English

RLWE and PLWE over cyclotomic fields are not equivalent

Number Theory 2022-01-13 v1

Abstract

We prove that the Ring Learning With Errors (RLWE) and the Polynomial Learning With Errors (PLWE) problems over the cyclotomic field Q(ζn)\mathbb{Q}(\zeta_n) are not equivalent. Precisely, we show that reducing one problem to the other increases the noise by a factor that is more than polynomial in nn. We do so by providing a lower bound, holding for infinitely many positive integers nn, for the condition number of the Vandermonde matrix of the nnth cyclotomic polynomial.

Cite

@article{arxiv.2201.04365,
  title  = {RLWE and PLWE over cyclotomic fields are not equivalent},
  author = {Antonio J. Di Scala and Carlo Sanna and Edoardo Signorini},
  journal= {arXiv preprint arXiv:2201.04365},
  year   = {2022}
}
R2 v1 2026-06-24T08:47:27.020Z