How to delegate a lattice basis. Cryptology ePrint Archive, Report 2009/351 (2009)

by D Cash, D Hofheinz, E Kiltz