Cryptanalysis of rank-2 module-LIP: a single real embedding is all it takes

Publication
Eurocrypt