Related Experiment Video
Updated: Oct 18, 2025

08:32
Indirect Fabrication of Lattice Metals with Thin Sections Using Centrifugal Casting
Published on: May 14, 2016
12.7K
The Ring-LWE Problem in Lattice-Based Cryptography: The Case of Twisted Embeddings
Jheyne N Ortiz1, Robson R de Araujo2, Diego F Aranha3
1Institute of Computing, University of Campinas, Campinas 13083-852, Brazil.
Entropy (Basel, Switzerland)
|September 28, 2021
Summary
This study introduces Twisted Ring-LWE, enhancing lattice-based cryptography by enabling new algebraic structures. This expansion maintains security guarantees while broadening cryptographic applications.
Area of Science:
- Lattice-based cryptography
- Algebraic number theory
- Post-quantum cryptography
Background:
- Existing research characterizes weak instances of the Ring-LWE problem using algebraic structures.
- These weak instances are not covered by worst-case hardness theorems.
- Expanding ring instantiations broadens applications and diversifies security assumptions.
Purpose of the Study:
- To extend the Ring-LWE problem to algebraic lattices via twisted embeddings.
- To define and analyze the security of the proposed Twisted Ring-LWE problem.
- To explore the implications for cryptographic applications and number field usage.
Main Methods:
- Definition of Twisted Ring-LWE using extended embeddings.
- Security reduction proofs from Ring-LWE to Twisted Ring-LWE (search and decision forms).
- Analysis of twist factor's impact on worst-case to average-case reductions.
- Expansion of spherical Gaussian distribution sampling to new lattice classes.
Main Results:
- Twisted Ring-LWE is proven secure via reduction from Ring-LWE.
- The twist factor does not negatively impact hardness guarantees.
- The scope of algebraic lattices for cryptography is significantly increased.
- Direct sampling from spherical Gaussian distributions is achieved in number fields.
Conclusions:
- Twisted Ring-LWE offers a secure and practical extension of Ring-LWE.
- This work enhances the flexibility and applicability of lattice-based cryptography.
- The findings support the use of a wider range of algebraic structures in cryptographic designs.
Related Concept Videos
Bewley Lattice Diagram
945
The Bewley lattice diagram, developed by L. V. Bewley, effectively organizes the reflections occurring during transmission-line transients. It visually represents how voltage waves propagate and reflect within a transmission line, making it easier to understand the complex interactions that occur.
945
Lattice Centering and Coordination Number
10.3K
The structure of a crystalline solid, whether a metal or not, is best described by considering its simplest repeating unit, which is referred to as its unit cell. The unit cell consists of lattice points that represent the locations of atoms or ions. The entire structure then consists of this unit cell repeating in three dimensions. The three different types of unit cells present in the cubic lattice are illustrated in Figure 1.
Types of Unit Cells
Imagine taking a large number of identical...
Types of Unit Cells
Imagine taking a large number of identical...
10.3K
Angle of Twist - Elastic Range
486
Consider a cylindrical shaft with a length denoted by L and a consistent cross-sectional radius referred to as r. This shaft undergoes a torque at the free end. The highest shearing strain within the shaft is directly proportional to the twist angle and the radial distance from the shaft axis. When the shaft behaves elastically, this shearing strain can be articulated using variables such as the applied torque, radial distance, the polar moment of inertia, and the modulus of rigidity. By...
486
Castigliano's Theorem
604
Castigliano's theorem analyzes displacements and rotations in elastic structures. It relates the derivative of elastic strain energy to the applied forces or moments, allowing for the calculation of deformations. The theorem states that the partial derivative of the total strain energy of a system with respect to a specific load results in the displacement at the point where the load is applied. This principle applies to both forces and moments.
604
Singularity Functions for Bending Moment
307
Singularity functions simplify the representation of bending moments in beams subjected to discontinuous loading, allowing the use of a single mathematical expression. For a supported beam AB, with uniform loading from its midpoint M to the right side end B, the approach involves conceptual 'cuts' at specific points to determine the bending moment in each segment. By cutting the beam at a point between A and M, the bending moment for the segment before reaching midpoint M is represented...
307
Unsymmetric Bending
533
Unsymmetrical bending occurs when the bending moment applied to a structural member does not align with its principal axis. This misalignment leads to complex stress distributions and deflection patterns that differ from those in symmetrical bending, and are essential for designing structures to withstand different loading conditions. In unsymmetrical bending, the neutral axis—where stress is zero—does not necessarily align with the geometric axes of the cross-section. The...
533

