X-Git-Url: https://git.distorted.org.uk/~mdw/doc/modes/blobdiff_plain/16ad8466d3b3ad677cfc9371201a9eee81f79148..8905f19db10858a8392435273c4c2dc64d0a2c19:/modes.tex

diff --git a/modes.tex b/modes.tex
index 2f986ea..3f2ffec 100644
--- a/modes.tex
+++ b/modes.tex
@@ -1753,6 +1753,10 @@ definition characterizes these kinds of `bad' IVs.
   For all $\ell > 0$ and $t < \ell$, the string $0^{\ell-1} 1$ does not
   $t$-slide.
 \end{remark}
+
+%% Thinking about the probability that a random l-bit string t-slides...
+%%
+%%
   
 \subsection{Security of CFB mode}
 
@@ -2301,8 +2305,10 @@ wait, or I'll have to drop this bit.
 
 \section{Acknowledgements}
 
-Thanks to Clive Jones for his suggestions on notation, and his help in
-structuring the proofs.
+Thanks are due to David Wagner for pointing me at \cite{Alkassar:2001:OSS}
+and warning me of the dangers of sliding IVs in CFB mode.  Thanks also to
+Clive Jones for his suggestions on notation, and his help in structuring the
+proofs.
 
 %%%----- That's all, folks --------------------------------------------------
 
