MitM + Brute force against weak-ass key. German, but not necessary for basic understanding: http://sar.informatik.hu-berlin.de/research/publications/SAR... or skip the theory: http://www.openpcd.org/Downloads.releases.0.html