Too many hints -- when LLL breaks LWE

DOI10.1007/978-981-99-8730-6_4MaRDI QIDQ6604869zbMATH OpenFDO

Authors Alexander May, Julian Nowakowski

Publication date 13 September 2024

zbMATH Keywords

partial key exposureLWE with hintsPQC standards

Mathematics Subject Classification ID

Cryptography (94A60)

Recommendations

• LWE with side information: attacks and concrete security estimation
• Revisiting security estimation for LWE with hints from a geometric perspective
• On dual lattice attacks against small-secret LWE and parameter choices in HElib and SEAL
• Faster Dual Lattice Attacks for Solving LWE with Applications to CRYSTALS
• Better key sizes (and attacks) for LWE-based encryption

Cites work

• scientific article; zbMATH DE number 4213909 (Why is no real title available?)
• scientific article; zbMATH DE number 1186948 (Why is no real title available?)
• scientific article; zbMATH DE number 1256724 (Why is no real title available?)
• scientific article; zbMATH DE number 1559544 (Why is no real title available?)
• scientific article; zbMATH DE number 1859030 (Why is no real title available?)
• (Leveled) fully homomorphic encryption without bootstrapping
• A hierarchy of polynomial time lattice basis reduction algorithms
• An Improved Low-Density Subset Sum Algorithm
• Efficient public key encryption based on ideal lattices (extended abstract)
• Factoring polynomials with rational coefficients
• Hardness of computing the most significant bits of secret keys in Diffie-Hellman and related schemes
• LWE with side information: attacks and concrete security estimation
• Lattice attacks on NTRU and LWE: a history of refinements
• Lattice reduction: a toolbox for the cryptoanalyst
• Natural density of rectangular unimodular integer matrices
• On ideal lattices and learning with errors over rings
• On lattices, learning with errors, random linear codes, and cryptography
• Partial key exposure attacks on BIKE, Rainbow and NTRU
• Pseudorandomness of ring-LWE for any ring and modulus
• Small solutions to polynomial equations, and low exponent RSA vulnerabilities
• Worst-case to average-case reductions for module lattices

Cited in

(1)

• Revisiting security estimation for LWE with hints from a geometric perspective

This page was built for publication: Too many hints -- when LLL breaks LWE

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q6604869)