Choose a prime number q of λ bits. (4) Bob computes m = D(SK, c) to recover the original message. Sample a random index i∈Iλ along with its corresponding trapdoor ti. Choose a prime number q of λ bits. It is easy to see that LSB(x1)=0 if and only if 0≤x