Needs a 64-bit Intel/AMD machine with AVX2 instructions (Haswell or
newer) and 1GB free. Tested under Debian with the following packages
installed: build-essential xsltproc libssl-dev

To compile everything (including the NTRU-HRSS code and related
subroutines from SUPERCOP) and run the attack:

    ./doit

Output ends with 10 lines saying "successfully broke plaintext 0"
through "successfully broke plaintext 9".