codecrypt/doc/papers/gg_double_circulant.pdf