codecrypt/doc/papers/linearized_polys.pdf