Efficient Attribute-Based Encryption from R-LWE