"Imperfect forward secrecy: how Diffie-Hellman fails in practice."

David Adrian et al. (2019)
a service of Schloss Dagstuhl - Leibniz Center for Informatics