Constants count: practical improvements to oblivious RAM
Circuit ORAM: On Tightness of the Goldreich-Ostrovsky Lower Bound