On the concrete hardness of learning with errors

MR Albrecht, R Player, S Scott - Journal of Mathematical Cryptology, 2015 - degruyter.com
The learning with errors (LWE) problem has become a central building block of modern
cryptographic constructions. This work collects and presents hardness results for concrete …

Finding shortest lattice vectors faster using quantum search

T Laarhoven, M Mosca, J Van De Pol - Designs, Codes and Cryptography, 2015 - Springer
By applying a quantum search algorithm to various heuristic and provable sieve algorithms
from the literature, we obtain improved asymptotic quantum results for solving the shortest …

[PDF][PDF] Search problems in cryptography: from fingerprinting to lattice sieving

T Laarhoven - 2016 - research.tue.nl
Search problems in cryptography Page 1 Search problems in cryptography: from fingerprinting
to lattice sieving Citation for published version (APA): Laarhoven, T. (2016). Search problems …

Low-cost and area-efficient FPGA implementations of lattice-based cryptography

A Aysu, C Patterson… - 2013 IEEE international …, 2013 - ieeexplore.ieee.org
The interest in lattice-based cryptography is increasing due to its quantum resistance and its
provable security under some worst-case hardness assumptions. As this is a relatively new …

Lwr-based quantum-safe pseudo-random number generator

AA Pandit, A Kumar, A Mishra - Journal of Information Security and …, 2023 - Elsevier
Learning with Rounding (LWR) is a lattice-based cryptographically hard problem which
quantum computers find difficult to solve. LWR problem is a derandomized variant of …

Sieving for closest lattice vectors (with preprocessing)

T Laarhoven - International conference on selected areas in …, 2016 - Springer
Lattice-based cryptography has recently emerged as a prime candidate for efficient and
secure post-quantum cryptography. The two main hard problems underlying its security are …

Gaussian sampling in lattice-based cryptography

T Prest - 2015 - theses.hal.science
Although rather recent, lattice-based cryptography has stood out on numerous points, be it
by the variety of constructions that it allows, by its expected resistance to quantum …

Solving the shortest vector problem in lattices faster using quantum search

T Laarhoven, M Mosca, J Van De Pol - … 2013, Limoges, France, June 4-7 …, 2013 - Springer
By applying Grover's quantum search algorithm to the lattice algorithms of Micciancio and
Voulgaris, Nguyen and Vidick, Wang et al., and Pujol and Stehlé, we obtain improved …

Parallel (probable) lock-free hash sieve: A practical sieving algorithm for the SVP

A Mariano, C Bischof… - 2015 44th International …, 2015 - ieeexplore.ieee.org
In this paper, we assess the practicability of Hash Sieve, a recently proposed sieving
algorithm for the Shortest Vector Problem (SVP) on lattices, on multi-core shared memory …

Sieve, enumerate, slice, and lift: hybrid lattice algorithms for SVP via CVPP

E Doulgerakis, T Laarhoven, B de Weger - International Conference on …, 2020 - Springer
Motivated by recent results on solving large batches of closest vector problem (CVP)
instances, we study how these techniques can be combined with lattice enumeration to …