Aviad Kipnis Adi Shamir Cryptanalysis of the Oil & Vinegar Signature Scheme. 257-266 http://dx.doi.org/10.1007/BFb0055733 1998 conf/crypto/1998 CRYPTO db/conf/crypto/crypto98.html#KipnisS98