paper on the (im)practicability of May-Ozerov’s algorithm accepted in IACR Communications in Cryptology
