High Performance Post-Quantum Key Exchange on FPGAs
On ideal lattices and learning with errors over rings