Multi-key FHE without ciphertext-expansion in two-server model