MPC in the Head Using the Subfield Bilinear Collision Problem.

Janik Huth, Antoine Joux

Browse the full CRYPTO paper archive.