Provable Subexponential Algorithms for NIST Third-Round Lattice Familieseprint.iacr.org·2 pts·Tyyps·0