On the Practical Exploitability of Dual EC in TLS Implementations. - Stephen Checkoway; Ruben Niederhagen; Adam Everspaugh; Matthew Green 001; Tanja Lange 001; Thomas Ristenpart; Daniel J. Bernstein; Jake Maskiewicz; Hovav Shacham; Matthew Fredrikson (USENIX Security Symposium, 2014)