Wagner's Algorithm Provably Runs in Subexponential Time for rmSIS∞. - Léo Ducas; Lynn Engelberts; Johanna Loyer (CRYPTO (1), 2025)

Wagner's Algorithm Provably Runs in Subexponential Time for SIS∞. - Léo Ducas; Lynn Engelberts; Johanna Loyer (IACR Cryptol. ePrint Arch., 2025)

Quantum sieving for code-based cryptanalysis and its limitations for ISD. - Lynn Engelberts; Simona Etinski; Johanna Loyer (Des. Codes Cryptogr., 2025)