How to circumvent the two-ciphertext lower bound for linear gabling schemes -- from ASIACRYPT 2016

@inproceedings{Ryo2017HowTC,
  title={How to circumvent the two-ciphertext lower bound for linear gabling schemes -- from ASIACRYPT 2016},
  author={Kikuchi Ryo},
  year={2017}
}