Robuta

https://csrc.nist.gov/pubs/conference/2016/02/24/on-the-differential-security-of-the-hfev-signature/final On the Differential Security of the HFEv- Signature Primitive | CSRC on thedifferentialsecuritysignatureprimitive