https://123dok.net/document/y8gx5k60-verifiable-practical-lattice-based-decryption-mix-external-auditing.html