Orthus: Practical Sublinear Batch-Verification of Lattice Relations from Standard AssumptionsMadalina BolboceanuJonathan Bootleet al.2026CRYPTO 2026Conference paper