Algorithm Substitution Attacks against Receivers. - Armour, Marcel; Poettering, Bertram (IACR Cryptol. ePrint Arch., 2022)