Go to
slide 18
Other Attacks
Reconstruct codebook - chosen-plaintext 2^64 time and memory
New attacks? Variants on existing attacks?