Better Zero-Knowledge Proofs for Lattice Encryption and Their Application to Group Signatures
Trapdoors for hard lattices and new cryptographic constructions