T. Jager, S. Schinzel, and J. Somorovsky, “Bleichenbacher’s Attack Strikes again: Breaking PKCS .5 in XML Encryption,” in Computer Security – ESORICS 2012, Berlin, Heidelberg, 2012.