“Subverting Telegram’s End-to-End Encryption” (2023) IACR Transactions on Symmetric Cryptology, 2023(1), pp. 5–40. doi:10.46586/tosc.v2023.i1.5-40.