Better explanation: http://blog.cryptographyengineering.com/2016/03/attack-of-we...