Proof of a Shuffle for Lattice-Based Cryptography | Publicación