A Practical Oblivious Map Data Structure with Secure Deletion and History Independence