Adaptively Secure Fully Homomorphic Signatures Based on Lattices.
Worst-Case to Average-Case Reductions Based on Gaussian Measures