Private IP Address Inference in NAT Networks via Off-Path TCP Control-Plane Attack. - Suraj Sharma; Adityavir Singh; Mahabir Prasad Jhanwar (IACR Cryptol. ePrint Arch., 2026)