User Mark

2 votes

Is it possible to deduce the input of a hash by running in reverse?

answered 2 days ago

1 vote

Accepted

Consecutive ones in a PRG

answered Oct 26 at 22:21

2 votes

Accepted

About multiply by constant of LWE

answered Oct 19 at 19:58

3 votes

Accepted

Is there any cheaper way for multiplying a plaintext scalar to a vector?

answered Sep 25 at 19:36

2 votes

Computing the intersection of two lattices

answered Sep 22 at 23:40

1 vote

Secret Sharing Floating point numbers in IEEE-754 Format

answered Sep 15 at 22:27

2 votes

Can someone explain in simple terms how coding part and the algorithm itself, of dilithium pqc signature algorithm resemble here?

answered Sep 3 at 17:31

2 votes

Question on Number Theoretic Transformation (NTT) Condition

answered Aug 25 at 20:57

6 votes

Could tropical cryptography become another candidate for post-quantum cryptography?

answered Aug 23 at 21:27

2 votes

Good references to breakable limits: $2^{60}$

answered Aug 17 at 15:41

1 vote

Orthogonal Lock

answered Aug 16 at 17:05

0 votes

Homomorphic Encryption CKKS scheme, Encoding: canonical embeding discretization

answered Aug 2 at 16:50

2 votes

LWE assumption in cryptographic applications

answered Jul 31 at 18:59

1 vote

Accepted

learning with errors

answered Jul 28 at 17:07

3 votes

Why use small error vectors in LWE instead of big ones?

answered Jul 27 at 17:12

2 votes

LWE and distributions

answered Jul 19 at 19:21

4 votes

Accepted

The relationship between polynomial degree and HE performance

answered Jul 13 at 16:23

0 votes

Matrix multiplication circuit

answered Jul 12 at 19:15

1 vote

Threshold encryption

answered Jul 12 at 19:03

0 votes

Regev's learning with error

answered Jul 12 at 18:47

0 votes

Sigma parameter from Trapdoors for Lattices

answered Jun 27 at 2:16

1 vote

Accepted

Finite index quotient group, lattice crypto

answered Jun 25 at 20:49

1 vote

Accepted

Hidden Subgroup Problem: Embedding $G$ in a complex hilbert space $H$

answered Jun 12 at 21:13

1 vote

Accepted

How does big Galois groups yield better security in NTRU Prime?

answered Jun 12 at 20:41

2 votes

Accepted

Is $0/1$ error ok in LWE?

answered Jun 12 at 20:29

3 votes

Accepted

What if LWE is not as secure as we think?

answered Jun 9 at 18:16

1 vote

Accepted

On the spectral norm in lattice-based cryptography

answered Jun 5 at 23:12

5 votes

Accepted

confusion about the meaning of reduction

answered May 17 at 20:00

3 votes

Average- and worst-case complexity

answered May 17 at 19:50

1 vote

Gaussian distribution propoprties

answered May 15 at 20:35

Stack Exchange Network

327 Answers

Is it possible to deduce the input of a hash by running in reverse?

Consecutive ones in a PRG

About multiply by constant of LWE

Is there any cheaper way for multiplying a plaintext scalar to a vector?

Computing the intersection of two lattices

Secret Sharing Floating point numbers in IEEE-754 Format

Can someone explain in simple terms how coding part and the algorithm itself, of dilithium pqc signature algorithm resemble here?

Question on Number Theoretic Transformation (NTT) Condition

Could tropical cryptography become another candidate for post-quantum cryptography?

Good references to breakable limits: $2^{60}$

Orthogonal Lock

Homomorphic Encryption CKKS scheme, Encoding: canonical embeding discretization

LWE assumption in cryptographic applications

learning with errors

Why use small error vectors in LWE instead of big ones?

LWE and distributions

The relationship between polynomial degree and HE performance

Matrix multiplication circuit

Threshold encryption

Regev's learning with error

Sigma parameter from Trapdoors for Lattices

Finite index quotient group, lattice crypto

Hidden Subgroup Problem: Embedding $G$ in a complex hilbert space $H$

How does big Galois groups yield better security in NTRU Prime?

Is $0/1$ error ok in LWE?

What if LWE is not as secure as we think?

On the spectral norm in lattice-based cryptography

confusion about the meaning of reduction

Average- and worst-case complexity

Gaussian distribution propoprties