An Adaptive-Ciphertext Attack against "I ⊕ C" Block Cipher Modes With an Oracle. - Jon Passki; Tom Ritter (IACR Cryptol. ePrint Arch., 2012)