Improving key mismatch attack on NewHope with fewer queries
scientific article; zbMATH DE number 7356292