Sometimes-Decryptable Homomorphic Encryption from Sub-exponential DDH.

Abhishek Jain, Zhengzhong Jin

Browse the full CRYPTO paper archive.