I am reading lattice based cryptography for my master thesis, I am looking for the earliest version of BKZ algorithm, and its applications in cryptography, to understand it very well, I already know about LLL algorithm. and thanks in advance
BKZ was described in Lattice basis reduction: improved practical algorithms and solving subset sum problems by C. P. Schnorr, M. Euchner in 1994. As the title suggests, it was first used for solving the subset sum problem.
Updated the link(s) because Microsoft Academics is closing.