One of the drawbacks of the previous CPA-secure encryption scheme is that its ciphertexts are $$\lambda$$ bits longer than its plaintexts. In the common case that we are using a block cipher with blocklength blen $$=\lambda$$, this means that ciphertexts are twice as long as plaintexts. Is there any way to encrypt data (especially lots of it) without requiring such a significant overhead?