Post-quantum key exchange: a new hope
Better key sizes (and attacks) for LWE-based encryption