codecrypt/doc/papers/kobara-imai.pdf