C. Dobraunig, L. Grassi, L. Helminger, C. Rechberger, M. Schofnegger, and R. Walch, “Pasta: A Case for Hybrid Homomorphic Encryption”, TCHES, vol. 2023, no. 3, pp. 30–73, Jun. 2023, doi: 10.46586/tches.v2023.i3.30-73.