Belief Propagation Meets Lattice Reduction: Security Estimates for Error-Tolerant Key Recovery from Decryption Errors. TCHES. 2023;2023(4):287-317. doi:10.46586/tches.v2023.i4.287-317