Security Flaws Induced by CBC Padding - Application to (0)

by S Vaudenay
Venue:SSL, IPsec, WTLS...", Advances in Cryptology, EUROCRYPT’02, LNCS 2332