Bonsai trees, or how to delegate a lattice basisDavid CashDennis Hofheinzet al.2011Journal of Cryptology