New answers tagged

2 votes
Accepted

As a high level intuition, why is LWE without modular reduction easy to solve?

As a complement to @Chao Sun's suggestion, let me propose the following handwavy explanation. Let's say you collect samples by groups of $n$ each, so that you have a sequence of pairs $(A_i,b_i)$ with ...
Mehdi Tibouchi's user avatar

Top 50 recent answers are included