Abstract:Achieving tight security is a fundamental task in cryptography. While one of the most important purposes of this task is to improve the overall efficiency of a construction (by allowing smaller security parameters), many current lattice-based instantiations do not completely achieve the goal. Particularly, a super-polynomial modulus seems to be necessary in all prior work for (almost) tight schemes that allow the adversary to conduct queries, such as PRF, IBE, and Signatures. As the super-polynomial modulus would affect the noise-to-modulus ratio and thus increase the parameters, this might cancel out the advantages (in efficiency) brought from the tighter analysis. To determine the full power of tight security/analysis in lattices, it is necessary to determine whether the super-polynomial modulus restriction is inherent. In this work, we remove the super-polynomial modulus restriction for many important primitives—PRF, IBE, all-but-many Lossy Trapdoor Functions, and Signatures. The crux relies on an improvement over the framework of Boyen and Li (Asiacrypt 16), and an almost tight reduction from LWE to LWR, which improves prior work by Alwen et al. (Eurocrypt 13), Bogdanov et al. (TCC 16), and Bai et al. (Asiacrypt 15). By combining these two advances, we are able to derive these almost tight schemes under LWE with a polynomial modulus.

A Method of Constructing Orthogonal Basis in $p$-adic Fields

An Attack on $p$-adic Lattice Public-key Cryptosystems and Signature Schemes

On $p$-adic Gram-Schmidt Orthogonalization Process

Norm Orthogonal Bases and Invariants of $p$-adic Lattices

On Constructing Prime Order Elliptic Curves Suitable for Pairing-Based Cryptography

Cryptanalysis of the RSA Variant Based on Cubic Pell Equation.

An Effective Framework for Constructing Exponent Lattice Basis of Nonzero Algebraic Numbers

Factoring RSA Modulus with Known Bits from Both p and q: A Lattice Method.

A New Method for Construction of Orthomorphic Permutations with the Highest Degree

On the $\mathbb{Z}_p$-extensions of a totally $p$-adic imaginary quadratic field -- With an appendix by Jean-François Jaulent

On Classifying Extensions of $p$-adic Fields

Some new infinite families of non-$p$-rational real quadratic fields

Extension Field Cancellation: A New Central Trapdoor for Multivariate Quadratic Systems

Method for attacking a new public-key scheme based on cubic finite field extensions

Almost tight security in lattices with polynomial moduli—PRF, IBE, all-but-many LTF, and more

Quadratic fields, Artin-Schreier extensions, and Bell numbers

On efficient normal bases over binary fields

Estimating the Prime-Factors of an RSA Modulus and an Extension of the Wiener Attack

Remarks on Cryptanalysis of RSA Using Lattice Basis Reduction

Random Generator of Orthogonal Matrices in Finite Fields

Flexible partial enlargement to accelerate gröbner basis computation over F2