Can homomorphic encryption be practical?
Faster Fully Homomorphic Encryption