Questions tagged [rlwe]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
25 views

In ring LWE, I need to encrypt an integer.it is resulting in 8 integer.size grows enormously.how to control this? [closed]

In ring LWE, I need to encrypt an integer.it is resulting in 8 integer.size grows enormously.how to control this or where I got stuck up? Eg. For encrypting take value=5 Encryption: Convert to bits:...
0
votes
1answer
38 views

How are precision and security related in a Gaussian Noise Sampler for R-LWE?

My understanding is that the sampling precision in Gaussian Noise sampler is related to security. But not sure about why is that? I read that when the samples are floating-point numbers and precision ...
0
votes
0answers
18 views

An example of calculation of BGV encryption

Can anyone give an example RLWE BGV encryption with numbers? like where m=8 (ring dimension), q=ciphertext modulus = 33=3*11 with level=2 What are COEFFICIENT and EVALUATION representation ?
0
votes
0answers
23 views

Can someone explain Relinearisation process in FV scheme for Homomorphic Encryption?

I am trying to understand the relinearisation process in FV scheme for Homomorphic Encryption based on R-LWE. Can one someone explain how the homomorphism keys are generated? I have worked out an ...
1
vote
0answers
46 views

How to solve a simple case of a RLWE problem

I've been reading up on the Ring Learning with Errors problem and the proposed attacks, in relation to homomorphic encryption. Some of the literature has been quite difficult to understand - what I ...
4
votes
1answer
169 views

Complete Attack on RLWE Key Exchange with reused keys, without signal leakage

I am studying a research paper "Complete Attack on RLWE Key Exchange with reused keys, without signal leakage" . On page number 21 to 28, there is toy example explaining the scheme. I am unable to ...
1
vote
0answers
51 views

How does the polynomial module impact the security of ring/lattices-based SIS problem?

Consider the following SIS problem: for a function $f_A(s)$=$As$, where $A$ is a fixed, randomly-chosen matrix in $(R_q)^{r \times n}$=$\left(\mathbb{Z}_q[X]/(X^N+1)\right)^{r \times n}$ and $q$ a ...
2
votes
0answers
96 views

Comparison of NTRU-based schemes and LWE-based schemes

What advantages and disadvantages can be distinguished in NTRU-based and LWE-based schemes relative to each other? In what cases which scheme gives advantage? UPD: I'm interesting in two things: 1)...
0
votes
0answers
66 views

Discrete Gaussian Sampling in Authenticated key exchange from ideal lattices

I am implementing the key exchange scheme proposed by zhang et al. on Sage. In the implementation of the scheme, they have used the two distributions $\chi_{\alpha}, \chi_{\beta}$. How to choose $\...
1
vote
1answer
121 views

$\ell_2$-norm vs canonical embedding norm on ring-lwe

Ring-LWE based encryption (I pick up homomorphic encryption here) requires canonical embedding norm rather than $\ell_2$ norm to quantify the polynomial size (e.g. noise). Why is this better than $\...