Efficient Ring-LWE Encryption on 8-Bit AVR Processors
low - cost and area - efficient fpga implementations of lattice - based cryptography .