Revisiting the hardness of binary error LWE
scientific article; zbMATH DE number 7356288