Classical hardness of learning with errors
@inproceedings{Brakerski2013ClassicalHO, title={Classical hardness of learning with errors}, author={Zvika Brakerski and A. Langlois and Chris Peikert and O. Regev and D. Stehl{\'e}}, booktitle={STOC '13}, year={2013} }
We show that the Learning with Errors (LWE) problem is classically at least as hard as standard worst-case lattice problems. Previously this was only known under quantum reductions.
Our techniques capture the tradeoff between the dimension and the modulus of LWE instances, leading to a much better understanding of the landscape of the problem. The proof is inspired by techniques from several recent cryptographic constructions, most notably fully homomorphic encryption schemes.
Supplemental Presentations
Figures and Topics from this paper
Figures
479 Citations
Hardness of LWE on General Entropic Distributions
- Mathematics, Computer Science
- IACR Cryptol. ePrint Arch.
- 2020
- 7
- PDF
On the Hardness of Learning With Errors with Binary Secrets
- Mathematics, Computer Science
- IACR Cryptol. ePrint Arch.
- 2018
- 9
- Highly Influenced
- PDF
An Improved Compression Technique for Signatures Based on Learning with Errors
- Computer Science
- CT-RSA
- 2014
- 141
On the concrete hardness of Learning with Errors
- Computer Science, Mathematics
- J. Math. Cryptol.
- 2015
- 369
- PDF
Towards Classical Hardness of Module-LWE: The Linear Rank Case
- Computer Science, Mathematics
- IACR Cryptol. ePrint Arch.
- 2020
- PDF
References
SHOWING 1-3 OF 3 REFERENCES
Cryptographic Hardness for Learning Intersections of Halfspaces
- Computer Science, Mathematics
- 2006 47th Annual IEEE Symposium on Foundations of Computer Science (FOCS'06)
- 2006
- 133
- Highly Influential
- PDF
Hardness of Computing the Most Significant Bits of Secret Keys in Diffie-Hellman and Related Schemes
- Mathematics, Computer Science
- CRYPTO
- 1996
- 267
- Highly Influential
- PDF
Fully homomorphic encryption using ideal lattices
- Mathematics, Computer Science
- STOC '09
- 2009
- 4,350
- Highly Influential
- PDF