New answers tagged lwe
2
There are important constraint in the parameters for Ajtai's function, that makes it highly surjective (each image has many preimages). We do not know how to get an encryption scheme from that.
On the contrary, Regev's one is typically used in an injective regime. And we do know how to build and encryption scheme from it.
Regarding Hardness, solving SIS over ...
Top 50 recent answers are included