paper on cryptanalysis of pseudo-random number generators hiding a linear structure accepted in CT-RSA 2022
