Public-Key Encryption Schemes with Auxiliary Inputs . Theory of Cryptography Citation