Repository logo

Infoscience

  • English
  • French
Log In
Logo EPFL, École polytechnique fédérale de Lausanne

Infoscience

  • English
  • French
Log In
  1. Home
  2. Academic and Research Output
  3. Conferences, Workshops, Symposiums, and Seminars
  4. Short Stickelberger Class Relations and Application to Ideal-SVP
 
conference paper

Short Stickelberger Class Relations and Application to Ideal-SVP

Cramer, Ronald
•
Ducas, Leo
•
Wesolowski, Benjamin
Coron, Js
•
Nielsen, Jb
2017
Advances In Cryptology - Eurocrypt 2017, Pt I
36th Annual International Conference on the Theory and Applications of Cryptographic Techniques (EUROCRYPT)

The worst-case hardness of finding short vectors in ideals of cyclotomic number fields (Ideal-SVP) is a central matter in lattice based cryptography. Assuming the worst-case hardness of Ideal-SVP allows to prove the Ring-LWE and Ring-SIS assumptions, and therefore to prove the security of numerous cryptographic schemes and protocols - including key-exchange, digital signatures, public-key encryption and fully-homomorphic encryption. A series of recent works has shown that Principal Ideal-SVP is not always as hard as finding short vectors in general lattices, and some schemes were broken using quantum algorithms - the Soliloquy encryption scheme, Smart-Vercauteren fully homomorphic encryption scheme from PKC 2010, and Gentry-Garg-Halevi cryptographic multilinear-maps from Eurocrypt 2013. Those broken schemes were using a special class of principal ideals, but these works also showed how to solve SVP for principal ideals in the worst-case in quantum polynomial time for an approximation factor of exp((O) over tilde(root n)). This exposed an unexpected hardness gap between general lattices and some structured ones, and called into question the hardness of various problems over structured lattices, such as Ideal-SVP and Ring-LWE. In this work, we generalize the previous result to general ideals. Precisely, we show how to solve the close principal multiple problem (CPM) by exploiting the classical theorem that the class-group is annihilated by the (Galois-module action of) the so-called Stickelberger ideal. Under some plausible number-theoretical hypothesis, our approach provides a close principal multiple in quantum polynomial time. Combined with the previous results, this solves Ideal-SVP in the worst case in quantum polynomial time for an approximation factor of exp((O) over tilde(root n)). Although it does not seem that the security of Ring-LWE based cryptosystems is directly affected, we contribute novel ideas to the crypt-analysis of schemes based on structured lattices. Moreover, our result shows a deepening of the gap between general lattices and structured ones.

  • Details
  • Metrics
Type
conference paper
DOI
10.1007/978-3-319-56620-7_12
Web of Science ID

WOS:000419172100012

Author(s)
Cramer, Ronald
Ducas, Leo
Wesolowski, Benjamin
Editors
Coron, Js
•
Nielsen, Jb
Date Issued

2017

Publisher

Springer International Publishing Ag

Publisher place

Cham

Published in
Advances In Cryptology - Eurocrypt 2017, Pt I
ISBN of the book

978-3-319-56620-7

978-3-319-56619-1

Total of pages

25

Series title/Series vol.

Lecture Notes in Computer Science

Volume

10210

Start page

324

End page

348

Editorial or Peer reviewed

REVIEWED

Written at

EPFL

EPFL units
LACAL  
Event nameEvent placeEvent date
36th Annual International Conference on the Theory and Applications of Cryptographic Techniques (EUROCRYPT)

Paris, FRANCE

APR 30-MAY 04, 2017

Available on Infoscience
January 15, 2018
Use this identifier to reference this record
https://infoscience.epfl.ch/handle/20.500.14299/143819
Logo EPFL, École polytechnique fédérale de Lausanne
  • Contact
  • infoscience@epfl.ch

  • Follow us on Facebook
  • Follow us on Instagram
  • Follow us on LinkedIn
  • Follow us on X
  • Follow us on Youtube
AccessibilityLegal noticePrivacy policyCookie settingsEnd User AgreementGet helpFeedback

Infoscience is a service managed and provided by the Library and IT Services of EPFL. © EPFL, tous droits réservés