Kenneth G. Paterson, Gaven J. Watson. Plaintext-Dependent Decryption: A Formal Security Treatment of SSH-CTR. In Henri Gilbert, editor, Advances in Cryptology - EUROCRYPT 2010, 29th Annual International Conference on the Theory and Applications of Cryptographic Techniques, French Riviera, May 30 - June 3, 2010. Proceedings. Volume 6110 of Lecture Notes in Computer Science, pages 345-361, Springer, 2010. [doi]
Abstract is missing.