[dandraper]

Note that this paper is about the CLWW scheme of 2015. The Lewi-Wu Scheme of 2016 (Block Order Revealing Encryption) has entirely different security properties. Storage of the right ciphertexts (as they describe in the paper) is semantically secure.

[galeaspablo]

The 2021 paper I posted does focus on 2015 CLWW, but the 2021 paper also buckets Lewi Wu as non ideal. The Lewi Wu paper is reference [17].