codecrypt/doc/papers/berlekamp_trace.pdf