Cramer-Shoup like chosen ciphertext security from LPN
scientific article; zbMATH DE number 6990372