On the Impossibility of Basing Identity Based Encryption on Trapdoor Permutations
Trapdoors for hard lattices and new cryptographic constructions