3
votes
Accepted
Questions on LWE with a repeated secret matrix S
The distinguishing problem with a single sample $x$ is impossible.
This is because for any non-zero $x$ and any $u$ there exists an $S$ such that $Sx=u$.
ETA 20220405:
For the broader question of ...
- 11.8k
Only top scored, non community-wiki answers of a minimum length are eligible