I am reading lattice based cryptography for my master thesis, I am looking for the earliest version of BKZ algorithm, and its applications in cryptography, to understand it very well, I already know about LLL algorithm. and thanks in advance


1 Answer 1


BKZ was described in Lattice basis reduction: improved practical algorithms and solving subset sum problems by C. P. Schnorr, M. Euchner in 1994. As the title suggests, it was first used for solving the subset sum problem.


Updated the link(s) because Microsoft Academics is closing.



  • $\begingroup$ does there any earlier courses i want to understand it very well thanks in advance, i saw the article... $\endgroup$
    – Don Freecs
    Apr 25, 2021 at 17:32
  • 2
    $\begingroup$ @NdrXbrain I don't think such course exists, because it'll have too low a view count for Youtubers to be willing to make. $\endgroup$
    – DannyNiu
    Apr 26, 2021 at 1:10
  • $\begingroup$ what about lecture thanks Sir Danny $\endgroup$
    – Don Freecs
    Apr 26, 2021 at 1:55
  • 1
    $\begingroup$ @NdrXbrain That'll be beyond my realm of knowledge, but searching for keywords such as linear algebra, lattice, etc. may help, but I'm not sure. $\endgroup$
    – DannyNiu
    Apr 26, 2021 at 3:06
  • 2
    $\begingroup$ The Schnorr-Euchner practical BKZ implementation was preceded by a 1987 theory paper, that paper also references prior work by Kannan $\endgroup$
    – Daniel S
    Apr 26, 2021 at 10:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.