Multiparty computation from somewhat homomorphic encryption
Better key sizes (and attacks) for LWE-based encryption