Piret attack. http://crypto.dei.polimi.it/files/lec013presentation.pdf Paper: http://eprint.iacr.org/2010/130