Mihir Bellare, Tadayoshi Kohno, Chanathip Namprempre. Breaking and Provably Repairing the SSH Authenticated Encryption Scheme: A Case Study of the Encode-then-Encrypt-and-MAC Paradigm. IACR Cryptology ePrint Archive, 2002:78, 2002. [doi]
Abstract is missing.