Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
Lattice-cryptography is the study and use of lattice problems applied to cryptography.
0
votes
0
answers
110
views
Software package to create a basis of the q-ary lattice $\Lambda_q(A)$
Consider a matrix $A \in \mathbb{Z}_q^{m \times n}$ and its respective lattice
$$\Lambda_q(A) = \{x \in \mathbb{Z}^m : \exists z \in \mathbb{Z}_q^n, x = Az \mod q\}$$
The basis for such a lattice is d …
0
votes
0
answers
66
views
Lattice based cryptography: How do negative coefficients in $Z_q[x]/(X^n+1)$ work? [duplicate]
I saw that in lattice-based cryptography schemes, for example Dilithium, coefficients in $Z_q$ are allowed to be negative. For example, in Dilithium the secret key is $s_1 \in R_q^{k \times l}$, where …
2
votes
1
answer
277
views
How can CPA-secure LWE cryptosystem be broken by an active attacker?
The LWE-cryptosystem is only CPA-secure as for example stated in A Decade of Lattice-Based Cryptography. Consider the following system described there (Section 5.2)
The secret key is a uniform LWE se …
3
votes
0
answers
72
views
Paper "How to Meet Ternary LWE Keys": Why can Odlyzko's hash function not be used to constru...
In Alexander May's Paper "How to Meet Ternary LWE Keys", Alexander May writes the following about combining representation techniques with Odlyzko's locality sensitive hash function (Page 12):
Intui …
0
votes
1
answer
338
views
NTL: Solve the closest vector problem for non-square matrix using LLL/Nearest Plane Algorithm
Assume I have a matrix $A \in \mathbb{Z}^{m \times n}$, $m > n$, which forms a basis of a lattice. Given a vector target vector $t = Ax + e$, $t,e \in \mathbb{Z}^m$,$x \in \mathbb{Z}^n$, I want to fin …
1
vote
0
answers
135
views
Performance of elliptic curve Diffie-Hellman vs NIST-PQC finalist KEMS
I am looking for performance measurements in cycle counts for an implementation of the elliptic curve Diffie-Hellman for curve, ed25519. Ideally, the cycle counts should be for the M4, so that they ar …