lizard : cut off the tail ! a practical post - quantum public - key encryption from lwe and lwr .
Public-Key Cryptosystems Based on Composite Degree Residuosity Classes