# Questions tagged [gaussian-noise]

The tag has no usage guidance.

15 questions
Filter by
Sorted by
Tagged with
63 views

### Discrete Gaussian distribution on a lattice vs. the periodic Gaussian function on a lattice

Gaussian distribution on lattices generally seems esoteric (at least for me, for now). My question is: Does Gaussian distribution on a lattice mean to add a Gaussian noise on a single point of a ...
• 363
1 vote
60 views

### proof of uniform hypersphere sampling

In this paper, they shortly introduced how to uniformly sample points from the n-sphere. The points of n-sphere consist with normal variables. My question is .. If I samlpe coefficients of ring using ...
• 33
1 vote
53 views

### Gaussian distribution propoprties

Good day, I've a question regarding Gaussian distribution properties over lattices : Let $\mathcal{L}$ := $\mathcal{L}(\,b_{1}$,..., $b_{m})$ be a lattice over $\mathbb{R}^{n}$, and $W$ = span($b_{1}$...
• 11
1 vote
32 views

### Introducing differential privacy in two different ways

I would like to investigate if it is possible to introduce Differential Privacy (DP) to a model via both adding Laplacian noise to the training data and then training with DP-SGD updates. Is it a ...
• 11
1 vote
128 views

### Why predicting an error in Crystal Kyber is considered to be hard?

Hi I have started studying on crystal kyber recently. Gained some knowledge regarding its algorithm and how it works. My doubt is why it is tough for attacker to extract secret vector from pk itself ...
• 21
170 views

### The sum of independent discrete Gaussians is a discrete Gaussian

I am currently learning about lattice-based cryptography and, reading from A Decade of Lattice Cryptography by Peikert, specifically section 2.3, it emerges that [...] if the parameter s is greater or ...
• 23
350 views

### How to choose the large noise when using noise flooding technique in FHE?

In LWE based multi party FHE schemes, the parties should choose a much larger noise when perform joint decryption. In this paper, the author just said that using noise flooding technique to avoid the ...
• 499
1 vote
80 views

### Errors for $\mathsf{LWE}$

Why do we take Gaussian-like errors in $\mathsf{LWE}$? Why for example we don't take uniform errors?
• 425
95 views

### A smaller modulus-to-noise ratio means more security in LWE

Let $\text{Adv}^{\text{DLWE}}_{n,m,q,\sigma}$ be the advantage of an attacker to distinguish LWE samples from uniform ones, where $m$ is the number of samples, $q$ the modulus and $\sigma$ the ...
• 425
125 views

### How is it legal to use a rounded Gaussian for LWE?

As far as I understood, in Regev's initial paper, the error distribution was first constructed as follows: Then rounded in the following way: Using this distribution, the reduction in the theorem ...
• 425
1 vote
397 views

• 499
368 views

### How small can the error be in LWE?

For modulus $Q$ and stddev $\sigma$, [GHS12] suggests that, to achieve 128-bit security, just choose the dimension $N$: $$N\geq(Q/\sigma)\cdot 33.1$$ This seems to suggest flexibility to choose ...
• 564
611 views

### Differential privacy guarantees of Gaussian noise, when each coordinate has different sensitivity

Suppose you have a function $f$ that takes a dataset $D$ as input and returns an output in $\mathbb{R}^d$. If this function has $L^2$-sensitivity $\Delta$, then the analytical Gaussian mechanism (...
• 1,008