The Nested Subset Differential Attack: A Practical Direct Attack Against LUOV which Forges a Signature within 210 Minutes.

Jintai DingJoshua Deaton VishakhaBo-Yin Yang
Published in: IACR Cryptol. ePrint Arch. (2020)