Paul Camion Jacques Patarin The Knapsack Hash Function proposed at Crypto'89 can be broken. 39-53 http://link.springer.de/link/service/series/0558/bibs/0547/05470039.htm 1991 EUROCRYPT db/conf/eurocrypt/eurocrypt91.html#CamionP91