expressed as polynomial size arithmetic circuits. We prove security against arbitrary
collusions of users based on the learning with errors problem on integer lattices. The system
has two additional useful properties: first, it naturally handles arithmetic circuits with arbitrary
fan-in (and fan-out) gates. Second, secret keys are much shorter than in previous schemes:
secret key size is proportional to the depth of the circuit where as in previous constructions …