A Gentle Introduction to Lattice-Based Cryptography [pdf]

(cryptography101.ca)

109 points | by jayhoon 2 days ago

3 comments

  • superjan 4 hours ago
    A nice (short!) video on this topic is this one from Chalk Talk: https://youtu.be/QDdOoYdb748?is=vCFGroHUPwZP7Dqm
  • ArcHound 6 hours ago
    Oh this brings me back to my uni days. I suppose that since this is the basis of post-quantum crypto it is a good time to learn this.

    Seems to me that these lattices and error-correcting codes are very close to each other, but for some reason they are discussed separately.

    I'd wager that there will be some reductions between those problems - maybe I could dig more around that.

  • cykros 3 hours ago
    Good stuff to know, just in case the life extension tech explodes and we're all alive by the time cryptographically relevant quantum computers actually hit the scene.
    • Retr0id 3 hours ago
      Lattice-based cryptography exists in the present (Both Chrome and Firefox support X25519MLKEM768 hybrid key agreement, by default)
      • GTP 24 minutes ago
        Yes, but it exists because it was deemed better to be cautious and implement PQC despite the uncertainty and different points of view around the time scale to have cryptographically relevant quantum computers (or, from a different point of view, precisely due to the uncertainties). Their comment was in the wrong tone, but the doubts are there. BTW, PQC can be interesting to learn regardless of the discussion around quantum computers.
        • Retr0id 11 minutes ago
          "will we have a CRQC soon" is the subject of much debate but "will we have a CRQC ever" is pretty uncontroversially a possibility, and so it is worth defending against harvest-now-decrypt-later attacks in the present - which is why X25519MLKEM768 is widely deployed already.