Aviad Kipnis Adi Shamir Cryptanalysis of the HFE Public Key Cryptosystem by Relinearization. 19-30 http://dx.doi.org/10.1007/3-540-48405-1_2 1999 conf/crypto/1999 CRYPTO db/conf/crypto/crypto99.html#KipnisS99