Classical hardness of learning with errors
Worst-Case to Average-Case Reductions Based on Gaussian Measures