Louis Granboulan Antoine Joux Jacques Stern Inverting HFE Is Quasipolynomial. 345-356 2006 conf/crypto/2006 CRYPTO http://dx.doi.org/10.1007/11818175_20 db/conf/crypto/crypto2006.html#GranboulanJS06