Tensor and power bases for SIS?

Joseph Johnston

4/16/24, 2:34 PM

What is there to say about using a power basis or a tensor basis or some combination of them for the RSIS problem in lattice cryptography? Restricting to dimension 3 for illustration, usually the basis is $(1,x,y)$ for uniform $x,y\in R$. I'm instead wondering about power basis $(1,x,x^2)$, and tensor basis $(1,x,x^2)\bigotimes(1,y,y^2)$. More generally, I'm wondering about higher powers and higher dimensions for these bases.

Are there any obvious attacks on RSIS with these bases? Has there been any analysis in this direction, or any works that make assumptions in this direction? If you read such a work, would it raise alarm for you? Do you have any intuitive idea how safe it would be to use such a basis, eg even just for dimensions 3 as above? It seems there are constructions that would benefit greatly.

0 + 0

cryptanalysis

lattice-crypto

lwe

sis

ring-lwe

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Tensor and power bases for SIS?

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.