On the ideal shortest vector problem over random rational primes
Cryptography and Security
2021-03-03 v2 Number Theory
Abstract
Any ideal in a number field can be factored into a product of prime ideals. In this paper we study the prime ideal shortest vector problem (SVP) in the ring , a popular choice in the design of ideal lattice based cryptosystems. We show that a majority of rational primes lie under prime ideals admitting a polynomial time algorithm for SVP. Although the shortest vector problem of ideal lattices underpins the security of Ring-LWE cryptosystem, this work does not break Ring-LWE, since the security reduction is from the worst case ideal SVP to the average case Ring-LWE, and it is one-way.
Cite
@article{arxiv.2004.10278,
title = {On the ideal shortest vector problem over random rational primes},
author = {Yanbin Pan and Jun Xu and Nick Wadleigh and Qi Cheng},
journal= {arXiv preprint arXiv:2004.10278},
year = {2021}
}