Answered step by step
Verified Expert Solution
Link Copied!

Question

1 Approved Answer

Prove that Decision - LWE is as hard as Search - LWE. Specifically, show a divide - and - conquer attack, where given an adversary

Prove that Decision-LWE is as hard as Search-LWE. Specifically, show a divide-and-conquer attack, where given an adversary who solves Decision-LWE, it is possible to guess the entries of s one by one. Recall that the modulus p is polynomial in the security parameter.
Hint: Consider guessing the value of the first entry of s, denoted s1 in Zq and choosing a column vector a in Z_p^m uniformly at random. Given an LWE instance (A, u), update the instance to (A, u + s1 a mod p), where A is the matrix A with column vector a added to its first column.
What is the distribution of (A, u + s1 a mod p) in case the guess for s1 is correct or incorrect?

Step by Step Solution

There are 3 Steps involved in it

Step: 1

blur-text-image

Get Instant Access to Expert-Tailored Solutions

See step-by-step solutions with expert insights and AI powered tools for academic success

Step: 2

blur-text-image

Step: 3

blur-text-image

Ace Your Homework with AI

Get the answers you need in no time with our AI-driven, step-by-step assistance

Get Started

Recommended Textbook for

Oracle Solaris 11.2 System Administration (oracle Press)

Authors: Harry Foxwell

1st Edition

007184421X, 9780071844215

More Books

Students also viewed these Databases questions