## Abstract

Lattice-based cryptography, the study of cryptographic primitives whose security is based on the hardness of so-called lattice problems, has taken center stage in cryptographic research in recent years. It potentially offers favorable security features, even against quantum algorithms. One of the main obstacles for wide adoption of this type of cryptography is its unsatisfactory efficiency. To address this point, efficient lattice-based cryptography usually relies on the intractability of problems on lattices with additional algebraic structure (such as so-called ideal-lattices or module-lattices). It is an important open question to evaluate the hardness of such lattice problems, and their relation to the hardness of problems on unstructured lattices. It is a known fact that an unstructured lattice, which is simply an additive discrete group in Euclidean space, can be cast as an ideal-lattice in some order of a number field (and thus, in a rather trivial sense, that ideals in orders are as general as unstructured lattices). However, it is not known whether this connection can be used to imply useful hardness results for structured lattices, or alternatively new algorithmic techniques for unstructured lattices. In this work we establish a gradient of hardness for the Order-LWE problem (a generalization of the well known Ring-LWE problem), as it varies over orders in a number field. Furthermore, we show that, in every number field, there are certain orders such that the corresponding Order-LWE problem is at least as hard as the (unstructured) LWE problem. So in general one should not hope to solve (any) Order-LWE more efficiently than LWE. However, we show that this connection holds in orders that are very “skewed” and hence, perhaps, irrelevant for improving efficiency in cryptographic applications. We further improve the hardness result for Order-LWE, to include all ideal lattices, closing a gap left in prior work. This establishes a direct connection between problems on unstructured lattices and the structured problem of Order-LWE.

Original language | English |
---|---|

Title of host publication | Public-Key Cryptography – PKC 2024 - 27th IACR International Conference on Practice and Theory of Public-Key Cryptography, Proceedings |

Editors | Qiang Tang, Vanessa Teague |

Publisher | Springer Science and Business Media B.V. |

Pages | 123-154 |

Number of pages | 32 |

ISBN (Print) | 9783031577246 |

DOIs | |

State | Published - 2024 |

Event | 27th IACR International Conference on Practice and Theory of Public Key Cryptography, PKC 2024 - Sydney, Australia Duration: 15 Apr 2024 → 17 Apr 2024 |

### Publication series

Name | Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) |
---|---|

Volume | 14603 LNCS |

### Conference

Conference | 27th IACR International Conference on Practice and Theory of Public Key Cryptography, PKC 2024 |
---|---|

Country/Territory | Australia |

City | Sydney |

Period | 15/04/24 → 17/04/24 |

## All Science Journal Classification (ASJC) codes

- Theoretical Computer Science
- General Computer Science