[sspencer]

Cryptography for which the attacker has no key is a much greater impediment to remote PIP injection than it is to a local eavesdropper. This is because the attacker needs to know both the cryptographic key and the counter or nonce. In the case of a known key and nonce, an attacker could conceivably work backward to product a block which, once encrypted, contains a PIP. The exact procedure for doing so depends upon the presence of numerous cryptographic mistakes by the vector protocol and is beyond the scope of this paper

This is amazing. I'd love to see someone pull this off.