“…Similarly, the key size for our star-specific key-homomorphic PRF family is the same as that of the key-homomorphic PRF family from [35]. Specifically, for security parameter L and 2 L security against known lattice reduction algorithms [11,121,126,128,129,190,231,229,217,216,254,271,272,273,230,257,195,16,46,153,225,224,79], the key size for our star-specific key-homomorphic PRF family is L.…”