Practical lattice-based cryptography: A signature scheme for embedded systems
On ideal lattices and learning with errors over rings