Circuit ORAM: On Tightness of the Goldreich-Ostrovsky Lower Bound
Practical oblivious storage