The Mathematics of Lattices II
summary
Defines short integer solutions (SIS) and decisional LWE and gives the concrete reductions: SIS yields collision-resistant hashes, LWE (search ↔ decisional up to polynomial blowup in M) yields one-way functions, PRGs and Regev-style public-key encryption by publishing many LWE samples as encryptions of zero and using a random short R per ciphertext. Uses Babai rounding and trapdoor bases (short basis of Λ⊥(A)) to invert LWE/SIS; constructs A with a short kernel vector via the leftover hash lemma. Open problem: lattice-based trapdoor permutations from worst‑case hardness.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 4:25Learning with Errors
- 11:30Decisional LWE
- 13:54Coding Theory
- 15:03Pseudorandom Generator
- 15:58Encryption
- 17:59Decryption
- 19:12Devious Method
- 20:55Public Key
- 23:35Public Encryption
- 31:35Q Size
- 35:05Good and Bad
- 39:05Close Vectors
- 42:25Trapdoor
- 51:25SIS Function
related talks
01h 40mHistorical Talk on Lattice-Based Cryptography
39mLattice Based Cryptography Primer
01h 42mMathematics of Lattices
57mLattice Assumptions with Hints: Succinct LWE and its Applications
01h 29mLattices, Multilinear Maps and Program Obfuscation
01h 15mAlgebraic Lattices and Ring Learning with Errors
01h 07mLattices and Encrypted Computation
57mAlgorithms for Lattice Problems, in Practice
