Hardness of distinguishing the MSB or LSB of secret keys in Diffie-Hellman schemes (2006)

by P-A Fouque, D Pointcheval, J Stern, S Zimmer
Venue:ICALP 2006, Part II, volume 4052 of LNCS