functionalenc/papers/2008_crypto(1).pdf