Public-Key Cryptographic Primitives Provably as Secure as Subset Sum.

Vadim Lyubashevsky, Adriana Palacio, Gil Segev

Browse the full TCC paper archive.