https://123dok.net/document/rz303oez-side-channel-indistinguishability.html