Discrete Gaussian Sampling Reduces to CVP and SVP
Factoring Polynomials with Rational Coefficients