Sparse subset sum problem from Gentry–Halevi's fully homomorphic encryption. (1st January 2017)