Impossibility of strong KDM security with auxiliary input
scientific article; zbMATH DE number 7633676