Original paper by Alex Biryukov, Daniel Feher, Dmitry Khovratovich (University of Luxembourg)