“Recovering the CTR_DRBG state in 256 traces”, TCHES, vol. 2020, no. 1, pp. 37–65, Nov. 2019, doi: 10.13154/tches.v2020.i1.37-65.