Recovering the CTR_DRBG state in 256 traces. TCHES. 2019;2020(1):37-65. doi:10.13154/tches.v2020.i1.37-65