Source author record

Yara Elias

Yara Elias appears in the imported research catalog. Authorship, coauthor and topic links are available while profile ownership is still unclaimed.

ResearcherUnclaimed source record

Catalog footprint

What is connected

6works
4topics
4close collaborators

Actions

Connect this record

Log in to claim

Research graph

See the researcher in context

Open full explorer

Inspect adjacent papers, topics, institutions and collaborators without losing the researcher page.

Building this map preview

BZPEER is loading the nearby papers, people, topics and institutions for this page.

Published work

6 published item(s)

preprint2016arXiv

CM cycles on Kuga-Sato varieties over Shimura curves and Selmer groups

Given a modular form f of even weight larger than two and an imaginary quadratic field K satisfying a relaxed Heegner hypothesis, we construct a collection of CM cycles on a Kuga-Sato variety over a suitable Shimura curve which gives rise to a system of Galois cohomology classes attached to f enjoying the compatibility properties of an Euler system. Then we use Kolyvagin's method, as adapted by Nekovar to higher weight modular forms, to bound the size of the relevant Selmer group associated to f and K and prove the finiteness of the (primary part) of the Shafarevich-Tate group, provided that a suitable cohomology class does not vanish.

preprint2016arXiv

On Generalized Addition Chains

Given integers d >= 1, and g >= 2, a g-addition chain for d is a sequence of integers a_0=1, a_1, a_2,..., a_{r-1}, a_r=d where a_i=a_{j_1}+a_{j_2}+...+a_{j_k}, with 2 =< k =< g, and 0 =< j_1 =< j_2 =< ... =< j_k =< i-1. The length of a g-addition chain is r, the number of terms following 1 in the sequence. We denote by l_g(d) the length of a shortest addition chain for d. Many results have been established in the case g=2. Our aim is to establish the same sort of results for arbitrary fixed g. In particular, we adapt methods for constructing g-addition chains when g=2 to the case g>2 and we study the asymptotic behavior of l_g.

preprint2015arXiv

Provably weak instances of Ring-LWE

The ring and polynomial learning with errors problems (Ring-LWE and Poly-LWE) have been proposed as hard problems to form the basis for cryptosystems, and various security reductions to hard lattice problems have been presented. So far these problems have been stated for general (number) rings but have only been closely examined for cyclotomic number rings. In this paper, we state and examine the Ring-LWE problem for general number rings and demonstrate provably weak instances of Ring-LWE. We construct an explicit family of number fields for which we have an efficient attack. We demonstrate the attack in both theory and practice, providing code and running times for the attack. The attack runs in time linear in q, where q is the modulus. Our attack is based on the attack on Poly-LWE which was presented in [Eisenträger-Hallgren-Lauter]. We extend the EHL-attack to apply to a larger class of number fields, and show how it applies to attack Ring-LWE for a heuristically large class of fields. Certain Ring-LWE instances can be transformed into Poly-LWE instances without distorting the error too much, and thus provide the first weak instances of the Ring-LWE problem. We also provide additional examples of fields which are vulnerable to our attacks on Poly-LWE, including power-of-$2$ cyclotomic fields, presented using the minimal polynomial of $ζ_{2^n} \pm 1$.

preprint2015arXiv

Ring-LWE Cryptography for the Number Theorist

In this paper, we survey the status of attacks on the ring and polynomial learning with errors problems (RLWE and PLWE). Recent work on the security of these problems [Eisenträger-Hallgren-Lauter, Elias-Lauter-Ozman-Stange] gives rise to interesting questions about number fields. We extend these attacks and survey related open problems in number theory, including spectral distortion of an algebraic number and its relationship to Mahler measure, the monogenic property for the ring of integers of a number field, and the size of elements of small order modulo q.