LLL-Modular-Subset-Sum An LLL implementation using the CJLOSS optimization to attack the Merkle-Hellman cryptosystem Requirements Sagemath Python PyCryptodome How to run To run an attack, modify the LLL.sage main part to fit the appropriate ciphertext, then run: sage LLL.sage