The full cost of cryptanalytic attacks (2004)

by M J Wiener
Venue:J. Cryptology