Non-commutative Ring Learning with Errors from Cyclic Algebras
Open Access
- 13 July 2022
- journal article
- research article
- Published by Springer Nature in Journal of Cryptology
- Vol. 35 (3) , 1-67
Abstract
The Learning with Errors (LWE) problem is the fundamental backbone of modern lattice-based cryptography, allowing one to establish cryptography on the hardness of well-studied computational problems. However, schemes based on LWE are often impractical, so Ring LWE was introduced as a form of ‘structured’ LWE, trading off a hard to quantify loss of security for an increase in efficiency by working over a well-chosen ring. Another popular variant, Module LWE, generalizes this exchange by implementing a module structure over a ring. In this work, we introduce a novel variant of LWE over cyclic algebras (CLWE) to replicate the addition of the ring structure taking LWE to Ring LWE by adding cyclic structure to Module LWE. We show that the security reductions expected for an LWE problem hold, namely a reduction from certain structured lattice problems to the hardness of the decision variant of the CLWE problem (under the condition of constant rank d). As a contribution of theoretic interest, we view CLWE as the first variant of Ring LWE which supports non-commutative multiplication operations. This ring structure compares favorably with Module LWE, and naturally allows a larger message space for error correction coding.Keywords
All Related Versions
This publication has 29 references indexed in Scilit:
- Worst-case to average-case reductions for module latticesDesigns, Codes and Cryptography, 2014
- A Toolkit for Ring-LWE Cryptography2013
- Generalized Learning Problems and Applications to Non-commutative Cryptography2011
- On Ideal Lattices and Learning with Errors over Rings2010
- An Efficient and Parallel Gaussian Sampler for Lattices2010
- On lattices, learning with errors, random linear codes, and cryptographyJournal of the ACM, 2009
- Fast Cryptographic Primitives and Circular-Secure Encryption Based on Hard Learning Problems2009
- Worst‐Case to Average‐Case Reductions Based on Gaussian MeasuresSIAM Journal on Computing, 2007
- Quantum factoring, discrete logarithms, and the hidden subgroup problemComputing in Science & Engineering, 2001
- New bounds in some transference theorems in the geometry of numbersMathematische Annalen, 1993