"On the complexity of the BKW algorithm on LWE."

Martin R. Albrecht et al. (2015)
a service of Schloss Dagstuhl - Leibniz Center for Informatics