Classical hardness of learning with errors
Trapdoors for hard lattices and new cryptographic constructions