Internet Bug Bounty: Divide-and-conquer session key recovery in SSLv2 (CVE-2016-0703)

This is a retroactive submission of CVE-2016-0703, a.k.a. the "Extra Clear" bug, which can lead to the Special DROWN variant of the DROWN attack. After some discussion with the other DROWN authors, I'm submitting on behalf of myself David Adrian and J. Alex Halderman the vulnerability...