We know RSA leaks one bit about the factors and improper yet secure implementations of Discrete Logarithm leak one bit about the discrete logarithm. Does LWE leak any information?

  • $\begingroup$ Could you cite references to something outlining those leaked bits? Not that I'm doubting you, but references would be nice for those of us that don't already know that off-hand. $\endgroup$ – Ella Rose Feb 23 '18 at 3:01
  • 1
    $\begingroup$ LSB of odd factors is 1 and LSB of discrete log is easy in certain situations and these are standard. $\endgroup$ – 1.. Feb 23 '18 at 3:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.