Recent attacks on NTRU lattices given by Ducas and van Woerden (ASIACRYPT 2021) showed that for moduli q larger than the so-called fatigue point $$n^{2.484+o(1)}$$ , the security of NTRU is noticeably less than that of (ring)-LWE. Unlike NTRU-based PKE with q typically lying in the secure regime of NTRU lattices (i.e., $$q

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

NTRU-Based Bootstrapping for MK-FHEs Without Using Overstretched Parameters

  • Binwu Xiang,
  • Jiang Zhang,
  • Kaixing Wang,
  • Yi Deng,
  • Dengguo Feng

摘要

Recent attacks on NTRU lattices given by Ducas and van Woerden (ASIACRYPT 2021) showed that for moduli q larger than the so-called fatigue point $$n^{2.484+o(1)}$$ , the security of NTRU is noticeably less than that of (ring)-LWE. Unlike NTRU-based PKE with q typically lying in the secure regime of NTRU lattices (i.e., $$q