 This is significantly faster than the formula_23 attempts required to bruteforce a 128-bit key.The original attack was published in 2002 by Serge Vaudenay.Concrete instantiations of the attack were later realised against SSL and IPSec.