De Meyer, L., 2019. Recovering the CTR_DRBG state in 256 traces Volume 2020.. https://doi.org/10.13154/tches.v2020.i1.37-65