Efficient Cryptographic Schemes Provably as Secure as Subset Sum
R. Impagliazzo and M. Naor
Volume 9, Number 4, 1996, Pages 199-216