However, prior approaches for programming on encrypted data involve restrictive models ... This language, which uses an augmented information-flow type system to prevent control-flow leakage, allows ...