CCA Secure Multi-recipient KEM from LPN

Simpler CCA Secure PKE from LPN Problem Without Double-Trapdoor

IND-CCA Secure Cryptography Based on a Variant of the LPN Problem

Compact Authenticated Key Exchange from Bounded CCA-Secure KEM

Lattice-Based Multi-message Multi-recipient KEM/PKE with Malicious Security

CCA-Secure (Puncturable) KEMs from Encryption with Non-Negligible Decryption Errors

Direct CCA-Secure KEM and Deterministic PKE from Plain LWE