title: Lattice signatures without trapdoors url: https://eprint.iacr.org/2011/537.pdf