Cryptography from Ideal Lattices
summary
Shows concrete claims and limits: structured matrices cut storage from O(n^2) to nearly linear (example: n in the hundreds, log q≈8), yielding practical speedups but requiring algebraic structure; security reductions require power-of-two cyclotomics or fields with known integer bases; worst-case hardness gives a quantum reduction from ideal-SVP to search Ring-LWE under Gaussian error (σ ≈ αq), while search→decision needs q ≡ 1 mod m so the polynomial splits and automorphisms let CRT-slot recovery work.
AI-written summary · about
chapters (12)
- 0:00Ideal lattice cryptography intro
- 4:34Structured matrices in crypto
- 7:07Talk roadmap
- 7:50Number fields math
- 14:35Ideals and algebraic number theory
- 18:12Geometric embeddings of number fields
- 26:46Ideal lattices definition
- 37:42Ring-SIS hardness
- 47:05Ring-LWE efficiency
- 51:27Ring-LWE variants
- 1:01:34Module lattices future
- 1:05:31Open problems and conclusion
related talks
01h 36mAlgorithms for Algebraic Lattices: Classical and Quantum
01h 15mAlgebraic Lattices and Ring Learning with Errors
01h 08mThe Mathematics of Lattices I
39mLattice Based Cryptography Primer
40mPost-Quantum
01h 04mUsing Lattices for Cryptanalysis
01h 32mThe Short Integer Solutions Problem and Cryptographic Applications
01h 04mThe Mathematics of Lattices II
