Time-release Protocol from Bitcoin and Witness Encryption for SAT
Candidate multilinear maps from ideal lattices