In this paper (A simple provably secure key exchange by Ding et al.), I am trying to understand the the correctness (which is given on page number 8) of the key exchange technique based on LWE. To
To understand the correctness of the scheme, there is a very important Lemma 2lemma (on page number 6). The Lemmalemma is as follows:
Lemma 2. Let q>8 be an odd integer, the function E defined above is robust extractor with respect to S with error tolerance $\frac{q}{4}$-2
Lemma 2. Let $q>8$ be an odd integer, the function $E$ defined above is a robust extractor with respect to $S$ with error tolerance $\frac{q}{4}-2$.
I have confusion inI'm confused by the proof of Lemma2.Lemma 2:
- How does the author derievederive the condition that Lemma2Lemma 2 is true for q$\gt$8$q\gt 8$?
- How |y+ $\sigma$. $\frac{(q-1)}{2}$ mod q| $\le$does $\frac{q}{4}$+1$|y+ \sigma$ $\frac{(q-1)}{2} \mod q| \le \frac{q}{4}+1$?
- At the end of the proof of Lemma2Lemma 2, the author writes that Our robust extractor enjoys a very nice property which says that for uniformly random x$\in$$ \mathbb{Z} _q$, E(x, $\sigma$) is uniform in {0,1} even conditioned on $\sigma$, where $\sigma$ <-- S(x). This property becomes Lemma3 of this paper.
Our robust extractor enjoys a very nice property which says that for uniformly random $x\in$$ \mathbb{Z} _q$, $E(x, \sigma$) is uniform in $\{0,1\}$ even conditioned on $\sigma$, where $\sigma \leftarrow S(x)$.
This property becomes Lemma 3 of this paper.
Can anyone answer abovethe above three questions and thus the proof of Lemma2Lemma 2 and Lemma3Lemma 3? Thanks!