Solving Underdefined Systems of Multivariate Quadratic Equations. - Nicolas T. Courtois; Louis Goubin; Willi Meier; Jean-Daniel Tacier (Public Key Cryptography, 2002)