In many NTRU material it is said that with our choice of the polynomial $f$, it will almost always have an inverse. Maybe it's a stupid question, but why will it almost always have an inverse element? And why is it recommended to take the polynomial $1 + pF$ in order to have the inverse? And one more question: why is it necessary in this scheme that $g$($x$) does not have an inverse element? What is this restriction used for?

  • $\begingroup$ If there is anything you don't understand in an answer you can ask for clarification in the comments. $\endgroup$
    – Maarten Bodewes
    May 8, 2022 at 16:59


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.