python-tuf/docs/papers/survivable-key-compromise-ccs2010.pdf