On the concrete hardness of Learning with Errors
Classical hardness of learning with errors