Dan Goodin from Ars Technica shares more details about the paper:

http://arstechnica.com/security/2013/09/fatal-crypto-flaw-in...