Léo Ducas: Shortest Vector from Lattice Sieving: A Few Dimensions for Free. EUROCRYPT (1) 2018: 125-145