Daewan Han Jin Hong Jae Woo Han Daesung Kwon Key Recovery Attacks on NTRU without Ciphertext Validation Routine. 274-284 http://springerlink.metapress.com/openurl.asp?genre=article&issn=0302-9743&volume=2727&spage=274 2003 conf/acisp/2003 ACISP db/conf/acisp/acisp2003.html#HanHHK03