Circuit ORAM: On Tightness of the Goldreich-Ostrovsky Lower Bound
Verifiable Oblivious Storage