Passive SSH Key Compromise via Lattices [pdf] (iacr.org)
https://news.ycombinator.com/item?id=38161174