRBG state in 256 traces. IACR Transactions on Cryptographic Hardware and Embedded Systems, v. 2020, n. 1, p. 37-65, 19 Nov. 2019.