Cryptanalysis of a Symmetric Fully Homomorphic Encryption Scheme
Can homomorphic encryption be practical?