Lower bounds of shortest vector lengths in random NTRU lattices - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Article Dans Une Revue Theoretical Computer Science Année : 2014

Lower bounds of shortest vector lengths in random NTRU lattices

Résumé

Finding the shortest vector of a lattice is one of the most important problems in computational lattice theory. For a random lattice, one can estimate the length of the shortest vector using the Gaussian heuristic. However, no rigorous proof can be provided for some classes of lattices, as the Gaussian heuristic may not hold for them. In this paper, we propose a general method to estimate lower bounds of the shortest vector lengths for random integral lattices in certain classes, which is based on the incompressibility method from the theory of Kolmogorov complexity. As an application, we can prove that for a random NTRU lattice, with an overwhelming probability, the ratio between the length of the shortest vector and the length of the target vector, which corresponds to the secret key, is at least a constant, independent of the rank of the lattice.

Dates et versions

hal-01110352 , version 1 (28-01-2015)

Identifiants

Citer

Jingguo Bi, Qi Cheng. Lower bounds of shortest vector lengths in random NTRU lattices. Theoretical Computer Science, 2014, 560 (2), pp.121-130. ⟨10.1016/j.tcs.2014.10.011⟩. ⟨hal-01110352⟩
145 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More