Abstract:The security of code-based cryptography relies primarily on the hardness of decoding generic linear codes. Until very recently, all the best algorithms for solving the decoding problem were information set decoders (ISD). However, recently a new algorithm called RLPN-decoding which relies on a completely different approach was introduced and it has been shown that RLPN outperforms significantly ISD decoders for a rather large range of rates. This RLPN decoder relies on two ingredients, first reducing decoding to some underlying LPN problem, and then computing efficiently many parity-checks of small weight when restricted to some positions. We revisit RLPN-decoding by noticing that, in this algorithm, decoding is in fact reduced to a sparse-LPN problem, namely with a secret whose Hamming weight is small. Our new approach consists this time in making an additional reduction from sparse-LPN to plain-LPN with a coding approach inspired by coded-BKW. It outperforms significantly the ISD's and RLPN for code rates smaller than 0.42. This algorithm can be viewed as the code-based cryptography cousin of recent dual attacks in lattice-based cryptography. We depart completely from the traditional analysis of this kind of algorithm which uses a certain number of independence assumptions that have been strongly questioned recently in the latter domain. We give instead a formula for the LPNs noise relying on duality which allows to analyze the behavior of the algorithm by relying only on the analysis of a certain weight distribution. By using only a minimal assumption whose validity has been verified experimentally we are able to justify the correctness of our algorithm. This key tool, namely the duality formula, can be readily adapted to the lattice setting and is shown to give a simple explanation for some phenomena observed on dual attacks in lattices in [DP23].

Algebraic aspects of solving Ring-LWE, including ring-based improvements in the Blum-Kalai-Wasserman algorithm

Algebraically Structured LWE, Revisited

LWE from non-commutative group rings

The cool and the cruel: separating hard parts of LWE secrets

LWE with Quantum Amplitudes: Algorithm, Hardness, and Oblivious Sampling

Cryptanalysis of PLWE based on zero-trace quadratic roots

Learning with Errors over Group Rings Constructed by Semi-direct Product

Trace-based cryptanalysis of cyclotomic $R_{q,0}\times R_q$-PLWE for the non-split case

One Sample Ring-LWE with Rounding and Its Application to Key Exchange.

Remarks on Cryptanalysis of RSA Using Lattice Basis Reduction

Towards Efficient Key Extraction of LBC over Ring: Fast Non-spherical G-lattice Sampler and Optimized Perturbation Generation

Several Improvements on BKZ Algorithm.

A reduction from LWE problem to dihedral coset problem

Near-Optimal Time-Sparsity Trade-Offs for Solving Noisy Linear Equations

More basis reduction for linear codes: backward reduction, BKZ, slide reduction, and more

Efficient Hardware Arithmetic for Inverted Binary Ring-LWE Based Post-Quantum Cryptography

Further improvements of the estimation of key enumeration with applications to solving LWE

CNC: A lightweight architecture for Binary Ring-LWE based PQC

Learning with Errors and Extrapolated Dihedral Cosets

Reduction from sparse LPN to LPN, Dual Attack 3.0

Structure algebras of finite set-theoretic solutions of the Yang--Baxter equation