Belief Propagation Meets Lattice Reduction: Security Estimates for Error-Tolerant Key Recovery from Decryption Errors. TCHES 2023, 2023 (4), 287-317. https://doi.org/10.46586/tches.v2023.i4.287-317.