On the security of the Merkle- Hellman cryptographic scheme (Corresp.)
Adi Shamir, Richard E. Zippel · IEEE Transactions on Information Theory · 1980
A simplified version of the Merkle-Hellman public key cryptographic system is breakable. While their full-fledged system seems to be resistant to the cryptanalytic attack we propose, the result suggests some ways in which the security of their system can be enhanced.