Implementing RLWE-based Schemes Using an RSA Co-Processor
Classical hardness of learning with errors