Solving the search-LWE problem by lattice reduction over projected bases
scientific article; zbMATH DE number 7388970