Jacques Patarin Louis Goubin Nicolas Courtois <i>C</i><sup>*</sup><sub>-+</sub> and HM: Variations Around Two Schemes of T. Matsumoto and H. Imai. 35-49 http://dx.doi.org/10.1007/3-540-49649-1_4 1998 conf/asiacrypt/1998 ASIACRYPT db/conf/asiacrypt/asiacrypt98.html#PatarinGC98