Worst-Case to Average-Case Reductions for the SIS Problem: Tightness and Security