Lattice attacks on pairing-based signatures
scientific article; zbMATH DE number 6862285