Source author record

Andrew Mendelsohn

Explore this author’s publications, collaborators and research topics. This catalog record has not been claimed by its author.

ResearcherUnclaimed source record

math.NT Cryptography and Security math.RA

Catalog footprint

Research overview

2works

3topics

2close collaborators

Actions

Is this your work?

Open graph Browse papers

preprint2022arXiv

An Upper Bound on the Number of Classes of Perfect Unary Forms in Totally Real Number Fields

Let $K$ be a totally real number field of degree $n$ over $\mathbb{Q}$ , with discriminant and regulator $Δ_K, R_K$ respectively. In this paper, using a similar method to van Woerden, we prove that the number of classes of perfect unary forms, up to equivalence and scaling, can be bounded above by $O( Δ_K \exp(2n \log(n)+f(n,R_K)))$ , where $f(n,R_K)$ is a finite value, satisfying $f(n,R_K)=\frac{\sqrt{n-1}}{2}R_K^{\frac{1}{n-1}}+\frac{4}{n-1}\log(\sqrt{|Δ_K|})^2$ if $n \leq 11$ . Moreover, if $K$ is a unit reducible field, the number of classes of perfect unary forms is bound above by $O( Δ_K \exp(2n \log(n)))$ .

preprint2022arXiv

Subfield Algorithms for Ideal- and Module-SVP Based on the Decomposition Group

Whilst lattice-based cryptosystems are believed to be resistant to quantum attack, they are often forced to pay for that security with inefficiencies in implementation. This problem is overcome by ring- and module-based schemes such as Ring-LWE or Module-LWE, whose keysize can be reduced by exploiting its algebraic structure, allowing for faster computations. Many rings may be chosen to define such cryptoschemes, but cyclotomic rings, due to their cyclic nature allowing for easy multiplication, are the community standard. However, there is still much uncertainty as to whether this structure may be exploited to an adversary's benefit. In this paper, we show that the decomposition group of a cyclotomic ring of arbitrary conductor can be utilised to significantly decrease the dimension of the ideal (or module) lattice required to solve a given instance of SVP. Moreover, we show that there exist a large number of rational primes for which, if the prime ideal factors of an ideal lie over primes of this form, give rise to an "easy" instance of SVP. It is important to note that the work on ideal SVP does not break Ring-LWE, since its security reduction is from worst case ideal SVP to average case Ring-LWE, and is one way.

Inspect adjacent papers, topics, institutions and collaborators without losing the researcher page.

Building this map preview

BZPEER is loading the nearby papers, people, topics and institutions for this page.