# Tag Info

## New answers tagged trapdoor

1

You misunderstand what "decode" does. As mentioned earlier in the paper: The system has message space $\{0,1\}^{nk}$, which we map bijectively to the cosets of $\Lambda/2\Lambda$ for $\Lambda = \Lambda(G^t)$ via some function encode that is efﬁcient to evaluate and invert. Concretely, letting $S \in\mathbb{Z}^{nk×nk}$ be any basis of $\Lambda$, we can map ...

Top 50 recent answers are included