Skip to main content

New answers tagged

0 votes

How to choose the distribution of error and secret vectors in LWE-based KEMs

I'm not sure what you mean by "structural security". Generally, IND-CPA security is all you'd want (or more precisely, pseudorandomness of the (M/R)LWE distribution). In general, this is a ...
Mark Schultz-Wu's user avatar
  • 13.5k
0 votes

Are cryptographic hash functions quantum secure?

security of some symmetric structures can be prove against quantum adversary as well. For example you can see 'Post-quantum security of the CBC, CFB, OFB, CTR, and XTS modes of operation'. SHA3 is ...
ali khosravi's user avatar
1 vote

How to determine approximate factor (i.e. modulus-to-(bound of)noise ratio) of LWE in advaned primitives is sub-exponential or polynomial?

Evaluating that paper is somewhat difficult, as they are somewhat slopping in their writing. I started reading on page 43, and it is possible the following is resolved if you read their paper closely ...
Mark Schultz-Wu's user avatar
  • 13.5k

Top 50 recent answers are included