On lattices, learning with errors, random linear codes, and cryptography
Worst-Case to Average-Case Reductions Based on Gaussian Measures