Key-recovery advantage