Abstract:The Learning Parity with Noise (LPN) problem has recently found many cryptographic applications such as authentication protocols, pseudorandom generators/functions and even asymmetric tasks including public-key encryption (PKE) schemes and oblivious transfer (OT) protocols. It however remains a long-standing open problem whether LPN implies collision resistant hash (CRH) functions. Inspired by the recent work of Applebaum et al. (ITCS 2017), we introduce a general construction of CRH from LPN for various parameter choices. We show that, just to mention a few notable ones, under any of the following hardness assumptions (for the two most common variants of LPN)1. constant-noise LPN is 2(n0.5+epsilon)-hard for any constant epsilon e > 0;2. constant-noise LPN is 2(Omega(n/ log n))-hard given q = poly(n) samples;3. low-noise LPN (of noise rate 1/root n) is 2(Omega(root n/ log n))-hard given q = poly(n) samples.there exists CRH functions with constant (or even poly-logarithmic) shrinkage, which can be implemented using polynomial-size depth-3 circuits with NOT, (unbounded fan-in) AND and XOR gates. Our technical route LPN -> bSVP -> CRH is reminiscent of the known reductions for the large-modulus analogue, i.e., LWE -> SIS -> CRH, where the binary Shortest Vector Problem (bSVP) was recently introduced by Applebaum et al. (ITCS 2017) that enables CRH in a similar manner to Ajtai's CRH functions based on the Short Integer Solution (SIS) problem.Furthermore, under additional (arguably minimal) idealized assumptions such as small-domain random functions or random permutations (that trivially imply collision resistance), we still salvage a simple and elegant collision-resistance-preserving domain extender combining the best of the two worlds, namely, maximized (depth one) parallelizability and polynomial shrinkage. In particular, assume 2(n0.5+epsilon)-hard constant-noise LPN or 2(n0.25+epsilon)-hard low-noise LPN, we obtain a collision resistant hash function that evaluates in parallel only a single layer of small-domain random functions (or random permutations) and shrinks polynomially.

On the Hardness of Learning Parity with Noise over Rings.

On The Robustness Of Learning Parity With Noise

Cryptography with Auxiliary Input and Trapdoor from Constant-Noise LPN.

The Learning Stabilizers with Noise problem

Ring/Module Learning with Errors Under Linear Leakage - Hardness and Applications.

Ring/Module Learning with Errors under Linear Leakage - Hardness and Applications

Collision Resistant Hashing From Sub-Exponential Learning Parity With Noise

Algorithms for Sparse LPN and LSPN Against Low-noise

Lossy Cryptography from Code-Based Assumptions

Reduction from sparse LPN to LPN, Dual Attack 3.0

On Learning Parities with Dependent Noise

LWE from non-commutative group rings

Limitations of the decoding-to-LPN reduction via code smoothing

On Lattices, Learning with Errors, Random Linear Codes, and Cryptography

Correlated Pseudorandomness from the Hardness of Quasi-Abelian Decoding

Practically Solving LPN in High Noise Regimes Faster Using Neural Networks

An Upper-Bound on the Decoding Failure Probability of the LRPC Decoder

Algebraically Structured LWE, Revisited

Leakage-Resilient Hardness Equivalence to Logspace Derandomization

Noisy decoding by shallow circuits with parities: classical and quantum

HELEN: A Public-Key Cryptosystem Based on the LPN and the Decisional Minimal Distance Problems