Efficient Ring-LWE Encryption on 8-Bit AVR Processors
On ideal lattices and learning with errors over rings