2023. Belief Propagation Meets Lattice Reduction: Security Estimates for Error-Tolerant Key Recovery from Decryption Errors. IACR Transactions on Cryptographic Hardware and Embedded Systems. 2023, 4 (Aug. 2023), 287–317. DOI:https://doi.org/10.46586/tches.v2023.i4.287-317.