Length-based cryptanalysis: the case of Thompson’s group (0)

by D Ruinskiy, A Shamir, B Tsaban
Venue:J. Math. Cryptol