3 ms·

Also see https://www.iacr.org/archive/fse2010/61470001/61470001.pdf https://www.iacr.org/archive/fse2010/61470001/61470001.pdf