D Micciancio, M Walter - … in Cryptology–EUROCRYPT 2016: 35th Annual …, 2016 - Springer
Lattice reduction algorithms are notoriously hard to predict, both in terms of running time and
output quality, which poses a major problem for cryptanalysis. While easy to analyze …