Post-quantum key exchange: a new hope
On the concrete hardness of Learning with Errors