Abstract:Driven by the open problem raised by Hofheinz and Kiltz (J Cryptol 25(3):484–527, 2012), we study the formalization of lattice-based programmable hash function (PHF) and give three types of concrete constructions by using several techniques such as a novel combination of cover-free sets and lattice trapdoors. Under the inhomogeneous small integer solution (ISIS) assumption, we show that any (non-trivial) lattice-based PHF is a collision-resistant hash function, which gives a direct application of this new primitive. We further demonstrate the power of lattice-based PHF by giving generic constructions of signature and identity-based encryption (IBE) in the standard model, which not only provide a way to unify several previous lattice-based schemes using the partitioning proof techniques, but also allow us to obtain new short signature schemes and IBE schemes from (ideal) lattices. Specifically, by instantiating the generic constructions with our Type-II and Type-III PHF constructions, we immediately obtain two short signatures and two IBE schemes with asymptotically much shorter keys. A major downside which inherits from our Type-II and Type-III PHF constructions is that we can only prove the security of the new signatures and IBEs in the bounded security model that the number Q of the adversary's queries is required to be known in advance. Another downside is that the computational time of our new signatures and IBEs is a linear function of Q , which is large for typical parameters. To overcome the above limitations, we also give a refined way of using Type-II and Type-III PHFs to construct lattice-based short signatures with short verification keys in the full security model. In particular, our methods depart from the confined guessing technique of Böhl et al. (Eurocrypt'13) that was used to construct previous standard model short signature schemes with short verification keys by Ducas and Micciancio (Crypto'14) and by Alperin-Sheriff (PKC'15) and allow us to achieve much tighter security from weaker hardness assumptions.

Compact Lossy and All-but-One Trapdoor Functions from Lattice

Post-quantum -to-1 trapdoor claw-free functions from extrapolated dihedral cosets

Post-Quantum $κ$-to-1 Trapdoor Claw-free Functions from Extrapolated Dihedral Cosets

Leakage-resilient / with optimal leakage rates from lattices

Almost tight security in lattices with polynomial moduli—PRF, IBE, all-but-many LTF, and more

On the Closest Vector Problem for Lattices Constructed from Polynomials and Their Cryptographic Applications

An efficient certificateless signature scheme on lattice

New Lattice Based Cryptographic Constructions

Better Quantum Seal Schemes based on Trapdoor Claw-Free Functions

Lattice-Based Quantum Advantage from Rotated Measurements

Minimizing CNOT-count in Quantum Circuit of the Extended Shor’s Algorithm for ECDLP

Distributed Identity Authentication with Lenstra–Lenstra–Lovász Algorithm–Ciphertext Policy Attribute-Based Encryption from Lattices: An Efficient Approach Based on Ring Learning with Errors Problem

Lattice-Based Programmable Hash Functions and Applications

Lossy Cryptography from Code-Based Assumptions

A General-Purpose Number Theoretic Transform Algorithm for Compact RLWE Cryptoprocessors

Compact Lattice Gadget and Its Applications to Hash-and-Sign Signatures

SALSA: Attacking Lattice Cryptography with Transformers

Benchmarking Attacks on Learning with Errors

Generic and Practical Key Establishment from Lattice.

Compact and Efficient KEMs over NTRU Lattices

Towards Efficient Key Extraction of LBC over Ring: Fast Non-spherical G-lattice Sampler and Optimized Perturbation Generation