Non-uniform bounds in the random-permutation, ideal-cipher, and generic-group models
scientific article; zbMATH DE number 6935546