Security induced by CBC padding { applications to SSL (2002)

by S Vaudenay
Venue:Advances in Cryptology { EUROCRYPT 2002