Fabrice Benhamouda, Tancrède Lepoint, Julian Loss, Michele Orrù, Mariana Raykova: On the (in)Security of ROS. J. Cryptol. 35(4): 25 (2022)