lizard : cut off the tail ! a practical post - quantum public - key encryption from lwe and lwr .
Algorithms for quantum computation: discrete logarithms and factoring