Timeline for Is the variant of LWE-based encryption scheme secure?
Current License: CC BY-SA 4.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 12 at 17:13 | history | edited | Daniel S | CC BY-SA 4.0 |
edited body
|
| Nov 11 at 6:58 | comment | added | X.H. Yue | In addition, according to your construction, if we pick another random matrix $R\gets\mathbb{Z}^{n\times n}_q$ and let $A=R\cdot [A',-A's]$, then the LWE problem holds? | |
| Nov 11 at 6:37 | comment | added | X.H. Yue | Thanks for your response. In your construciton of the matrix $A$, why is it no longer considered a random matrix? Is it becasue that the last colum of $A$ is determined by a random vector $s\gets\{0,1\}^{m-1}$, leading to a decrease in entropy compared to a random matrix $B\in\mathbb{Z}^{n\times m}_q$? | |
| Nov 10 at 9:05 | history | answered | Daniel S | CC BY-SA 4.0 |