A preprint of the FSE '13 paper is online at http://eprint.iacr.org/2012/623.