Lattice-based Cryptography
Worst-Case to Average-Case Reductions Based on Gaussian Measures