New answers tagged lwe
2
votes
Accepted
As a high level intuition, why is LWE without modular reduction easy to solve?
As a complement to @Chao Sun's suggestion, let me propose the following handwavy explanation.
Let's say you collect samples by groups of $n$ each, so that you have a sequence of pairs $(A_i,b_i)$ with ...
Top 50 recent answers are included
Related Tags
lwe × 202lattice-crypto × 106
ring-lwe × 75
post-quantum-cryptography × 53
homomorphic-encryption × 32
encryption × 13
cryptanalysis × 9
hardness-assumptions × 9
key-exchange × 8
gaussian-noise × 7
public-key × 6
provable-security × 6
trapdoor × 6
sis × 6
kyber × 6
attack × 5
newhope × 5
discrete-logarithm × 4
finite-field × 4
computational-complexity-theory × 4
multiparty-computation × 3
pseudo-random-function × 3
complexity × 3
nist × 3
coding-theory × 3