Yet another way to squeeze more SIMD into BKS HSS: tensor encodings, authenticated automorphisms, and a near-maximal pack.

Paper gives batched OT with O(λ√ℓ) communication, via Damgård-Jurik + trusted setup or power-DDH without one.