Choosing NTRUEncrypt Parameters in Light of Combined Lattice Reduction and MITM Approaches. - Philip S. Hirschhorn; Jeffrey Hoffstein; Nick Howgrave-Graham; William Whyte (ACNS, 2009)