Post-quantum key exchange: a new hope
Candidate multilinear maps from ideal lattices