http://groups.csail.mit.edu/mac/classes/6.805/student-papers/fall95-papers/yogman-crypto.html