English

On the Quantum Equivalence between $S|LWE\rangle$ and $ISIS$

Quantum Physics 2026-05-12 v2 Cryptography and Security

Abstract

Chen, Liu, and Zhandry [CLZ22] introduced the problems SLWES|LWE\rangle and CLWEC|LWE\rangle as quantum analogues of the Learning with Errors problem, designed to construct quantum algorithms for the Inhomogeneous Short Integer Solution (ISISISIS) problem. Several later works have used this framework for constructing new quantum algorithms in specific cases. However, the general relation between all these problems is still unknown. In this paper, we investigate the equivalence between SLWES|LWE\rangle and ISISISIS. We present the first fully generic reduction from ISISISIS to SLWES|LWE\rangle, valid even in the presence of errors in the underlying algorithms. We then explore the reverse direction, introducing an inhomogeneous variant of CLWEC|LWE\rangle, denoted ICLWEIC|LWE\rangle, and show that ICLWEIC|LWE\rangle reduces to SLWES|LWE\rangle. Finally, we prove that, under certain recoverability conditions, an algorithm for ISISISIS can be transformed into one for SLWES|LWE\rangle. We instantiate this reverse reduction by tweaking a known algorithm for (I)SIS(I)SIS_\infty in order to construct quantum algorithm for SLWES|LWE\rangle when the alphabet size q is a small power of 2, recovering some results of Bai et al. [BJK+ 25]. Our results thus clarify the landscape of reductions between SLWES|LWE\rangle and ISISISIS, and we show both their strong connection as well as the remaining barriers for showing full equivalence.

Cite

@article{arxiv.2510.06097,
  title  = {On the Quantum Equivalence between $S|LWE\rangle$ and $ISIS$},
  author = {André Chailloux and Paul Hermouet},
  journal= {arXiv preprint arXiv:2510.06097},
  year   = {2026}
}

Comments

journal version

R2 v1 2026-07-01T06:21:50.304Z