[1]
L. De Meyer, “Recovering the CTR_DRBG state in 256 traces”, TCHES, vol. 2020, no. 1, pp. 37-65, Nov. 2019.