lizard : cut off the tail ! a practical post - quantum public - key encryption from lwe and lwr .
Trapdoors for hard lattices and new cryptographic constructions