1
$\begingroup$

Why most of Lattice based scheme use Montgomery Multiplication algorithm?

$\endgroup$
3
  • 2
    $\begingroup$ Just my 2 cents: Any cryptosystem that uses groups and some kind of multiplication operation probably uses Montgomery. I'd consider Montgomery an implementation detail though. $\endgroup$
    – Maarten Bodewes
    Jul 6, 2022 at 11:08
  • $\begingroup$ I wonder if there is any other reason than efficiency $\endgroup$
    – Don Freecs
    Jul 6, 2022 at 13:08
  • 1
    $\begingroup$ Known ways of protection against side channel attacks maybe. $\endgroup$
    – Maarten Bodewes
    Jul 6, 2022 at 14:10

0