Caveat Implementor! Key Recovery Attacks on MEGA.

Martin R. Albrecht, Miro Haller, Lenka Marekov, Kenneth G. Paterson

Browse the full EuroCrypt paper archive.