Surreptitiously Weakening Cryptographic Systems [pdf]
eprint.iacr.org