3 votes
Accepted

Questions on LWE with a repeated secret matrix S

The distinguishing problem with a single sample $x$ is impossible. This is because for any non-zero $x$ and any $u$ there exists an $S$ such that $Sx=u$. ETA 20220405: For the broader question of ...
user avatar
  • 11.8k

Only top scored, non community-wiki answers of a minimum length are eligible