Answered step by step
Verified Expert Solution
Question
1 Approved Answer
Prove that Decision - LWE is as hard as Search - LWE. Specifically, show a divide - and - conquer attack, where given an adversary
Prove that DecisionLWE is as hard as SearchLWE. Specifically, show a divideandconquer attack, where given an adversary who solves DecisionLWE, it is possible to guess the entries of s one by one. Recall that the modulus p is polynomial in the security parameter.
Hint: Consider guessing the value of the first entry of s denoted s in Zq and choosing a column vector a in Zpm uniformly at random. Given an LWE instance A u update the instance to A u s a mod p where A is the matrix A with column vector a added to its first column.
What is the distribution of A u s a mod p in case the guess for s is correct or incorrect?
Step by Step Solution
There are 3 Steps involved in it
Step: 1
Get Instant Access to Expert-Tailored Solutions
See step-by-step solutions with expert insights and AI powered tools for academic success
Step: 2
Step: 3
Ace Your Homework with AI
Get the answers you need in no time with our AI-driven, step-by-step assistance
Get Started