Abstract:We study learning algorithms for two sparse variants of the classical learning parity with noise (LPN) problem. We provide a new algorithmic framework that improves the state of the art for a wide range of parameters. This framework has a simple structure different from previous approaches: the first step is a domain reduction via the knowledge of sparsity; then it solves sub-problems by Gaussian elimination. Let $n$ be the dimension, $k$ be the sparsity parameter, and $\eta$ be the noise rate such that each label gets flipped with probability $\eta$. The sparse LPN problem (with various parameters) has wide applications in cryptography. Different from the standard LPN problem that samples random vectors in $\mathbf{F}_2^n$, it samples random $k$-sparse vectors. The birthday paradox implies a trivial distinguishing algorithm given $m=n^{k/2}$ samples. For $m=n^{1+(\frac{k}{2}-1)(1-\delta)}$ with $\delta \in (0,1)$, the best known algorithm has running time $\min\{e^{\eta n}, e^{\tilde{O}(n^{\delta})}\}$. We present a learning algorithm for sparse LPN with time complexity $e^{\tilde{O}(\eta \cdot n^{\frac{1+\delta}{2}})}$ and sample complexity $m=\max\{1,\frac{\eta \cdot n^{\frac{1+\delta}{2}}}{k^2}\} \cdot \tilde{O}(n)^{1+(\frac{k-1}{2})(1-\delta)}$. It improves previous results for any constant or super-constant $k$ with a wide range of $\eta$. The learning sparse parity with noise (LSPN) problem assumes the hidden parity is $k$-sparse. LSPN has been extensively studied in both learning theory and cryptography. However, the state of the art needs ${n \choose k/2} = \Omega(n/k)^{k/2}$ time for a wide range of parameters while the simple enumeration algorithm takes ${n \choose k}=O(n/k)^k$ time. Our LSPN algorithm runs in time $O(\eta \cdot n/k)^k$ for any $\eta$ and $k$. This improves the state-of-the-art for learning sparse parity in a wide range of parameters.

Cryptography with Auxiliary Input and Trapdoor from Constant-Noise LPN.

Algorithms for Sparse LPN and LSPN Against Low-noise

The Learning Stabilizers with Noise problem

Lossy Cryptography from Code-Based Assumptions

Reduction from sparse LPN to LPN, Dual Attack 3.0

On Learning Parities with Dependent Noise

Practically Solving LPN in High Noise Regimes Faster Using Neural Networks

Learning Constant-Depth Circuits in Malicious Noise Models

Compact Lossy and All-but-One Trapdoor Functions from Lattice

Limitations of the decoding-to-LPN reduction via code smoothing

Nonperturbative Leakage Elimination Operators and Control of a Three-Level System

HELEN: A Public-Key Cryptosystem Based on the LPN and the Decisional Minimal Distance Problems

Learning with Errors and Extrapolated Dihedral Cosets

Almost tight security in lattices with polynomial moduli—PRF, IBE, all-but-many LTF, and more

Decrypting Nonlinearity: Koopman Interpretation and Analysis of Cryptosystems

Quantum Oblivious LWE Sampling and Insecurity of Standard Model Lattice-Based SNARKs

Optimal Key Consensus in Presence of Noise.

Crypto Analysis of the Key Distribution Scheme Using Noise-Free Resistances

Noisy decoding by shallow circuits with parities: classical and quantum

On Locally Decodable Codes in Resource Bounded Channels

Near-Optimal Time-Sparsity Trade-Offs for Solving Noisy Linear Equations