Inner-product functional encryption · DDH (ABDP15) · ristretto255
Encrypt a vector, hand out a key that answers one question about it — the weighted
sum <x, y> — then watch where that one answer runs out of room, and
what happens once you have handed out enough of them.