De Meyer, Lauren. 2019. “Recovering the CTR_DRBG State in 256 Traces”. IACR Transactions on Cryptographic Hardware and Embedded Systems 2020 (1), 37-65. https://doi.org/10.13154/tches.v2020.i1.37-65.