Plaintext-Dependent Decryption: A Formal Security Treatment of SSH-CTR.

Kenneth G. Paterson, Gaven J. Watson

Browse the full EuroCrypt paper archive.