“Belief Propagation Meets Lattice Reduction: Security Estimates for Error-Tolerant Key Recovery from Decryption Errors” (2023) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2023(4), pp. 287–317. doi:10.46586/tches.v2023.i4.287-317.