Multitarget decryption failure attacks and their application to Saber and Kyber. - Jan-Pieter D'Anvers; Senne Batsleer (IACR Cryptol. ePrint Arch., 2021)