Iago attacks: why the system call API is a bad untrusted RPC interface
When private keys are public: results from the 2008 Debian OpenSSL vulnerability