All Questions
Tagged with lattice-crypto randomness
6 questions
0
votes
0
answers
55
views
Does randomization make a big difference in the output of the BKZ algorithm?
We all know that block Korkine-Zolotarev (BKZ) algorithm is essentially a deterministic lattice reduction algorithm. However, in the actual implementation, the BKZ algorithm contains some ...
- 311
1
vote
0
answers
244
views
Sentinel ("trick") values for lattice attack on DSA with biased k (MSB)
I'm studying lattice attack using this sage script. There are 2 options in script: LSB and MSB. The most interesting option for me is MSB. It recovers private key with less then 100 signatures ...
- 11
3
votes
2
answers
541
views
Distribution of the Difference of Uniformly Random Elements
In the search to decision reduction of 'On Ideal Lattices and Learning with Errors over Rings', the authors implicitly use the fact that the difference of distinct, uniformly random elements of a (...
- 381
9
votes
1
answer
2k
views
Discrete Gaussian Sampling role in Lattice-Based Crypto?
I'm reading up on how post-quantum cryptography works, and stumbled upon the notion of discrete Gaussian sampling. However, I can't understand where it fits in the greater picture - currently it feels ...
- 357
3
votes
1
answer
98
views
Why is a bit biased when generated from random $v \in Z_q$ for odd q?
I am not understanding the following from "Lattice Cryptography for the Internet" by C. Peikert (pages 10, 11):
When $q$ is odd, while it is possible to use the above methods to
agree on a bit ...
- 322
6
votes
2
answers
781
views
Randomness re-use in LWE encryption scheme
Let me describe the scheme first, it is the scheme proposed by O. Regev when he introduced the LWE assumption.
$sk = \textbf{s} \in \mathbf{Z}_q^n$
$pk = \textbf{A}\textbf{s}+\textbf{e}$ where $\...
- 996