Optimal broadcast encryption from LWE and pairings in the standard model
scientific article; zbMATH DE number 7436993