low - cost and area - efficient fpga implementations of lattice - based cryptography .
Better key sizes (and attacks) for LWE-based encryption