RLWE and PLWE over cyclotomic fields are not equivalent
Number Theory
2022-01-13 v1
Abstract
We prove that the Ring Learning With Errors (RLWE) and the Polynomial Learning With Errors (PLWE) problems over the cyclotomic field are not equivalent. Precisely, we show that reducing one problem to the other increases the noise by a factor that is more than polynomial in . We do so by providing a lower bound, holding for infinitely many positive integers , for the condition number of the Vandermonde matrix of the th cyclotomic polynomial.
Cite
@article{arxiv.2201.04365,
title = {RLWE and PLWE over cyclotomic fields are not equivalent},
author = {Antonio J. Di Scala and Carlo Sanna and Edoardo Signorini},
journal= {arXiv preprint arXiv:2201.04365},
year = {2022}
}