New answers tagged lwe
2
votes
Accepted
As a high level intuition, why is LWE without modular reduction easy to solve?
As a complement to @Chao Sun's suggestion, let me propose the following handwavy explanation.
Let's say you collect samples by groups of $n$ each, so that you have a sequence of pairs $(A_i,b_i)$ with ...
- 2,095
Top 50 recent answers are included