Wagner's Algorithm Provably Runs in Subexponential Time for rmSIS

Lo Ducas, Lynn Engelberts, Johanna Loyer

Browse the full CRYPTO paper archive.