Candidate multilinear maps from ideal lattices
Trapdoors for hard lattices and new cryptographic constructions