Key recovery from Gram-Schmidt norm leakage in hash-and-sign signatures over NTRU lattices
GPV lattice-trapdoor paradigm for signatures
scientific article; zbMATH DE number 7436940
scientific article