From discrete-log to lattices: maybe the real lessons were our broken schemes along the way?

Date: