Practical key recovery for discrete-logarithm based authentication schemes from random nonce bits
scientific article; zbMATH DE number 6838231