http://www.thoughtcrime.org/papers/null-prefix-attacks.pdf
and
http://www.blackhat.com/html/bh-usa-09/bh-usa-09-archives.ht... http://www.defcon.org/html/links/dc-archives/dc-17-archive.h...