ePrint on an extended wedge attack against UOV-style signatures, with explicit key-recovery conditions and a Macaulay-matrix link, becaus...
1 comment
So is this mostly a cleaner route to the same Macaulay matrix / XL machinery, or does it actually change the attack surface?