A Hybrid Lattice-Reduction and Meet-in-the-Middle Attack Against NTRU.

Nick Howgrave-Graham A Hybrid Lattice-Reduction and Meet-in-the-Middle Attack Against NTRU. 150-169 2007 conf/crypto/2007 CRYPTO http://dx.doi.org/10.1007/978-3-540-74143-5_9 db/conf/crypto/crypto2007.html#Howgrave-Graham07