Philip S. Hirschhorn Jeffrey Hoffstein Nick Howgrave-Graham William Whyte Choosing NTRUEncrypt Parameters in Light of Combined Lattice Reduction and MITM Approaches. 437-455 2009 ACNS http://dx.doi.org/10.1007/978-3-642-01957-9_27 conf/acns/2009 db/conf/acns/acns2009.html#HirschhornHHW09